Hi Wenjuanfu,

it would be more helpful if you could provide the relevant parts of
your components configuration.
Furthermore, try running your components, especially the router, in
debug mode (with -D), and have a look at that. Watch out, it spills a
lot of information.

A blind guess is that the jabber server isn't satisfied with the trust
chain of your self-signed certificate.

Best,
jean

On 12/5/07, 付文娟 <[EMAIL PROTECTED]> wrote:
>
>
> Hi,
> My jabberd2 server can just  work in the default mode.When i configure TLS
> according to Jabberd 2 Installation and Administration Guide
> and generate  CA according to
> http://jabberd.jabberstudio.org/2/docs/jabberd_guide.html#ssl_key";
>   openssl req -new -x509 -newkey rsa:1024 -days 3650 -keyout privkey.pem
> -out server.pem
> //the Common name is my jabberd server name
>   openssl rsa -in privkey.pem -out privkey.pem
>   cat privkey.pem >> server.pem
>   rm privkey.pem
>   mv server.pem /usr/local/etc/jabberd/server.pem
>   chown root:jabber /usr/local/etc/jabberd/server.pem
>   chmod 640 /usr/local/etc/jabberd/server.pem
>
> When  I start jabberd server,I can not make all componet work!
>
> The error from the syslog is :
> Thu Nov 29 14:38:33 2007 [notice] error from router: SSL handshake error
> (error:14090086:SSL
> routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify
> failed)
>
> The error from debug infomation is :
> S2S : sx (ssl.c:52) verify error:num=18:self signed
> certificate:depth=0:/C=GB/ST=Berkshire/L=Newbury/O=My
> Company Ltd/CN=fuwenjuan.csi
>
>
> when i use commands: netstat -a
> the result is this:
>
> tcp        0      0 localhost.csi:5347          localhost.csi:32852
> ESTABLISHED
> tcp        0      0 localhost.csi:5347          localhost.csi:32853
> ESTABLISHED
> tcp        0      0 localhost.csi:5347          localhost.csi:32854
> ESTABLISHED
> tcp        0      0 localhost.csi:5347          localhost.csi:32855
> ESTABLISHED
> tcp        0      0 localhost.csi:32855         localhost.csi:5347
> ESTABLISHED
> tcp        0      0 localhost.csi:32854         localhost.csi:5347
> ESTABLISHED
> tcp        0      0 localhost.csi:32853         localhost.csi:5347
> ESTABLISHED
> tcp        0      0 localhost.csi:32852         localhost.csi:5347
> ESTABLISHED
>
>
> Who can tell why or help me?
>
>
>
>
> Best regards!
>
>
>
> --
> from:wenjuanfu
> gmail:[EMAIL PROTECTED]
> _______________________________________________
> Jabberd2 mailing list
> [email protected]
> http://lists.xiaoka.com/listinfo.cgi/jabberd2-xiaoka.com
>
>
_______________________________________________
Jabberd2 mailing list
[email protected]
http://lists.xiaoka.com/listinfo.cgi/jabberd2-xiaoka.com

Reply via email to