Trying to connect an Android device to my ejabberd nethserver 8

Hello @support_team @mrmarkuz ,

I’m attempting to connect my Android phone to my NS8 ejabberd. I’m using an app called Conversations (ejabberd/xmpp) by Daniel Gultsch.

When I try to connect, it keeps coming across a self-signed certificate of ns8.test even though have installed my own SSL certificate using letsencrypt.

On my phone, it keeps giving me the following error “encounter problem during xmpp connection:java.security.cert.CertificateException: hostname verification of certificate failed. Certificate does not authenticate swaslab.ca”

Please assist with how I force ejabberd on my NS8 to use my SSL Certificate.

Thank you.

Maybe this thread helps?

1 Like

The apps like ejabberd obtain their own certificate when let’s encrypt is enabled in the app settings. They must not be requested on the TLS certificates page.
If you requested a certificate for ejabberd on the TLS cert page, please delete it.

Servus @mrmarkuz

I have the same problem here. I installed Ejabberd and activated “Request certificate from LE.” However, this automatically ends up in the TLS certificates. And under HTTP routes, there is no entry for the FQDN that I assigned to Elabberd.

1 Like

Thanks @transocean, I can confirm that the ejabberd cert is listed on the TLS cert page.
I thought that the app certs aren’t listed anymore but it seems only web applications aren’t listed.
Ejabberd doesn’t need own HTTP routes because it’s not a web application and the webadmin runs on the node FQDN on port 5280.

@greavette I tested using Conversations with Ejabberd but it doesn’t accept the LE cert by default:

After allowing the certificate, Conversations worked without error.

Could it be that the domain is already used for another app?
Is there a difference when using a subdomain like jabber.domain.tld as ejabberd domain?

1 Like