Ejabberd: Enable BOSH with HTTPS

Created on 26 Jul 2019  路  3Comments  路  Source: processone/ejabberd

I want to enable HTTPS for BOSH Connection
https://amchart.consilx.com:5281/http-bind

Response

This page isn鈥檛 working amchart.consilx.com didn鈥檛 send any data.
ERR_EMPTY_RESPONSE

Config Detail
Screenshot from 2019-07-26 17-00-08

ejabberd.log

[debug] <0.1809.0>@ejabberd_http:init:151 S: [{[<<"admin">>],ejabberd_web_admin},{[<<"http-bind">>],mod_bosh}]
[info] <0.361.0>@ejabberd_listener:accept:238 (<0.1809.0>) Accepted connection 14.142.204.195:59094 -> 172.31.45.128:5281
[info] <0.361.0>@ejabberd_listener:accept:238 (<0.1809.0>) Accepted connection 14.142.204.195:59094 -> 172.31.45.128:5281
[info] <0.361.0>@ejabberd_listener:accept:238 (<0.1810.0>) Accepted connection 14.142.204.195:59096 -> 172.31.45.128:5281

This work properly when

   port: 5281
   ip: "0.0.0.0"
   module: ejabberd_http
   web_admin: true
   http_bind: true
   # tls: true

When I enable _tls:true_ all issue starts

The node ejabberd@localhost is started with status: started
ejabberd 18.12.97 is running in that node

Can anyone help me out.
Thank in advance

BOSH Question

Most helpful comment

So, visiting the BOSH page when tls:true fails.

I've installed exactly your ejabberd version, configured like this:

  -
    port: 5280
    ip: "::"
    module: ejabberd_http
    tls: false
    request_handlers:
      "/admin": ejabberd_web_admin
      "/bosh": mod_bosh
  -
    port: 5281
    ip: "::"
    module: ejabberd_http
    tls: true
    request_handlers:
      "/admin": ejabberd_web_admin
      "/bosh": mod_bosh

Then I can visit with a web browser those pages:

http://localhost:5280/bosh/
https://localhost:5281/bosh/

they show an informative text, and BOSH works with Tkabber and Gajim using both URLs. I can also visit the webadmin pages:

http://localhost:5280/admin/
https://localhost:5281/admin/

Configure the 5280 and 5281 listeners like I do, then visit the corresponding BOSH pages, and also the webadmin pages. Are you able to visit the webadmin pages when tls:true , or does it also fail like with BOSH? If that's the case, then the problem is not in BOSH, the problem is in encryption.

You can also try installing ejabberd from a binary installer, which includes the required libraries, just to check if that works.

All 3 comments

So, visiting the BOSH page when tls:true fails.

I've installed exactly your ejabberd version, configured like this:

  -
    port: 5280
    ip: "::"
    module: ejabberd_http
    tls: false
    request_handlers:
      "/admin": ejabberd_web_admin
      "/bosh": mod_bosh
  -
    port: 5281
    ip: "::"
    module: ejabberd_http
    tls: true
    request_handlers:
      "/admin": ejabberd_web_admin
      "/bosh": mod_bosh

Then I can visit with a web browser those pages:

http://localhost:5280/bosh/
https://localhost:5281/bosh/

they show an informative text, and BOSH works with Tkabber and Gajim using both URLs. I can also visit the webadmin pages:

http://localhost:5280/admin/
https://localhost:5281/admin/

Configure the 5280 and 5281 listeners like I do, then visit the corresponding BOSH pages, and also the webadmin pages. Are you able to visit the webadmin pages when tls:true , or does it also fail like with BOSH? If that's the case, then the problem is not in BOSH, the problem is in encryption.

You can also try installing ejabberd from a binary installer, which includes the required libraries, just to check if that works.

Thanks. Let me check and update you

Thank you. That worked...... :100: :+1:

Was this page helpful?
0 / 5 - 0 ratings

Related issues

ForGuru picture ForGuru  路  4Comments

Vshnv picture Vshnv  路  4Comments

cromain picture cromain  路  3Comments

licaon-kter picture licaon-kter  路  4Comments

haegar picture haegar  路  4Comments