[jitsi-dev] Jicofo unable to find valid certification path to requested target


#1

Dear Team,

I'm using Jicofo-Jitsi-meet_2963. After config prosody, I run this
command:

*screen ./jicofo.sh --host=myip --port=5347
--domain=mydomain --secret=YOURSECRET2
--user_domain=auth.mydomain --user_name=focus --user_password=YOURSECRET3 *

Jicofo can connected successful but it can't find the valid certification,
the log is:

Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target

        at
sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)s

        at
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)

        at
java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)

        at
sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:392)

I run the above command with older version of Jicofo on my server, it works
perfectly. Can you guys tell me how to fix this. Thank you.


#2

Hi,

Have you checked: https://github.com/jitsi/jicofo#certificates?

Regards
damencho

···

On Sat, Apr 14, 2018 at 10:27 AM, Trần Hoài Nam <namth4@topica.edu.vn> wrote:

Dear Team,

I'm using Jicofo-Jitsi-meet_2963. After config prosody, I run this
command:

*screen ./jicofo.sh --host=myip --port=5347
--domain=mydomain --secret=YOURSECRET2
--user_domain=auth.mydomain --user_name=focus --user_password=YOURSECRET3 *

Jicofo can connected successful but it can't find the valid certification,
the log is:

Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target

        at sun.security.provider.certpath.SunCertPathBuilder.
build(SunCertPathBuilder.java:141)s

        at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(
SunCertPathBuilder.java:126)

        at java.security.cert.CertPathBuilder.build(
CertPathBuilder.java:280)

        at sun.security.validator.PKIXValidator.doBuild(
PKIXValidator.java:392)

I run the above command with older version of Jicofo on my server, it
works perfectly. Can you guys tell me how to fix this. Thank you.

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev


#3

Dear Damian,

Can you tell me where I can find the "cert.pem" file, I have link the .crt
file to /usr/local/share/ca-certificates but it doesn't work.

Thank you so much.

···

On Sat, Apr 14, 2018 at 11:54 PM, Damian Minkov <damencho@jitsi.org> wrote:

Hi,

Have you checked: https://github.com/jitsi/jicofo#certificates?

Regards
damencho

On Sat, Apr 14, 2018 at 10:27 AM, Trần Hoài Nam <namth4@topica.edu.vn> > wrote:

Dear Team,

I'm using Jicofo-Jitsi-meet_2963. After config prosody, I run this
command:

*screen ./jicofo.sh --host=myip --port=5347
--domain=mydomain --secret=YOURSECRET2
--user_domain=auth.mydomain --user_name=focus --user_password=YOURSECRET3 *

Jicofo can connected successful but it can't find the valid
certification, the log is:

Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target

        at sun.security.provider.certpath.SunCertPathBuilder.build(
SunCertPathBuilder.java:141)s

        at sun.security.provider.certpath.SunCertPathBuilder.engineBuil
d(SunCertPathBuilder.java:126)

        at java.security.cert.CertPathBuilder.build(CertPathBuilder.
java:280)

        at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.
java:392)

I run the above command with older version of Jicofo on my server, it
works perfectly. Can you guys tell me how to fix this. Thank you.

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev


#4

Dear Damian,

After I followed the instruction, it still can't connect successful. The
log is:

the trustAnchors parameter must be non-empty

Can you tell me where I was wrong?

···

On Sun, Apr 15, 2018 at 12:54 AM, Trần Hoài Nam <namth4@topica.edu.vn> wrote:

Dear Damian,

Can you tell me where I can find the "cert.pem" file, I have link the .crt
file to /usr/local/share/ca-certificates but it doesn't work.

Thank you so much.

On Sat, Apr 14, 2018 at 11:54 PM, Damian Minkov <damencho@jitsi.org> > wrote:

Hi,

Have you checked: https://github.com/jitsi/jicofo#certificates?

Regards
damencho

On Sat, Apr 14, 2018 at 10:27 AM, Trần Hoài Nam <namth4@topica.edu.vn> >> wrote:

Dear Team,

I'm using Jicofo-Jitsi-meet_2963. After config prosody, I run this
command:

*screen ./jicofo.sh --host=myip --port=5347
--domain=mydomain --secret=YOURSECRET2
--user_domain=auth.mydomain --user_name=focus --user_password=YOURSECRET3 *

Jicofo can connected successful but it can't find the valid
certification, the log is:

Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target

        at sun.security.provider.certpath.SunCertPathBuilder.build(SunC
ertPathBuilder.java:141)s

        at sun.security.provider.certpath.SunCertPathBuilder.engineBuil
d(SunCertPathBuilder.java:126)

        at java.security.cert.CertPathBuilder.build(CertPathBuilder.jav
a:280)

        at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.j
ava:392)

I run the above command with older version of Jicofo on my server, it
works perfectly. Can you guys tell me how to fix this. Thank you.

