Process-one
ejabberd
ejabberd@conference.process-one.net
Saturday, January 8, 2022< ^ >
zinid has set the subject to: ejabberd discussions: https://docs.ejabberd.im
Room Configuration
Room Occupants

GMT+0
[00:00:40] Titi leaves the room
[00:03:11] bowlofeggs joins the room
[00:03:13] bowlofeggs joins the room
[00:03:13] nc1236 joins the room
[00:04:25] bowlofeggs leaves the room
[00:06:22] Thomas Lewis joins the room
[00:06:43] bluejames joins the room
[00:06:55] Thomas Lewis leaves the room
[00:07:55] basti leaves the room
[00:09:10] sunblade leaves the room
[00:10:22] marc0s leaves the room: Disconnected: Replaced by new connection
[00:10:23] marc0s joins the room
[00:11:20] doctor leaves the room
[00:11:22] doctor joins the room
[00:12:27] william.chatner leaves the room
[00:14:55] ben leaves the room
[00:15:29] suren leaves the room: Disconnected: Replaced by new connection
[00:16:06] suren joins the room
[00:16:29] sunblade joins the room
[00:17:56] Thomas Lewis joins the room
[00:18:09] Thomas Lewis leaves the room
[00:21:31] schäfchen726 leaves the room
[00:27:07] sunblade joins the room
[00:27:10] kryptos leaves the room
[00:28:10] suren leaves the room: Disconnected: Replaced by new connection
[00:28:12] suren joins the room
[00:28:51] ben joins the room
[00:38:13] ben leaves the room
[00:40:10] bkero leaves the room
[00:41:26] suren leaves the room: Disconnected: Replaced by new connection
[00:41:28] suren joins the room
[00:42:33] marc0s leaves the room: Disconnected: Replaced by new connection
[00:42:33] marc0s joins the room
[00:43:16] kryptos joins the room
[00:47:00] SouL leaves the room
[00:51:42] kryptos leaves the room
[00:51:45] ff leaves the room
[00:52:00] nc1236 leaves the room
[00:52:00] nc1236 leaves the room
[00:52:26] nc1236 joins the room
[00:52:59] dima joins the room
[00:53:36] dima leaves the room
[00:59:55] pprrks joins the room
[01:04:10] kryptos joins the room
[01:04:12] sunblade leaves the room
[01:05:36] pprrks leaves the room: Disconnected: Replaced by new connection
[01:08:42] pprrks joins the room
[01:11:30] kryptos leaves the room
[01:13:29] ij leaves the room
[01:16:39] Titi leaves the room
[01:18:10] Thomas Lewis joins the room
[01:18:36] suren leaves the room: Disconnected: Replaced by new connection
[01:18:38] suren joins the room
[01:19:06] kryptos joins the room
[01:19:19] Thomas Lewis leaves the room
[01:21:53] Millesimus leaves the room
[01:21:55] sunblade joins the room
[01:22:11] pprrks leaves the room: Disconnected: Replaced by new connection
[01:24:16] qy leaves the room
[01:24:21] qy joins the room
[01:27:07] kryptos leaves the room
[01:28:58] malloc leaves the room
[01:36:54] Thomas Lewis joins the room
[01:37:14] Thomas Lewis leaves the room
[01:37:54] marc0s leaves the room: Disconnected: Replaced by new connection
[01:37:54] marc0s joins the room
[01:38:41] pprrks joins the room
[01:40:20] Millesimus joins the room
[01:40:25] Thomas Lewis joins the room
[01:41:28] suren leaves the room: Disconnected: Replaced by new connection
[01:41:30] suren joins the room
[01:42:39] Thomas Lewis leaves the room
[01:42:51] ru_maniac joins the room
[01:43:27] ru_maniac leaves the room
[01:43:39] ru_maniac joins the room
[01:45:12] pprrks leaves the room: Disconnected: Replaced by new connection
[01:45:32] ij joins the room
[01:46:14] bowlofeggs leaves the room
[01:46:50] ru_maniac leaves the room
[01:46:57] ru_maniac joins the room
[01:47:10] carlos joins the room
[01:47:37] ru_maniac leaves the room
[01:48:25] sunblade leaves the room
[01:49:21] carlos leaves the room
[01:49:29] suren leaves the room: Disconnected: Replaced by new connection
[01:49:31] suren joins the room
[01:50:14] sonny leaves the room: Disconnected: No route to host
[01:52:39] sunblade leaves the room
[01:53:36] debacle leaves the room
[01:58:11] Ramiro Romani leaves the room
[02:04:02] kryptos joins the room
[02:06:32] ij leaves the room
[02:07:09] pprrks joins the room
[02:09:12] stp leaves the room
[02:10:31] sunblade joins the room
[02:14:23] stp joins the room
[02:16:44] pprrks leaves the room: Disconnected: Replaced by new connection
[02:19:54] sunblade joins the room
[02:21:41] pprrks joins the room
[02:22:20] isotelo leaves the room
[02:24:30] suren leaves the room: Disconnected: Replaced by new connection
[02:24:32] suren joins the room
[02:27:05] isotelo joins the room
[02:28:48] bowlofeggs joins the room
[02:29:16] bowlofeggs leaves the room
[02:38:10] raver leaves the room
[02:44:40] pprrks leaves the room: Disconnected: Replaced by new connection
[02:44:44] nc1236 leaves the room
[02:45:34] nc1236 joins the room
[02:49:00] sander leaves the room
[02:49:00] Steffen van Bergerem leaves the room
[02:49:00] inkey leaves the room
[02:49:00] inkey leaves the room
[02:49:00] [Alien] leaves the room
[02:49:00] iiro leaves the room
[02:49:02] twl leaves the room
[02:49:12] ru_maniac leaves the room
[02:49:18] acidsys leaves the room
[02:49:23] <sunblade> Is it ok to specify both turn_ipv4_address and turn_ipv6_address for ejabberd_stun module config in ejabberd.yml?
[02:50:03] gooya leaves the room
[02:50:05] pprrks joins the room
[02:55:00] BlackEdge leaves the room
[02:55:00] Dragon_rouge leaves the room
[02:55:01] abba leaves the room
[02:55:01] alex leaves the room
[02:55:01] mikewesten leaves the room
[02:55:37] pprrks leaves the room: Disconnected: Replaced by new connection
[02:56:28] dima joins the room
[03:00:32] eteebo leaves the room: Disconnected: closed
[03:01:25] eteebo joins the room
[03:01:54] <nuron> Mmm works for me sunblade :)
[03:05:30] <sunblade> Ok. Then what should the value of ip be? "0.0.0.0" (default) or "::"? I'm wondering if this option inadvertently restricts whether incoming IPv4 or IPv6 requests are not processed. For example, if I define ip: "::", does that cause IPv4 source addresses to be ignored?
