[jadmin] s2s encrypted connection

Sergio Gorelyshev cto at postlance.ru
Mon Apr 28 08:15:54 CDT 2008


Hi all.

I'm trying to setup my jabber14 server with ability to communicate  
with external jabber-based servers. It wokrs fine but only in  
unencrypted mode :(
I tried it with google talk as well as with other "pure" jabber  
servers and all the same. Forcing TLS connection breaks connection at  
all on the handshake stage.

Here is my config:

  <service id="dnsrv">
     <host/>
     <load>
       <dnsrv>/usr/local/jabber14/lib/libjabberddnsrv.so</dnsrv>
     </load>
     <dnsrv xmlns="jabber:config:dnsrv">
       <resend service="_xmpp-server._tcp">s2s</resend>
       <resend service="_jabber._tcp">s2s</resend>
       <resend>s2s</resend>
     </dnsrv>
   </service>

   <service id="s2s">
     <load>
       <dialback>/usr/local/jabber14/lib/libjabberddialback.so</ 
dialback>
     </load>
     <dialback xmlns="jabber:config:dialback">
       <host name='gmail.com' tls='force' auth='db' />
       <ip port="5269">xxx.xxx.xxx.xxx</ip>
       <karma>
         <init>50</init>
         <max>50</max>
         <inc>4</inc>
         <dec>1</dec>
         <penalty>-5</penalty>
         <restore>50</restore>
       </karma>
     </dialback>
   </service>

     <tls>
       <credentials>
           <default/>
           <domain>xxx.xxx.xxx.xxx</domain>
           <domain>domain.com</domain>
           <ca type='pem'>/usr/local/jabber14/etc/cacerts.pem</ca>
           <pem private-key="keyfile.key">certfile.crt</pem>
           <compression>LZO DEFLATE NULL</compression>
       </credentials>
     </tls>

What's wrong in my config?
Thanks.


More information about the JAdmin mailing list