processone / processone/ejabberd
Failed to find a certificate matching the domain in SNI extension
Open
Nobody has claimed this yet.
- Dominant language
- Erlang
- Stars
- 6.7k
- Forks
- 1.6k
- PR merge metrics
- No merged PRs in 30d
Description
Environment
- ejabberd version: 20.01
- Erlang version:
Erlang (SMP,ASYNC_THREADS,HIPE) (BEAM) emulator version 10.7.2 - OS: Arch Linux ARM
- Installed from: distro package
Errors from error.log/crash.log
2020-05-24 11:08:04.574298+12:00 [warning]
<0.518.0>@ejabberd_c2s:process_terminated/2:312 (tls|<0.518.0>)
Failed to secure c2s connection: TLS failed:
Failed to find a certificate matching the domain in SNI extension:
error:1422E0EA:SSL routines:final_server_name:callback failed
Bug description
After a recent update of both certbot and ejabberd, I can no longer bring up the server. It starts up normally, and then dies with the error pasted.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the TLS failure reported from ejabberd_c2s and compare the behavior before and after the certbot and ejabberd updates described in the issue. Reproduce the SNI certificate mismatch using the reported environment where possible; done means the server accepts the affected c2s connection without the certificate-matching error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- erlang
- Domain
- networking, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100