[03:06:29] <nuron> I guess you should enter your public IP you would like to use
[03:06:59] admin leaves the room
[03:07:16] admin joins the room
[03:08:22] <sunblade> No, read the paragraph with "IP address" bold in the documentation: https://docs.ejabberd.im/admin/configuration/listen/
[03:09:04] tekdmn leaves the room
[03:09:31] <nuron> Oh pardon.
I thought you were asking for the value of turn ip.
[03:09:35] <sunblade> I'm not referring to the turn_ipv4_address or turn_ipv6_address property. Only the ip property, which can restrict whether IPv4 or IPv6 is used.
[03:09:45] <nuron> For ip I've set "::"
[03:10:02] Steffen van Bergerem joins the room
[03:10:11] dima leaves the room
[03:10:13] <sunblade> Ok, and that works for incoming IPv4 too?
[03:10:17] nc1236 leaves the room
[03:10:31] apach leaves the room
[03:10:48] <nuron> Not sure but iirc :: means both, ipv6 and v4.
[03:10:53] <nuron> Let's try :)
[03:11:50] <sunblade> Yeah I'm having trouble with TURN so I'm not able to test
[03:11:52] SUN joins the room
[03:11:57] <nuron> :/
[03:13:24] isotelo leaves the room
[03:13:42] apach joins the room
[03:14:04] raver joins the room
[03:15:04] kikuchiyo leaves the room
[03:15:47] admin leaves the room
[03:15:52] <sunblade> But thanks for the info
[03:16:06] nc1236 joins the room
[03:16:42] kikuchiyo joins the room
[03:16:51] mh leaves the room
[03:16:59] mh joins the room
[03:17:19] <nuron> U're welcome
[03:20:26] mikewesten joins the room
[03:20:46] jannic joins the room
[03:20:52] apach leaves the room
[03:21:47] raver leaves the room
[03:22:44] tekdmn joins the room
[03:23:50] apach joins the room
[03:24:31] suren leaves the room: Disconnected: Replaced by new connection
[03:24:33] suren joins the room
[03:27:18] admin joins the room
[03:27:39] kryptos leaves the room
[03:32:09] isotelo joins the room
[03:34:09] pprrks joins the room
[03:36:30] suren leaves the room: Disconnected: Replaced by new connection
[03:36:33] suren joins the room
[03:37:38] Mx2 joins the room
[03:43:52] ij joins the room
[03:47:30] pprrks leaves the room: Disconnected: Replaced by new connection
[03:49:00] mimi89999 leaves the room
[03:53:52] Demo leaves the room
[03:57:01] suren leaves the room: Disconnected: Replaced by new connection
[03:58:49] suren joins the room
[03:59:07] meeson_ joins the room
[04:00:28] abba joins the room
[04:01:10] pprrks joins the room
[04:04:54] ij leaves the room
[04:06:54] pprrks leaves the room: Disconnected: Replaced by new connection
[04:07:15] pprrks joins the room
[04:15:19] Zash leaves the room
[04:28:32] pprrks leaves the room: Disconnected: Replaced by new connection
[04:28:42] pprrks joins the room
[04:28:50] pitchum joins the room
[04:33:10] moparisthebest leaves the room
[04:34:06] pitchum leaves the room
[04:34:16] moparisthebest joins the room
[04:34:31] Ramiro Romani joins the room
[04:38:53] pprrks leaves the room: Disconnected: Replaced by new connection
[04:39:05] pprrks joins the room
[04:44:05] Robbilie leaves the room
[04:44:06] Robbilie joins the room
[04:44:16] pprrks leaves the room: Disconnected: Replaced by new connection
[04:44:30] pprrks joins the room
[04:45:45] suren leaves the room: Disconnected: Replaced by new connection
[04:45:48] suren joins the room
[04:46:54] Thomas Lewis joins the room
[04:49:00] ij joins the room
[04:50:28] Mr.Bash joins the room
[04:50:32] Mr.Bash leaves the room
[04:50:52] DOC joins the room
[04:52:10] <DOC> Hi. can anyone help with an annoying issue i have when setting up a server? Failed inbound s2s EXTERNAL authentication adomain.com -> mydomain.im: certificate not trusted — this is both inboind and outbound. my certs arent trusted. but they all seem fine
[04:52:10] apach leaves the room
[04:52:10] Thomas Lewis leaves the room
[04:53:42] apach joins the room
[04:54:59] <riau.pro> I have similar issue a afew days ago. I am using ejabberd 21.06+bpo on debian 11.
Do you have ```search``` entry at ```/etc/resolv.cont``` ?
[04:55:04] ij leaves the room
[04:56:00] pitchum joins the room
[04:57:11] isotelo leaves the room
[04:57:13] DOC leaves the room
[04:57:32] DOC joins the room
[04:57:46] <DOC> search entry?
[04:57:50] <DOC> can you pleae explain
[04:58:10] daniel leaves the room
[04:58:10] sunblade leaves the room
[04:58:42] apach leaves the room
[04:59:28] SouL joins the room
[05:00:59] admin leaves the room
[05:02:04] isotelo joins the room
[05:03:11] henrik leaves the room
[05:03:18] raver joins the room
[05:03:57] robert_mobil joins the room
[05:06:38] TheCoffeMaker leaves the room
[05:06:53] <moparisthebest> DOC: are there any lines that start with the word "search"
[05:08:52] <DOC> no — but i think the issue is in the letsencrypt cert
[05:09:06] <DOC> i just tested it and i am being told i need an intermediary cert
[05:11:53] isotelo leaves the room
[05:12:04] isotelo joins the room
[05:12:17] admin joins the room
[05:12:53] raver leaves the room
[05:13:13] BlackEdge joins the room
[05:17:27] pprrks leaves the room: Disconnected: Replaced by new connection
[05:17:39] pprrks joins the room
[05:23:46] apach joins the room
[05:24:58] Ramiro Romani leaves the room
[05:25:46] daniel joins the room
[05:26:20] qy leaves the room
[05:26:58] sander joins the room
[05:27:03] lorddavidiii joins the room
[05:27:26] Licaon_Kter leaves the room
[05:29:14] <DOC> the only think i can think of is that ejabberd is somehow using the wrong intermediary cert
[05:31:19] apach leaves the room
[05:31:38] Licaon_Kter leaves the room
[05:33:50] apach joins the room
[05:35:15] Millesimus leaves the room
[05:39:36] teftera joins the room
[05:45:07] suren leaves the room: Disconnected: Replaced by new connection
[05:45:09] suren joins the room
[05:45:37] pod joins the room
[05:46:52] pprrks leaves the room: Disconnected: closed
[05:48:16] suren leaves the room: Disconnected: Replaced by new connection
[05:48:19] suren joins the room
[05:55:47] St0ne leaves the room
[05:56:09] St0ne joins the room
[05:58:25] Millesimus joins the room
[06:01:43] pitchum leaves the room
[06:04:09] pitchum joins the room
[06:08:31] meeson_ leaves the room
[06:09:28] kikuchiyo leaves the room
[06:11:31] meeson_ joins the room
[06:13:23] sunblade joins the room
[06:16:36] St0ne leaves the room
[06:16:55] St0ne joins the room
[06:19:51] DOC leaves the room
[06:24:04] JonNJ joins the room
[06:24:10] sander leaves the room
[06:24:10] sander leaves the room
[06:24:10] sander leaves the room
[06:25:24] Chris joins the room
[06:29:42] sander joins the room
[06:29:56] sander joins the room
[06:31:01] sander joins the room
[06:31:37] ij joins the room
[06:36:02] Mx2 leaves the room
[06:36:38] ij leaves the room
[06:41:02] DOC joins the room
[06:42:13] <DOC> ok maybe my issue is i need to not try to generate the certs myself and just use ACME. the problem here is that "ejabberdctl request-certificate all" always fails. usually because i am missing subdomains… but i dont want to add proxy. and upload.
