[jitsi-users] Can't connect with accounts from jabber.ccc.de and my own server


#1

Hello,

I would like to use Jitsi to communicate with voice and video via XMPP.
I also started to set up my own ejabberd server and managed to connect
to it.

After changing some values in the server configuration to be able to
connect to other XMPP servers, Jitsi won't connect anymore. It's all
about s2s connection with PFS. At the same time I realized that Jitsi
isn't connecting anymore to my account on jabber.ccc.de.

The message I get after a while of trying is not useful. As I am using a
German GUI it is in German too and saying something like connection
failed, check your settings and contact the network admin.

I still get a connection with the server from is-a-furry.org and I also
can easily connect the ccc and my own server with Pidgin and without any
special settings.

I tried to find a hint in the Jitsi menu and settings. I reinstalled the
program and created a new profile, but nothing changes.

What can I do to use Jitsi?

Bye
Jan


#2

Hi Jan,

it's not Jitsi which does have the problem, it's your ejabberd setup.

s2s connections use TLS, you need to enable it correctly, and if the
other server uses strict setups ( enforcing TLS with working certs ),
you also need to have a valid TLS Cert in place. You need that for your
jitsi to ejabberd connection also, should not be the big problem.

cu,
Marius

ยทยทยท

Am 09.08.2017 um 18:09 schrieb Jan:

Hello,

I would like to use Jitsi to communicate with voice and video via XMPP.
I also started to set up my own ejabberd server and managed to connect
to it.

After changing some values in the server configuration to be able to
connect to other XMPP servers, Jitsi won't connect anymore. It's all
about s2s connection with PFS. At the same time I realized that Jitsi
isn't connecting anymore to my account on jabber.ccc.de.


#3

I would like to use Jitsi to communicate with voice and video via XMPP.
I also started to set up my own ejabberd server and managed to connect
to it.

After changing some values in the server configuration to be able to
connect to other XMPP servers, Jitsi won't connect anymore. It's all
about s2s connection with PFS. At the same time I realized that Jitsi
isn't connecting anymore to my account on jabber.ccc.de.

jabber.ccc.de is still using CA Cert with their stupid MD5 root certificate. Since Java (along with all other applications and operating systems) doesn't accept MD5 certificates anymore, you're out of luck with jabber.ccc.de. Your best bet would be to convince them to finally use a proper certificate (e.g. from letsencrypt or any other well-known trusted CA).

The message I get after a while of trying is not useful. As I am using a
German GUI it is in German too and saying something like connection
failed, check your settings and contact the network admin.

I still get a connection with the server from is-a-furry.org and I also
can easily connect the ccc and my own server with Pidgin and without any
special settings.

If Pidgin connects "just like that", then it's not unlikely that something's wrong with their TLS validation.

I tried to find a hint in the Jitsi menu and settings. I reinstalled the
program and created a new profile, but nothing changes.

What can I do to use Jitsi?

That depends on your operating system. You need to import the CA Cert root certificate.

Bye
Jan

Ingo