Re: Server with SSL support ...

Adding to my previous post,

I see following error messages while server booting....
  C2S : sx (ssl.c:48) verify error:num=18:self signed certificate:depth=0:/CN=192.168.1.5

  SM  : sx (ssl.c:48) verify error:num=18:self signed certificate:depth=0:/CN=192.168.1.5
 
when I looked into ssl.c line 48 and error code 18 is 

18 X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT: self signed certificate
the passed certificate is self signed and the same certificate cannot be
found in the list of trusted certificates. can anybody tell me what wrong with my self signed certificate or something else...

regards
Purush



________________________________
From: Purushottam R S <[email protected]>
To: [email protected]
Sent: Wed, 16 December, 2009 11:33:32 AM
Subject: [jadmin] Server with SSL support ...


Hi all,

I have compiled and installed jabberd2. But client with SSL request is not going through.
However client with plain text authorization etc.. are passing. The same client code(pidgin) works with gtalk server and ejabberd server.

Using 5222 port with encryption option. While creating user, I get following error at client 
"You require encryption, but it is not available on server"

I have followed steps to configure for SSL. Attached all xml files.(Since server is in local LAN, kept domain name as 192.168.1.5)
While creating certificate, common name , I gave as "192.168.1.5"

Server side logs listed below .

Please let me know what I am missing...