[06:42:17] <DOC> can i disable them somehow?
[06:42:33] <DOC> on one server i just get a 404 not found
[06:43:50] <DOC> conference.domain, etc. isnt there a way to disalbe those from being used?
[06:44:04] schäfchen726 joins the room
[06:44:37] kikuchiyo joins the room
[06:47:19] isotelo leaves the room
[06:48:13] sunblade leaves the room
[06:48:13] sunblade leaves the room
[06:50:03] antonperst leaves the room
[06:50:04] mirux joins the room
[06:50:05] antonperst joins the room
[06:52:04] isotelo joins the room
[06:52:26] <riau.pro> Maybe you can drop your ejabberd.log here and wait ejabberd experts wake up. Most of them lived in europe means still early morning there.
[06:53:42] writer77 joins the room
[06:56:15] writer77 leaves the room
[06:56:16] writer77 joins the room
[06:57:07] isotelo leaves the room
[07:01:04] Jeroen joins the room
[07:01:33] Jeroen leaves the room
[07:02:04] isotelo joins the room
[07:02:04] robert_mobil joins the room
[07:03:20] dwd joins the room
[07:05:58] DOC leaves the room
[07:06:42] carlo leaves the room
[07:07:00] kikuchiyo leaves the room
[07:07:00] robert_mobil joins the room
[07:07:56] Ramiro Romani leaves the room
[07:11:53] robert_mobil leaves the room
[07:12:58] lorddavidiii leaves the room
[07:13:50] ff joins the room
[07:13:53] dwd leaves the room
[07:13:57] sumpfralle_ leaves the room
[07:13:57] sumpfralle leaves the room
[07:14:00] daniel leaves the room
[07:14:54] Marc joins the room
[07:15:11] kinky_nekoboi joins the room
[07:18:40] p42ity joins the room
[07:18:41] Ramiro Romani joins the room
[07:18:52] schäfchen726 leaves the room
[07:18:57] p42ity leaves the room
[07:20:12] carlo joins the room
[07:24:19] kikuchiyo joins the room
[07:25:47] daniel joins the room
[07:30:50] Jeroen joins the room
[07:31:01] Ramiro Romani joins the room
[07:31:13] Jeroen leaves the room
[07:32:07] Jeroen joins the room
[07:32:34] Jeroen leaves the room
[07:34:54] Marc leaves the room
[07:35:51] Ramiro Romani leaves the room
[07:36:22] Ramiro Romani joins the room
[07:37:22] Licaon_Kter joins the room
[07:38:23] phikoen leaves the room
[07:38:23] phikoen joins the room
[07:39:25] sponji leaves the room
[07:40:03] raver joins the room
[07:40:15] carlo leaves the room
[07:40:20] Dead Head joins the room
[07:41:21] sponji joins the room
[07:48:44] bkero joins the room
[07:50:15] mirux leaves the room
[07:50:20] mirux joins the room
[07:52:11] kinky_nekoboi leaves the room
[07:56:39] carlo joins the room
[07:58:12] pitchum joins the room
[08:00:56] suren leaves the room: Disconnected: closed
[08:01:02] suren joins the room
[08:04:32] pitchum leaves the room
[08:05:38] kinky_nekoboi joins the room
[08:05:40] <Holger> sunblade:
> Ok, and that works for incoming IPv4 too?
Depends on OS (configuration). On Linux typically yes, on BSD typically no.
[08:08:38] kinky_nekoboi leaves the room
[08:08:44] kinky_nekoboi joins the room
[08:09:01] kinky_nekoboi leaves the room
[08:09:01] meeson_ leaves the room
[08:09:06] pitchum joins the room
[08:09:42] Tim leaves the room
[08:09:43] Tim joins the room
[08:10:35] Amolith leaves the room
[08:10:41] isotelo leaves the room
[08:11:59] meeson_ joins the room
[08:12:04] isotelo joins the room
[08:16:05] suren leaves the room: Disconnected: Replaced by new connection
[08:16:20] pprrks joins the room
[08:17:39] suren joins the room
[08:21:28] robert_mobil joins the room
[08:22:03] pprrks leaves the room: Disconnected: Replaced by new connection
[08:23:45] Marc joins the room
[08:25:17] suren leaves the room: Disconnected: Replaced by new connection
[08:25:21] suren joins the room
[08:25:27] pprrks joins the room
[08:25:51] pitchum leaves the room
[08:26:04] Holger joins the room
[08:27:19] Marc leaves the room
[08:27:50] robert_mobil leaves the room
[08:29:08] danielepiccoli joins the room
[08:32:49] pod joins the room
[08:34:09] doctor joins the room
[08:34:50] Tim leaves the room
[08:34:52] Tim joins the room
[08:36:27] mike joins the room
[08:39:20] p42ity joins the room
[08:39:30] p42ity leaves the room
[08:40:42] isotelo leaves the room
[08:40:55] Marc joins the room
[08:42:04] isotelo joins the room
[08:43:48] Licaon_Kter joins the room
[08:46:06] danielepiccoli joins the room
[08:46:18] Marc leaves the room
[08:52:36] schäfchen726 joins the room
[08:53:06] marc0s leaves the room: Disconnected: Replaced by new connection
[08:53:06] marc0s joins the room
[08:54:24] inkey joins the room
[08:55:03] marc0s leaves the room: Disconnected: Replaced by new connection
[08:55:04] marc0s joins the room
[08:57:48] alex joins the room
[08:57:49] alex leaves the room
[08:58:23] alex joins the room
[08:58:26] alex leaves the room
[09:01:39] pprrks leaves the room: Disconnected: Replaced by new connection
[09:02:36] suren leaves the room: Disconnected: Replaced by new connection
[09:02:39] suren joins the room
[09:04:18] alex joins the room
[09:04:25] alex leaves the room
[09:05:09] alex joins the room
[09:07:46] Marc joins the room
[09:08:12] mirux joins the room
[09:10:52] suren leaves the room: Disconnected: Replaced by new connection
[09:11:05] suren joins the room
[09:11:34] Marc leaves the room
[09:13:39] pprrks joins the room
[09:14:00] robert_mobil joins the room
[09:14:01] daniel leaves the room
[09:14:42] pitchum joins the room
[09:16:08] karme joins the room
[09:16:22] Marc joins the room
[09:17:08] eteebo leaves the room: Disconnected: Replaced by new connection
[09:17:09] eteebo joins the room
[09:17:34] bkero leaves the room
[09:19:38] bkero leaves the room
[09:19:38] isotelo leaves the room
[09:23:45] Licaon_Kter leaves the room
[09:23:46] Licaon_Kter joins the room
[09:24:40] pitchum leaves the room
[09:25:29] pprrks leaves the room: Disconnected: Replaced by new connection
[09:25:36] daniel joins the room
[09:26:25] suren leaves the room: Disconnected: Replaced by new connection
[09:27:59] ij joins the room
