Uploaded image for project: 'ejabberd development'
  1. ejabberd development
  2. EJAB-209

ejabberd should present the entire certificate chain

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: ejabberd 1.1.0, ejabberd 1.1.1, ejabberd 1.1.2, ejabberd 1.1.3, ejabberd 1.1.4
    • Fix Version/s: ejabberd 2.0.0
    • Component/s: Crypto
    • Labels:
      None

      Description

      ejabberd is not currently presenting the entire certificate chain.

      See discussion on ejabberd mailing list:

      Some previous reports were wondering if the patch could cause the following error after a while:
      error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol

      preventing actual use of SSL.
      See: http://yo.jabber.ru/bugzilla/show_bug.cgi?id=46

      We probably must make some further test before integration.

        Activity

        Hide
        mremond@process-one.net Mickaël Rémond added a comment -

        According to feedback from production site, this patch works correctly.

        Show
        mremond@process-one.net Mickaël Rémond added a comment - According to feedback from production site, this patch works correctly.
        Hide
        mremond@process-one.net Mickaël Rémond added a comment -

        Works ok since several months on jabber.org.
        Badlop checked and it works.
        More testing is probably needed to detect possible incompabilities with different OpenSSL versions.

        Show
        mremond@process-one.net Mickaël Rémond added a comment - Works ok since several months on jabber.org. Badlop checked and it works. More testing is probably needed to detect possible incompabilities with different OpenSSL versions.
        Hide
        mremond@process-one.net Mickaël Rémond added a comment -
        Show
        mremond@process-one.net Mickaël Rémond added a comment - Commited in SVN Changeset #841: https://forge.process-one.net/changelog/ejabberd/?cs=841
        Hide
        mremond@process-one.net Mickaël Rémond added a comment -

        Reopened to change category (to beautify Web Changelog)

        Show
        mremond@process-one.net Mickaël Rémond added a comment - Reopened to change category (to beautify Web Changelog)

          People

          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development