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev


#5

I've tried to install on the brand new server, cp .pem file to
ca-certification then update again, install follow quicks install but it
still failed.

···

On Sun, Apr 15, 2018 at 1:22 AM, Trần Hoài Nam <namth4@topica.edu.vn> wrote:

Dear Damian,

After I followed the instruction, it still can't connect successful. The
log is:

the trustAnchors parameter must be non-empty

Can you tell me where I was wrong?

On Sun, Apr 15, 2018 at 12:54 AM, Trần Hoài Nam <namth4@topica.edu.vn> > wrote:

Dear Damian,

Can you tell me where I can find the "cert.pem" file, I have link the
.crt file to /usr/local/share/ca-certificates but it doesn't work.

Thank you so much.

On Sat, Apr 14, 2018 at 11:54 PM, Damian Minkov <damencho@jitsi.org> >> wrote:

Hi,

Have you checked: https://github.com/jitsi/jicofo#certificates?

Regards
damencho

On Sat, Apr 14, 2018 at 10:27 AM, Trần Hoài Nam <namth4@topica.edu.vn> >>> wrote:

Dear Team,

I'm using Jicofo-Jitsi-meet_2963. After config prosody, I run this
command:

*screen ./jicofo.sh --host=myip --port=5347
--domain=mydomain --secret=YOURSECRET2
--user_domain=auth.mydomain --user_name=focus --user_password=YOURSECRET3 *

Jicofo can connected successful but it can't find the valid
certification, the log is:

Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target

        at sun.security.provider.certpath.SunCertPathBuilder.build(SunC
ertPathBuilder.java:141)s

        at sun.security.provider.certpath.SunCertPathBuilder.engineBuil
d(SunCertPathBuilder.java:126)

        at java.security.cert.CertPathBuilder.build(CertPathBuilder.jav
a:280)

        at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.j
ava:392)

I run the above command with older version of Jicofo on my server, it
works perfectly. Can you guys tell me how to fix this. Thank you.

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev


#6

Hi,

This certificate is created by the debian installation scripts and
configured inside prosody.
As you are running from source you need to do the same.
Here is the script:
https://github.com/jitsi/jitsi-meet/blob/master/debian/jitsi-meet-prosody.postinst#L123
There are also some instructions here:
https://github.com/jitsi/jitsi-meet/blob/master/doc/manual-install.md
Your prosody config for auth domain should look like:
https://github.com/jitsi/jitsi-meet/blob/master/doc/example-config-files/prosody.cfg.lua.example#L184

Regards
damencho

···

On Sun, Apr 15, 2018 at 2:40 AM, Trần Hoài Nam <namth4@topica.edu.vn> wrote:

I've tried to install on the brand new server, cp .pem file to
ca-certification then update again, install follow quicks install but it
still failed.

On Sun, Apr 15, 2018 at 1:22 AM, Trần Hoài Nam <namth4@topica.edu.vn> > wrote:

Dear Damian,

After I followed the instruction, it still can't connect successful. The
log is:

the trustAnchors parameter must be non-empty

Can you tell me where I was wrong?

On Sun, Apr 15, 2018 at 12:54 AM, Trần Hoài Nam <namth4@topica.edu.vn> >> wrote:

Dear Damian,

Can you tell me where I can find the "cert.pem" file, I have link the
.crt file to /usr/local/share/ca-certificates but it doesn't work.

Thank you so much.

On Sat, Apr 14, 2018 at 11:54 PM, Damian Minkov <damencho@jitsi.org> >>> wrote:

Hi,

Have you checked: https://github.com/jitsi/jicofo#certificates?

Regards
damencho

On Sat, Apr 14, 2018 at 10:27 AM, Trần Hoài Nam <namth4@topica.edu.vn> >>>> wrote:

Dear Team,

I'm using Jicofo-Jitsi-meet_2963. After config prosody, I run this
command:

*screen ./jicofo.sh --host=myip --port=5347
--domain=mydomain --secret=YOURSECRET2
--user_domain=auth.mydomain --user_name=focus --user_password=YOURSECRET3 *

Jicofo can connected successful but it can't find the valid
certification, the log is:

Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target

        at sun.security.provider.certpath
.SunCertPathBuilder.build(SunCertPathBuilder.java:141)s

        at sun.security.provider.certpath
.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)

        at java.security.cert.CertPathBui
lder.build(CertPathBuilder.java:280)

        at sun.security.validator.PKIXVal
idator.doBuild(PKIXValidator.java:392)

I run the above command with older version of Jicofo on my server, it
works perfectly. Can you guys tell me how to fix this. Thank you.

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev