XMPP Service Operators - 2021-02-08


  1. mimi89999

    Establishing a secure connection from resolution1.net to lebihan.pl failed. Certificate hash: 6acb6043366fad0e7cff43b8ce413e8646341c4d0ef7f76130c84b5ffbf45a58. Error with certificate 0: unable to get local issuer certificate, unable to verify the first certificate.

  2. mimi89999

    Whoever that is

  3. ernst.on.tour

    This means that the other part (lebihan.pl) didn't offer a cert-chain and your server (resolution1.net) didn't trust the issuer of lebihan.pl cert

  4. ernst.on.tour

    mimi89999: ^

  5. Licaon_Kter

    ernst.on.tour: so LE isn't trusted?

  6. ernst.on.tour

    Yeah

  7. ernst.on.tour

    Lets Encrypt isn't a root-ca

  8. ernst.on.tour

    (by now)

  9. Licaon_Kter

    It is already, or last months change was not about that?

  10. ernst.on.tour

    Last month change was "killed" They would lost to many devices. Their own root isn't known by a lot of browsers, androids, ....

  11. ernst.on.tour

    They do a new contract with IdenTrust (DST Root CA X3) to sign their LE which sign lebihan.pl

  12. Martin

    ernst.on.tour: You read it wrong. That message is from lebihan.pl which refuses the connection from resolution1.net as they provide no valid cert.

  13. Martin

    08.02.21 12:50:01 - Service discovery failed for resolution1.net: Server-to-server connection failed: Remote server's certificate is not trusted

  14. ernst.on.tour

    Maybe ? I think other way round, but mimi should know how his/her server is named (hope so) 😉

  15. mimi89999

    ernst.on.tour: I'm lebihan.pl