regards
Purush
---------------------------------------------------------
On server side log prints like this:
====================================================
C2S : Wed Dec 16 11:08:42 2009 [notice] [8] [192.168.1.55, port=49822] connect
C2S : sx (sx.c:51) allocated new sx for 8
C2S : sx (server.c:236) doing server init for sx 8
C2S : sx (server.c:251) waiting for stream header
C2S : sx (server.c:254) tag 8 event 0 data 0x0
C2S : Wed Dec 16 10:44:36 2009 c2s.c:35 want read
C2S : Wed Dec 16 11:08:42 2009 [notice] [8] [192.168.1.55, port=49822] disconnect jid=unbound, packets: 0
C2S : Wed Dec 16 10:44:36 2009 c2s.c:525 read action on fd 8
C2S : sx (io.c:191) 8 ready for reading
C2S : sx (io.c:197) tag 8 event 2 data 0x80b4598
C2S : Wed Dec 16 10:44:36 2009 c2s.c:45 reading from 8
C2S : Wed Dec 16 10:44:36 2009 c2s.c:104 read 22 bytes
C2S : sx (io.c:216) passed 22 read bytes
C2S : sx (chain.c:93) calling io read chain
C2S : sx (io.c:240) decoded read data (22 bytes): <?xml version='1.0' ?>
C2S : Wed Dec 16 10:44:36 2009 c2s.c:525 read action on fd 8
C2S : sx (io.c:191) 8 ready for reading
C2S : sx (io.c:197) tag 8 event 2 data 0x80a9fc8
C2S : Wed Dec 16 10:44:36 2009 c2s.c:45 reading from 8
C2S : Wed Dec 16 10:44:36 2009 c2s.c:104 read 116 bytes
C2S : sx (io.c:216) passed 116 read bytes
C2S : sx (chain.c:93) calling io read chain
C2S : sx (io.c:240) decoded read data (116 bytes): http://etherx.jabber.org/streams' version='1.0'>
C2S : sx (server.c:118) stream request: to 192.168.1.5 from (null) version 1.0
C2S : sx (server.c:133) 8 state change from 0 to 1
C2S : sx (server.c:151) stream id is 19s6xxt0anoi1s17a7r1wf5qgtzty340cw69u0a4
C2S : Wed Dec 16 10:44:36 2009 ack.c:30 hacking ack namespace decl onto stream header
C2S : sx (server.c:181) prepared stream response: http://etherx.jabber.org/streams' xmlns='jabber:client' from='192.168.1.5' version='1.0' id='19s6xxt0anoi1s17a7r1wf5qgtzty340cw69u0a4' xmlns:ack='http://www.xmpp.org/extensions/xep-0198.html#ns'>
C2S : sx (io.c:256) tag 8 event 1 data 0x0
C2S : Wed Dec 16 10:44:36 2009 c2s.c:40 want write
C2S : Wed Dec 16 10:44:36 2009 c2s.c:539 write action on fd 8
C2S : sx (io.c:328) 8 ready for writing
C2S : sx (io.c:286) encoding 245 bytes for writing: http://etherx.jabber.org/streams' xmlns='jabber:client' from='192.168.1.5' version='1.0' id='19s6xxt0anoi1s17a7r1wf5qgtzty340cw69u0a4' xmlns:ack='http://www.xmpp.org/extensions/xep-0198.html#ns'>
C2S : sx (chain.c:79) calling io write chain
C2S : sx (io.c:349) handing app 245 bytes to write
C2S : sx (io.c:350) tag 8 event 3 data 0x80b4598
C2S : Wed Dec 16 10:44:36 2009 c2s.c:142 writing to 8
C2S : Wed Dec 16 10:44:36 2009 c2s.c:146 245 bytes written
C2S : sx (server.c:29) stream established
C2S : sx (server.c:39) 8 state change from 1 to 3
C2S : sx (server.c:40) tag 8 event 4 data 0x0
C2S : sx (server.c:45) building features nad
C2S : sx (address.c:34) adding address feature
C2S : sx (sasl_gsasl.c:355) offering sasl mechanisms
C2S : sx (sasl_gsasl.c:766) in _sx_sasl_gsasl_callback, property: 5
C2S : sx (sasl_gsasl.c:766) in _sx_sasl_gsasl_callback, property: 6
C2S : sx (sasl_gsasl.c:375) offering mechanism: PLAIN
C2S : sx (sasl_gsasl.c:375) offering mechanism: DIGEST-MD5
C2S : Wed Dec 16 10:44:36 2009 bind.c:38 not auth'd, offering auth and register
C2S : sx (io.c:383) tag 8 event 0 data 0x0
C2S : Wed Dec 16 10:44:36 2009 c2s.c:35 want read
C2S : Wed Dec 16 10:44:36 2009 c2s.c:539 write action on fd 8
C2S : sx (io.c:328) 8 ready for writing
C2S : sx (io.c:286) encoding 391 bytes for writing: http://etherx.jabber.org/streams'>
192.168.1.55'>192.168.1.55'>http://affinix.com/jabber/address'>192.168.1.55PLAIN DIGEST-MD5 http://jabber.org/features/iq-auth'/> http://jabber.org/features/iq-register'/>
C2S : sx (chain.c:79) calling io write chain
C2S : sx (io.c:349) handing app 391 bytes to write
C2S : sx (io.c:350) tag 8 event 3 data 0x80b4598
C2S : Wed Dec 16 10:44:36 2009 c2s.c:142 writing to 8
C2S : Wed Dec 16 10:44:36 2009 c2s.c:146 391 bytes written
C2S : sx (io.c:383) tag 8 event 0 data 0x0
C2S : Wed Dec 16 10:44:36 2009 c2s.c:35 want read
C2S : Wed Dec 16 10:44:37 2009 c2s.c:525 read action on fd 8
C2S : sx (io.c:498) 8 state change from 3 to 6
C2S : sx (io.c:499) tag 8 event 7 data 0x0
C2S : Wed Dec 16 10:44:37 2009 c2s.c:544 close action on fd 8
C2S : sx (sx.c:68) freeing sx for 8
C2S : sx (sx.c:101) freeing 5 env plugins
C2S : Wed Dec 16 11:08:42 2009 c2s.c:562 accept action on fd 8
ROUT: Wed Dec 16 11:07:59 2009 main.c:456 next time check at 1260941939
S2S : Wed Dec 16 11:07:59 2009 main.c:800 next time check at 1260941939
====================================================================



________________________________
 The INTERNET now has a personality. YOURS! See your Yahoo! Homepage.


      The INTERNET now has a personality. YOURS! See your Yahoo! Homepage. http://in.yahoo.com/

_______________________________________________
JAdmin mailing list
FAQ: http://www.jabber.org/discussion-lists/jadmin-faq
Forum: http://www.jabberforum.org/forumdisplay.php?f=19
Info: http://mail.jabber.org/mailman/listinfo/jadmin
Unsubscribe: [email protected]
_______________________________________________