XMPP Service Operators - 2020-04-19

  1. mitchelmonrooi

    Licaon_Kter: incase LE gets their hand on the server

  2. mitchelmonrooi

    Would it be possible for them to somehow get the whiped msgs back?

  3. Licaon_Kter

    mitchelmonrooi: you use OMEMO, they get they're hands but they can't decrypt

  4. Martin

    >18.04.20 22:38:36 - mdosch.de: Establishing a secure connection from mdosch.de to jabber.org failed. Certificate hash: a360db6f6d8fec07e09ab62c0b6e4026669e25208dbcafb14f59b3bfda875627. Error with certificate 0: certificate has expired.

  5. Martin

    Checking it with `testssl -t xmpp --xmpphost jabber.org hermes2.jabber.org:5269` fails, dunno why: >hermes2.jabber.org:5269 doesn't seem to be a TLS/SSL enabled server

  6. Martin

    MattJ: Is it you already controlling this as testssl says the machine is xmpp.org: >rDNS (208.68.163.218): xmpp.org.

  7. MattJ

    Martin: jabber.org is a separate team and separate server, but yes, I'm on both teams and I have access

  8. MattJ

    But I don't have a clue how to fix the expired cert

  9. MattJ

    I tried last time

  10. Martin

    MattJ: But why does the rDNS lookup for jabber.org resolves to xmpp.org then?

  11. MattJ

    Bug in the DNS I guesw ✎

  12. MattJ

    Bug in the DNS I guess ✏

  13. Martin

    First I thought I made it wrong and checked xmpp.org instead of jabber.org but I confirmed I checked jabber.org :D

  14. Martin

    Otherwise I can just file an issue on github. Last time stpeter took care of it.

  15. MattJ

    Yes, he has the knack

  16. MattJ

    It's his primary server so he'll notice it

  17. MattJ

    When he logs in

  18. MattJ

    Hopefully this will be the last time

  19. Martin

    https://github.com/stpeter/jabberdotorg/issues/19

  20. MattJ

    Thanks

  21. Martin

    Yeah, I think it will get a lot better when you are taking care of it. :)

  22. Martin

    OK, testssl works against the c2s port and it is clearly expired: https://github.com/stpeter/jabberdotorg/issues/19#issuecomment-616079404

  23. Martin

    stpeter is not happy about Neustradamus? https://github.com/stpeter/jabberdotorg/issues/17

  24. Maranda

    edhelas: yes ppl "does", even because for certain things Windows does its job, while *nix just tries and fails miserably trying to.

  25. Maranda

    While for others it's the exact opposite, which is why I find all this Vs. fanboysm ridiculous

  26. Licaon_Kter

    Martin, no one is...

  27. Maranda

    Hmm I really wonder if any of the hacks I did to Metronome's service user account somehow are managing to trample on libevent

  28. Maranda mutters systemctl mutters