[09:29:40] suren joins the room
[09:32:11] abba leaves the room
[09:32:33] debacle joins the room
[09:35:09] eteebo leaves the room: Disconnected: Replaced by new connection
[09:35:10] eteebo joins the room
[09:38:02] bkero joins the room
[09:39:10] Marc leaves the room
[09:42:22] p42ity joins the room
[09:42:36] pprrks joins the room
[09:43:13] mike leaves the room
[09:43:15] p42ity leaves the room
[09:43:52] Titi joins the room
[09:45:52] isotelo joins the room
[09:46:00] mimi89999 joins the room
[09:46:21] eteebo leaves the room: Disconnected: Replaced by new connection
[09:46:22] eteebo joins the room
[09:49:14] xi leaves the room
[09:49:22] suren leaves the room: Disconnected: Replaced by new connection
[09:49:24] suren joins the room
[09:50:17] Dragon_rouge joins the room
[09:55:03] ij joins the room
[09:56:07] ij leaves the room
[09:56:09] ij joins the room
[09:56:31] xi joins the room
[09:56:46] suren leaves the room: Disconnected: Replaced by new connection
[09:58:12] karme leaves the room
[09:58:14] suren joins the room
[09:58:31] eteebo leaves the room: Disconnected: Replaced by new connection
[09:58:32] eteebo joins the room
[10:00:53] ij leaves the room
[10:00:53] inkey leaves the room
[10:02:03] mirux leaves the room: Disconnected: Received SIGTERM
[10:02:03] mirux leaves the room: Disconnected: Received SIGTERM
[10:02:19] robert_mobil leaves the room
[10:03:24] kikuchiyo leaves the room
[10:04:02] marc joins the room
[10:06:23] danielepiccoli leaves the room
[10:07:10] kikuchiyo joins the room
[10:07:39] abba joins the room
[10:08:03] Marc joins the room
[10:09:38] stp leaves the room
[10:11:19] Marc leaves the room
[10:12:24] karme joins the room
[10:14:40] danielepiccoli joins the room
[10:14:43] Titi joins the room
[10:14:57] Marc joins the room
[10:15:01] eteebo leaves the room: Disconnected: Replaced by new connection
[10:15:02] eteebo joins the room
[10:15:59] bung joins the room
[10:17:58] Marc leaves the room
[10:18:01] Ramiro Romani leaves the room
[10:19:15] stp joins the room
[10:19:29] mirux joins the room
[10:20:48] mirux joins the room
[10:21:28] mike joins the room
[10:21:33] dwd joins the room
[10:21:42] Titi leaves the room
[10:21:43] inkey joins the room
[10:22:00] raver joins the room
[10:22:12] suren leaves the room: Disconnected: Replaced by new connection
[10:22:43] pprrks leaves the room: Disconnected: Replaced by new connection
[10:23:51] ij leaves the room
[10:24:04] suren joins the room
[10:25:10] mirux leaves the room
[10:26:22] <Licaon_Kter> DOC:
> i dont want to add proxy. and upload.
> can i disable them somehow?
You have `mod_proxy65` and `mod_http_upload` in your .yml config? If so...disable them or point them to a domain that's not a subdomain...
[10:26:23] admin leaves the room
[10:29:01] marc leaves the room
[10:31:22] isotelo leaves the room
[10:31:22] Dragon_rouge leaves the room
[10:31:51] dwd leaves the room
[10:32:22] bkero leaves the room
[10:33:09] pitchum joins the room
[10:34:09] pprrks joins the room
[10:34:41] ij joins the room
[10:34:56] p42ity joins the room
[10:35:40] pitchum leaves the room
[10:36:24] Dragon_rouge joins the room
[10:37:46] pitchum joins the room
[10:38:17] basti joins the room
[10:41:00] spla joins the room
[10:42:01] Jeroen joins the room
[10:42:04] isotelo joins the room
[10:42:29] Jeroen leaves the room
[10:44:52] mimi89999 leaves the room
[10:45:36] suren leaves the room: Disconnected: closed
[10:45:50] suren joins the room
[10:47:29] mike leaves the room
[10:47:57] admin joins the room
[10:48:04] bkero joins the room
[10:51:08] eteebo leaves the room: Disconnected: Replaced by new connection
[10:51:13] eteebo joins the room
[10:51:20] bung leaves the room
[10:54:12] Marc joins the room
[10:54:59] pitchum leaves the room
[10:55:00] pipo10 leaves the room
[10:55:00] basti leaves the room
[10:55:00] spla leaves the room
[10:55:07] Licaon_Kter leaves the room
[10:55:18] Jeroen joins the room
[10:55:42] Jeroen leaves the room
[10:57:09] ff leaves the room
[10:58:11] basti joins the room
[11:00:22] ff joins the room
[11:00:32] raver leaves the room
[11:01:24] marc0s leaves the room: Disconnected: Replaced by new connection
[11:01:24] marc0s joins the room
[11:03:10] iiro joins the room
[11:03:14] Marc leaves the room
[11:03:44] mimi89999 joins the room
[11:04:17] raver joins the room
[11:06:54] pipo10 joins the room
[11:07:28] pprrks leaves the room: Disconnected: Replaced by new connection
[11:12:20] eteebo leaves the room: Disconnected: Replaced by new connection
[11:12:22] eteebo joins the room
[11:13:53] kryptos joins the room
[11:15:01] ij joins the room
[11:15:55] JonNJ leaves the room
[11:16:26] SouL leaves the room
[11:16:30] SouL joins the room
[11:16:40] daniel leaves the room
[11:18:32] pprrks joins the room
[11:19:41] ij leaves the room
[11:23:06] carlos joins the room
[11:26:49] carlos leaves the room
[11:28:11] qy joins the room
[11:28:58] marc joins the room
[11:30:00] gooya joins the room
[11:31:15] eteebo leaves the room: Disconnected: Replaced by new connection
[11:31:16] eteebo joins the room
[11:32:35] daniel joins the room
[11:34:29] suren leaves the room: Disconnected: Replaced by new connection
[11:34:37] suren joins the room
[11:35:37] Jeroen joins the room
[11:35:42] Jeroen leaves the room
[11:38:23] dwd joins the room
[11:41:17] JonNJ leaves the room: Machine is going to sleep
[11:42:11] JonNJ joins the room
[11:44:07] debacle leaves the room
[11:44:10] mirux joins the room
[11:44:52] Jeroen joins the room
[11:45:12] carlos joins the room
[11:45:20] Jeroen leaves the room
[11:46:04] danielepiccoli leaves the room
[11:47:30] carlos leaves the room
[11:48:51] dwd leaves the room
[11:49:49] Jeroen joins the room
[11:50:15] Jeroen leaves the room
[11:50:34] spla joins the room
[11:51:21] spla leaves the room
[11:51:23] spla joins the room
