CODEWITHSUNDEEP
sslopenssllets-encrypt
Joesse
Joesse

Reputation: 75

use a lets encrypt certificate for another service

I have a Lets Encrypt certificate which works on my Synology NAS using a DDNS name. I want to use the certificate for another service (ejabberd) on another machine (a Raspberry Pi), that would run under the same DDNS name, but on another port. I can download the certificate from the NAS resulting in three files:

ejbberd's configuration needs the certificate file in two places:

###   ===============
###   LISTENING PORTS
listen:
port:5222
[...]
certfile: "/etc/ejabberd/certfile.pem"

and

s2s_use_starttls: optional
s2s_certfile: "/etc/ejabberd/certfile.pem"
s2s_protocol_options:
  - "no_sslv3"

I am not sure which file to use here. I had this working, but the certificate expired.

Upvotes: 0

Views: 180

Answers (1)

Joesse
Joesse

Reputation: 75

It could be done by cat cert.pem chain.pem privkey.pem > certfile.pem Here is a description and also (under appendix) a description of the certfile format. https://www.process-one.net/blog/securing-ejabberd-with-tls-encryption/

Upvotes: 0

Related Questions