[Juser] jabber.org service notice

Jonathan Siegle jsiegle at psu.edu
Mon Mar 19 12:02:17 CDT 2007


Peter Saint-Andre said the following on 3/16/07 11:03 PM:
> On Sat, Mar 17, 2007 at 12:41:00AM +0100, Albert Holm wrote:
>> Den Friday 16 March 2007 20.36.36 skrev Peter Saint-Andre:
>>> This weekend we will upgrade the jabber.org IM service to version 1.1.3
>>> of the ejabberd software and apply a patch for proper handling of our
>>> server's digital certificate. 
>> Is it a patch that is known to work? The only patch to send the whole 
>> certificate chain I've seen is 
>> <http://yo.jabber.ru/bugzilla/show_bug.cgi?id=46>, also referenced from 
>> <https://support.process-one.net/browse/EJAB-209>, which is known to stop 
>> accepting connections after a while.
> 
> Hrm, that seems bad, eh? :)
> 
> Step one is to upgrade to 1.1.3 -- we may wait until 1.1.4 for the
> cert-chain fix.
> 
> /psa
> 

The patch has been on the machine for a day now. I finally figured out 
the trust chain problem. Now if many clients are getting "The hostname 
does not match the one the certificate was issued to" we will craft a 
new certificate.

-Jonathan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3357 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://mail.jabber.org/pipermail/juser/attachments/20070319/a2ae2e6c/attachment-0001.bin>


More information about the JUser mailing list