[11:53:49] eteebo leaves the room: Disconnected: closed
[11:54:20] JonNJ leaves the room
[11:54:38] eteebo joins the room
[11:55:31] alex leaves the room: Replaced by new connection
[11:55:38] alex joins the room
[11:55:49] alex leaves the room
[11:55:50] JonNJ joins the room
[11:56:26] alex joins the room
[11:56:42] alex leaves the room
[11:57:15] alex joins the room
[11:57:29] alex leaves the room
[11:58:23] alex joins the room
[11:58:23] Titi joins the room
[11:58:35] alex leaves the room
[11:58:44] Marc joins the room
[11:59:16] alex joins the room
[11:59:37] alex leaves the room
[12:00:28] alex joins the room
[12:00:43] alex leaves the room
[12:01:28] alex joins the room
[12:01:42] alex leaves the room
[12:03:35] anujchadha joins the room
[12:06:49] Titi leaves the room
[12:06:54] JonNJ leaves the room
[12:06:54] JonNJ joins the room
[12:07:41] alex joins the room
[12:07:56] alex leaves the room
[12:08:07] p42ity leaves the room
[12:08:29] alex joins the room
[12:08:45] alex leaves the room
[12:09:31] alex joins the room
[12:09:35] alex leaves the room
[12:10:00] alex joins the room
[12:10:19] alex leaves the room
[12:11:04] alex joins the room
[12:11:14] alex leaves the room
[12:11:50] alex joins the room
[12:11:54] Marc leaves the room
[12:12:06] alex leaves the room
[12:15:49] ru_maniac leaves the room
[12:16:57] keule leaves the room
[12:17:07] ij joins the room
[12:18:05] alex joins the room
[12:18:19] alex leaves the room
[12:19:20] alex joins the room
[12:19:32] alex leaves the room
[12:20:31] ij leaves the room
[12:20:31] pprrks leaves the room: Disconnected: Replaced by new connection
[12:22:05] ij leaves the room
[12:22:20] keule joins the room
[12:23:20] ij joins the room
[12:24:45] inkey joins the room
[12:25:19] pprrks joins the room
[12:25:19] alex joins the room
[12:25:34] alex leaves the room
[12:26:10] alex joins the room
[12:26:26] alex leaves the room
[12:27:50] ij leaves the room
[12:29:13] inkey leaves the room
[12:31:40] ij joins the room
[12:31:49] JonNJ leaves the room
[12:32:17] alex joins the room
[12:32:34] alex leaves the room
[12:32:59] kikuchiyo leaves the room
[12:33:17] alex joins the room
[12:33:28] alex leaves the room
[12:34:09] alex joins the room
[12:34:13] Zash joins the room
[12:34:21] alex leaves the room
[12:34:30] kikuchiyo joins the room
[12:34:57] ru_maniac joins the room
[12:35:17] alex joins the room
[12:35:33] alex leaves the room
[12:36:23] alex joins the room
[12:36:42] alex leaves the room
[12:38:01] Titi joins the room
[12:38:17] ij leaves the room
[12:40:53] suren leaves the room: Disconnected: Replaced by new connection
[12:40:55] suren joins the room
[12:40:58] p42ity joins the room
[12:41:06] p42ity leaves the room
[12:41:47] Barny leaves the room
[12:41:47] Barny joins the room
[12:42:18] alex joins the room
[12:42:31] alex leaves the room
[12:42:32] sonny joins the room
[12:43:21] alex joins the room
[12:43:40] alex leaves the room
[12:44:29] Titi leaves the room
[12:44:30] alex joins the room
[12:44:45] alex leaves the room
[12:44:52] ij joins the room
[12:45:27] danielepiccoli leaves the room
[12:45:27] JuniorJPDJ_ leaves the room
[12:45:28] JuniorJPDJ_ joins the room
[12:45:29] alex joins the room
[12:45:44] alex leaves the room
[12:46:23] danielepiccoli joins the room
[12:46:25] eteebo leaves the room
[12:46:37] alex joins the room
[12:46:52] alex leaves the room
[12:47:26] alex joins the room
[12:47:41] alex leaves the room
[12:48:00] eteebo joins the room
[12:48:24] alex joins the room
[12:48:42] alex leaves the room
[12:49:09] suren leaves the room: Disconnected: Replaced by new connection
[12:49:12] suren joins the room
[12:49:20] alex joins the room
[12:49:34] alex leaves the room
[12:49:38] mightyBroccoli joins the room
[12:50:05] alex joins the room
[12:50:24] alex leaves the room
[12:51:18] alex joins the room
[12:51:37] alex leaves the room
[12:52:27] alex joins the room
[12:52:42] alex leaves the room
[12:53:27] alex joins the room
[12:53:44] alex leaves the room
[12:54:00] quentin joins the room
[12:54:09] pprrks leaves the room: Disconnected: Replaced by new connection
[12:56:13] suren leaves the room: Disconnected: Replaced by new connection
[12:56:14] nekit leaves the room
[12:56:15] suren joins the room
[12:57:11] carlo leaves the room
[12:58:32] pprrks joins the room
[12:59:39] alex joins the room
[12:59:40] alex leaves the room
[13:00:00] JonNJ joins the room
[13:00:05] alex joins the room
[13:00:07] alex leaves the room
[13:00:55] alex joins the room
[13:01:03] alex leaves the room
[13:01:50] alex joins the room
[13:02:00] alex leaves the room
[13:02:56] Titi leaves the room
[13:04:34] carlo joins the room
[13:05:55] gooya leaves the room
[13:06:07] gooya joins the room
[13:07:50] alex joins the room
[13:07:51] alex leaves the room
[13:08:33] mirux leaves the room
[13:10:31] JonNJ leaves the room
[13:13:40] alex joins the room
[13:13:53] alex leaves the room
[13:14:41] alex joins the room
[13:14:47] alex leaves the room
[13:14:58] isotelo leaves the room
[13:14:59] Marc joins the room
[13:15:03] isotelo joins the room
[13:15:30] alex joins the room
[13:15:31] alex leaves the room
[13:15:39] JonNJ joins the room
[13:15:42] JonNJ joins the room
[13:16:16] alex joins the room
[13:16:29] alex leaves the room
[13:19:13] suren leaves the room: Disconnected: Replaced by new connection
[13:19:15] suren joins the room
[13:20:25] Marc leaves the room
[13:22:26] alex joins the room
[13:22:28] alex leaves the room
[13:23:18] alex joins the room
[13:23:26] alex leaves the room
[13:26:57] suren leaves the room: Disconnected: Replaced by new connection
[13:26:58] suren joins the room
[13:27:30] Marc joins the room
[13:28:50] kryptos leaves the room
[13:29:24] alex joins the room
[13:29:37] alex leaves the room
[13:30:12] alex joins the room
[13:30:14] alex leaves the room
[13:30:55] alex joins the room
