How to use ssl certificate in MatriX while connecting to the server (for e.g. Openfire)

martinbach

2009-11-16, 09:29 #1

Member since Mar 2009 · 60 posts
Group memberships: Members

Show profile ·

Link to this post

Subject: How to use ssl certificate in MatriX while connecting to the server (for e.g. Openfire)

Hi Alex,
I alway have (or mean to) disable ssl on server side to get connected to the xmpp server (e.g. Openfire).
What xmpp/MatriX specific (ssl certifiacte) I have to do in the connection process to get connected while ssl is enabled on server side.
Do you have some lines of code ?
Thank you.

( I'm feeling a bit lonely in the Matrix .net forum ;-( )

Thanks,
Martin

Alex

2009-11-16, 20:46 #2

Member since Feb 2003 · 4449 posts · Location: Germany
Group memberships: Administrators, Members

Show profile ·

Link to this post

Quote by martinbach:
I alway have (or mean to) disable ssl on server side to get connected to the xmpp server (e.g. Openfire).
What xmpp/MatriX specific (ssl certifiacte) I have to do in the connection process to get connected while ssl is enabled on server side.
Do you have some lines of code ?

there should be o problems with TLS.YOu can verify server certificates in the OnValidateCertificate callcack.
Here is a snipped from my current example code:

private void xmppClient_OnValidateCertificate(object sender, CertificateEventArgs e)
{
    ValidateCertificate(e);
}
 
private void ValidateCertificate(CertificateEventArgs e)
{
    DisplayEvent("OnValidateCertificate");
   
 
    if (e.SslPolicyErrors == System.Net.Security.SslPolicyErrors.None)
    {
        e.AcceptCertificate = true;
    }
    else
    {
        X509Certificate2UI.DisplayCertificate(new X509Certificate2(e.Certificate));
        if (MessageBox.Show("Accept Certificate", "Certificate", MessageBoxButtons.YesNo) == DialogResult.Yes)
            e.AcceptCertificate = true;
        else
            e.AcceptCertificate = false;                
    }
}

Quote by martinbach:
( I'm feeling a bit lonely in the Matrix .net forum ;-( )

this will hopefully change very soon, because I am working hard to finish release 1.0 for the public.

Alex