[13:31:03] alex leaves the room
[13:31:25] william.chatner joins the room
[13:32:15] dwd joins the room
[13:32:17] isotelo joins the room
[13:33:27] kikuchiyo leaves the room
[13:33:48] Jeroen joins the room
[13:34:10] Jeroen leaves the room
[13:35:43] Marc joins the room
[13:36:42] danielepiccoli leaves the room
[13:36:54] alex joins the room
[13:36:59] alex leaves the room
[13:37:04] yann-kaelig joins the room
[13:37:46] alex joins the room
[13:37:58] alex leaves the room
[13:38:33] alex joins the room
[13:38:46] quentin leaves the room
[13:38:51] alex leaves the room
[13:39:35] alex joins the room
[13:39:46] isotelo leaves the room
[13:39:46] isotelo leaves the room
[13:39:47] alex leaves the room
[13:39:58] Licaon_Kter joins the room
[13:40:09] marc leaves the room
[13:40:28] alex joins the room
[13:40:31] alex leaves the room
[13:41:01] marc joins the room
[13:41:17] alex joins the room
[13:41:29] alex leaves the room
[13:41:57] Marc leaves the room
[13:42:14] alex joins the room
[13:42:16] alex leaves the room
[13:42:26] targ joins the room
[13:42:28] pprrks leaves the room: Disconnected: Replaced by new connection
[13:42:47] alex joins the room
[13:44:29] isotelo joins the room
[13:44:31] JonNJ leaves the room
[13:44:54] robert_mobil joins the room
[13:45:46] marzzzello leaves the room
[13:45:47] marzzzello joins the room
[13:48:36] JonNJ joins the room
[13:49:10] abba leaves the room
[13:51:35] acidsys joins the room
[13:55:22] Jeroen joins the room
[13:55:45] Jeroen leaves the room
[13:56:06] suren leaves the room: Disconnected: Replaced by new connection
[13:56:09] suren joins the room
[13:58:11] kikuchiyo joins the room
[14:02:31] pprrks joins the room
[14:04:08] Licaon_Kter leaves the room
[14:04:13] Jeroen joins the room
[14:04:39] Jeroen leaves the room
[14:05:50] danielepiccoli joins the room
[14:07:32] Jeroen joins the room
[14:07:33] sonny leaves the room: Disconnected: Replaced by new connection
[14:08:01] frankest leaves the room
[14:08:01] sonny joins the room
[14:08:09] Jeroen leaves the room
[14:08:16] Jeroen joins the room
[14:08:18] frankest joins the room
[14:08:25] meeson_ joins the room
[14:08:42] Jeroen leaves the room
[14:12:59] p42ity joins the room
[14:13:13] iiro leaves the room
[14:13:20] p42ity leaves the room
[14:14:15] pprrks leaves the room: Disconnected: closed
[14:15:10] JonNJ leaves the room
[14:19:47] 0riginal joins the room
[14:21:55] 0riginal leaves the room
[14:21:55] JuniorJPDJ_ leaves the room
[14:21:56] JuniorJPDJ_ joins the room
[14:25:13] BlackEdge leaves the room
[14:25:44] suren leaves the room: Disconnected: Replaced by new connection
[14:25:46] suren joins the room
[14:28:00] mirux leaves the room
[14:29:20] pprrks joins the room
[14:30:10] kinky_nekoboi joins the room
[14:31:49] [Alien] joins the room
[14:33:26] suren leaves the room: Disconnected: Replaced by new connection
[14:33:27] suren joins the room
[14:33:33] JonNJ joins the room
[14:37:19] ij leaves the room
[14:38:08] basti leaves the room
[14:38:19] inkey leaves the room
[14:39:38] Titi joins the room
[14:40:01] inkey joins the room
[14:40:33] inkey joins the room
[14:42:54] kinky_nekoboi leaves the room
[14:43:03] kinky_nekoboi joins the room
[14:44:33] kinky_nekoboi leaves the room
[14:44:39] kinky_nekoboi joins the room
[14:44:51] danielepiccoli leaves the room
[14:44:54] kinky_nekoboi leaves the room
[14:51:19] riau.pro leaves the room
[14:53:58] malloc joins the room
[14:54:09] ij joins the room
[14:55:24] suren leaves the room: Disconnected: Replaced by new connection
[14:55:25] suren joins the room
[14:59:28] pprrks leaves the room: Disconnected: Replaced by new connection
[15:00:10] bowlofeggs joins the room
[15:00:15] Jeroen joins the room
[15:00:39] Jeroen leaves the room
[15:01:37] bowlofeggs leaves the room
[15:03:30] mirux joins the room
[15:03:44] suren leaves the room: Disconnected: Replaced by new connection
[15:03:51] suren joins the room
[15:06:29] danielepiccoli joins the room
[15:08:46] meeson_ leaves the room
[15:09:58] bkero leaves the room
[15:10:37] pprrks joins the room
[15:12:10] Jeroen joins the room
[15:12:28] kinetik leaves the room
[15:12:36] Jeroen leaves the room
[15:12:43] kinetik joins the room
[15:14:07] Jeroen joins the room
[15:14:32] JonNJ leaves the room
[15:14:37] Jeroen leaves the room
[15:17:29] TheCoffeMaker leaves the room
[15:17:35] Marzanna leaves the room
[15:17:43] Marzanna joins the room
[15:18:34] JonNJ joins the room
[15:19:32] riau.pro leaves the room: Disconnected: Hibernating too long
[15:20:05] TheCoffeMaker joins the room
[15:20:50] Millesimus joins the room
[15:20:53] dwd leaves the room
[15:21:05] ru_maniac joins the room
[15:22:54] twl joins the room
[15:23:20] ru_maniac leaves the room
[15:25:35] strejo joins the room
[15:28:12] marc leaves the room
[15:28:13] ted joins the room
[15:28:57] strejo leaves the room
[15:29:40] strejo joins the room
[15:30:29] mirux joins the room
[15:31:11] Robbilie leaves the room
[15:31:12] Robbilie joins the room
[15:31:27] strejo leaves the room
[15:33:14] acidsys leaves the room
[15:33:34] Mike leaves the room
[15:33:34] Mike joins the room
[15:34:28] jannic leaves the room
[15:35:19] antonperst leaves the room
[15:35:20] antonperst joins the room
[15:37:52] sunblade joins the room
[15:37:56] inkey leaves the room
[15:37:56] inkey leaves the room
[15:37:57] raver leaves the room
[15:37:57] [Alien] leaves the room
[15:37:57] spla leaves the room
[15:37:57] tyler leaves the room
[15:38:15] [Alien] joins the room
[15:38:29] <sunblade> I am on Linux (Debian)
[15:41:26] dwd joins the room
[15:41:59] danielepiccoli leaves the room
[15:42:07] sunblade joins the room
[15:43:30] isotelo leaves the room
[15:43:56] Dragon_rouge leaves the room
[15:44:06] <Holger> sunblade, in that case `::` binds to both IPv4 and IPv6 (unless ` /proc/sys/net/ipv6/bindv6only` is set to `1`).
[15:45:53] <Zash> (unless the code passes a flag that disables that)
[15:46:04] <Holger> Which ejabberd doesn't 😉
[15:46:35] <Holger> sunblade, what's the problem?
[15:47:07] <sunblade> Ok that flag is not set so no issue there
[15:48:00] <sunblade> Problem is the TURN server isn't working. Would you be able to have a quick scan on my ejabberd.yml config?
[15:48:23] <Holger> sunblade, sure.
[15:48:35] <sunblade> Ok, I'll PM it to you.
[15:49:16] <Holger> sunblade, usually the default config should work just fine, except that you might need to specify the server's external `turn_ipv4_address`.
[15:49:19] bkero joins the room
[15:52:04] isotelo joins the room
[15:52:26] <sunblade> I have certs from Let's Encrypt. My server is self-hosted on docker-compose and sits behind a firewalled router. I have taken great care to forward all the necessary ports on the router, forward IPv6 traffic directed to my server, configure the DNS SRV records, and open all the ports in the docker-compose.yml file
[15:53:37] apach leaves the room
[15:53:46] apach joins the room
[15:54:21] yann-kaelig leaves the room
[15:54:23] yann-kaelig joins the room
[15:54:36] sumpfralle_ joins the room
[15:54:46] sumpfralle joins the room
[15:54:49] kryptos joins the room
[15:54:54] sander leaves the room
[15:55:15] <sunblade> Audio and video calls are working except for the case where the peers are on different 4G carriers or behind a firewall.
[15:56:21] p42ity joins the room
[15:56:51] <Holger> sunblade, if I try to talk to port 3478 via UDP on your server, I get an ICMP "UDP port 3478 unreachable".
[15:57:02] <Holger> Maybe returned by some packet filter.
[15:57:37] p42ity leaves the room
[15:57:38] <Holger> sunblade, the configuration as such looks fine (though `mod_stun_disco: {}` would do the trick, you don't need the verbose variant).
[15:58:09] tyler joins the room
[15:58:43] nuron joins the room
[15:58:51] basti joins the room
[15:58:54] apach leaves the room
[15:59:13] Dragon_rouge joins the room
[16:02:30] <sunblade> Ok that is good to know. Thank you for the info. I'll check on why that is happening.
[16:02:52] kinky_nekoboi leaves the room
[16:03:43] marc joins the room
[16:03:55] <Holger> TCP is weirdo.  STUN works for me using some command line client but for some reason <https://webrtc.github.io/samples/src/content/peerconnection/trickle-ice/> is unhappy.
[16:04:02] <sunblade> Why is `mod_stun_disco: {}` ok? I thought that was not ok because of blog post: https://www.process-one.net/blog/how-to-set-up-ejabberd-video-voice-calling/
[16:04:03] <Holger> I mean STUN via TCP.
[16:04:33] <Holger> Marek thought it would be cool to show a very explicit config.
[16:04:39] Mike leaves the room
[16:04:48] <Holger> Usually the example config is meant to be fine as-is.
[16:05:05] <Holger> https://github.com/processone/ejabberd/blob/master/ejabberd.yml.example
[16:05:11] <sunblade> Wow I spent a lot of time fiddling with that. Had no idea it was not required.
[16:05:20] <Holger> 😕
[16:05:27] <Holger> I'm not a fan of that blog article 🙁
[16:05:43] <sunblade> Yes I used the example, but then read that blog and thought "oh I am missing a bunch of stuff"
[16:05:50] <Holger> Also DNS is unnecessary for modern XMPP clients.
[16:06:20] <sunblade> I can delete the DNS SRV records? Ok good to know.
[16:06:30] Mike joins the room
[16:06:36] <sunblade> I only use Conversations / Gajim
[16:06:39] <Holger> Yes, clients such as Conversations or Movim or Siskin won't use it.
[16:07:29] <Holger> My blog article would've been:
1) Stick to the defaults.  Except maybe:
2) Specify the external `turn_ipv4_address`.
3) Make sure all ports (including the UDP port range) are accessible.
[16:07:30] basti leaves the room
[16:08:13] kosyas joins the room
[16:08:32] twl leaves the room
[16:09:33] <sunblade> So this blog article is misleading too: https://www.process-one.net/blog/ejabberd-xmpp-server-useful-configuration-steps/
[16:09:58] danielepiccoli joins the room
[16:09:59] bowlofeggs joins the room
[16:10:48] bowlofeggs leaves the room
[16:12:23] <sunblade> And the official documentation is not clear that this information is not required: https://docs.ejabberd.im/admin/configuration/modules/#mod-stun-disco
[16:12:23] admin leaves the room
[16:13:22] Marc leaves the room
[16:13:43] kosyas leaves the room
[16:13:52] JonNJ leaves the room
[16:15:21] sunblade leaves the room
[16:16:16] BlackEdge joins the room
[16:17:10] <sunblade> In any case, I like your blog article, Holger. Nice and simple 😁️
[16:17:16] sponji leaves the room
[16:17:22] sponji joins the room
[16:17:47] marc0s leaves the room: Disconnected: Replaced by new connection
[16:17:47] marc0s joins the room
[16:18:05] marc0s leaves the room: Disconnected: Replaced by new connection
[16:18:06] marc0s joins the room
[16:18:27] <Holger> sunblade, matter of taste.  I've seen others appreciate verbose/explicit config because it helps them understanding stuff.
[16:18:28] ted leaves the room
[16:18:47] <Holger> The actual `mod_stun_disco` documentation is my fault though 🙂
[16:19:05] JonNJ joins the room
[16:19:24] <Zash> DNS unnecessary how?
[16:19:49] <Holger> Zash, '215 clients just use '215 for looking up STUN/TURN services, not DNS?
[16:20:06] <Zash> Ah, so only about _stun SRV records?
[16:20:10] <Holger> Yes.
[16:20:27] <Zash> Not about putting IP literals into the '215?
[16:20:38] <Holger> Ah, no.
[16:21:05] <Holger> (Which should be fine as well though.)
[16:21:08] <Zash> Which turns some client latency into server trouble
[16:21:15] <Holger> Oh?
[16:22:07] <Zash> Either you need to update the config instead of DNS, or the server could to do the DNS lookups, probably periodically to have them cached.
[16:22:07] bunnybunbun leaves the room
[16:22:29] Millesimus leaves the room
[16:22:51] kosyas joins the room
[16:22:52] marc0s leaves the room: Disconnected: Replaced by new connection
[16:22:53] marc0s joins the room
[16:23:28] <Holger> Zash, this is about the case where IP addresses might change?
[16:23:53] <Zash> For example.
[16:24:03] <Zash> Or, dunno when else you'd have to update them...
[16:24:27] keule leaves the room
[16:24:54] <Holger> I'm all for avoiding IP addresses whenever possible.  But TURN servers *must* know their IP address.  So if they don't perform a DNS lookup themselves, you need to configure it.  ejabberd's built-in TURN support doesn't support lookups.  So you need to configure the address anyway.  (Well, it does fall back to `hostname --fqdn`.)
[16:25:09] danielepiccoli joins the room
[16:25:18] <Holger> And ejabberd's '215 module just re-uses this configured (or `hostname --fqdn`-resolved) IP address by default.
[16:25:52] <Zash> In the case of Prosody you'd point at an external STUN/TURN thing. Either by name or IP.
[16:26:09] <Holger> > Well, it does fall back to `hostname --fqdn`.
I mean it does fall back to lookup up the name yielded that way.
[16:26:27] <Zash> Not explicit config?
[16:27:02] pitchum joins the room
[16:27:16] sponji leaves the room
[16:28:05] kosyas leaves the room
[16:28:12] ted joins the room
[16:28:41] <Holger> We suggest explicit config of the IP address here:
https://github.com/processone/ejabberd/blob/21.12/ejabberd.yml.example#L75-L76
If the admin doesn't do this, `$(host $(hostname --fqdn))` (well written as Erlang code) is used as fallback.
[16:28:44] sponji joins the room
[16:29:05] <Holger> Either way, the resulting IP address is used by '215, unless overwritten by the admin.
[16:29:32] riau.pro joins the room
[16:29:32] riau.pro joins the room
[16:30:34] nuron leaves the room
[16:30:35] marc0s leaves the room: Disconnected: Replaced by new connection
[16:30:36] marc0s joins the room
[16:31:05] suren leaves the room: Disconnected: Replaced by new connection
[16:31:08] suren joins the room
[16:31:59] <Zash> Is it worth it?
[16:32:31] <Holger> Zash, I feel like I'm missing something, sorry 🙂
[16:32:36] kosyas joins the room
[16:32:54] <Holger> What goal is worth which effort?
[16:33:13] keule joins the room
[16:33:22] <Zash> How much latency does it add to pass DNS names as STUN/TURN references instead of IP addresses, and is it enough to matter?
[16:34:33] <Holger> Ah, I'm not arguing latency, my point was that the TURN server itself needs the IP address anyway (because it's communicated to the TURN client as per the TURN spec: no host names allowed here).
[16:34:35] sponji leaves the room
[16:34:37] sponji joins the room
[16:35:03] Demo joins the room
[16:35:12] <Holger> So in the special case of ejabberd, where you can use both TURN and '215 as built-ins, you can have the '215 code access the IP address that's configured anyway.
[16:35:23] <Zash> Right, the built-in thing already (needs to) know, so it can just tell the client.
[16:35:28] <Holger> I.e. I just wanted to fully agree with you in general and explain that this is a special case.
[16:36:12] <Zash> Heh, made me wonder if you could use a random public STUN server to discover your own public IP 🙂
[16:36:25] Millesimus joins the room
[16:36:38] <Holger> I was pondering with adding code for that to our STUN server 😉
[16:36:53] <Holger> Because people keep asking how to run STUN/TURN behind dynamic IP addresses.
[16:37:16] admin joins the room
[16:37:36] <Zash> Personally I went with putting the STUN+TURN on a completely separate machine from my XMPP server, precisely to avoid having it behind NAT
[16:37:39] Mike leaves the room
[16:38:07] <Holger> But apart from all that, today's WebRTC youth would of course run away screeming listening to us being fine with wasting microseconds on DNS, yes.
[16:38:14] <Holger> THIS IS REALTIME TECH!!!
[16:38:49] <Zash> And the oldtimer SIP folks would run away screaming at our doubt
[16:38:57] <Holger> Hehe.
[16:39:31] Mike joins the room
[16:41:51] dwd leaves the room
[16:42:17] kinky_nekoboi joins the room
[16:43:03] lorddavidiii joins the room
[16:43:04] lorddavidiii leaves the room
[16:43:48] apach joins the room
[16:44:17] JonNJ leaves the room
[16:44:19] JonNJ joins the room
[16:44:59] lorddavidiii joins the room
[16:45:12] lorddavidiii leaves the room
[16:47:10] lorddavidiii joins the room
[16:48:01] lorddavidiii leaves the room
[16:49:32] lorddavidiii joins the room
[16:50:20] sonny leaves the room: Disconnected: Replaced by new connection
[16:50:22] sonny joins the room
[16:50:30] kosyas leaves the room
[16:50:51] sonny leaves the room
[16:51:02] sonny joins the room
[16:54:31] pprrks leaves the room: Disconnected: closed
[16:54:39] Mx2 joins the room
[16:55:12] Mx2 leaves the room: Disconnected: Replaced by new connection
[16:55:13] Mx2 joins the room
[16:59:13] Marc joins the room
[16:59:18] suren leaves the room: Disconnected: Replaced by new connection
[16:59:21] suren joins the room
[16:59:58] pprrks joins the room
[17:00:23] sunblade leaves the room
[17:02:21] Mx2 joins the room
[17:03:35] meeson_ joins the room
[17:04:28] Millesimus leaves the room
[17:06:40] Marc leaves the room
[17:09:58] sunblade joins the room
[17:10:01] Giovanni leaves the room
[17:10:04] inkey leaves the room
[17:10:04] inkey joins the room
[17:10:34] alacer joins the room
[17:11:01] Mike leaves the room
[17:11:30] alacer leaves the room
[17:12:56] apach leaves the room
[17:13:40] apach joins the room
[17:16:33] Marc joins the room
[17:16:36] meeson_ leaves the room
[17:16:37] meeson_ joins the room
[17:16:44] Mike joins the room
[17:17:08] Tim joins the room
[17:17:50] Ramiro Romani leaves the room
[17:18:38] i.freedom joins the room
[17:18:50] apach leaves the room
[17:19:10] i.freedom leaves the room
[17:19:27] pitchum joins the room
[17:19:29] ff joins the room
[17:19:55] Marc leaves the room
[17:21:40] Marc joins the room
[17:23:01] Ramiro Romani joins the room
[17:24:04] p42ity joins the room
[17:24:42] Marc leaves the room
[17:24:42] pitchum leaves the room
[17:25:24] i.freedom joins the room
[17:25:45] p42ity leaves the room
[17:26:59] franky leaves the room
[17:27:25] franky joins the room
[17:27:39] i.freedom joins the room
[17:28:37] isotelo leaves the room
[17:30:38] Millesimus joins the room
[17:30:49] nuron joins the room
[17:31:51] i.freedom leaves the room
[17:32:04] isotelo joins the room
[17:32:12] inkey leaves the room
[17:32:28] i.freedom joins the room
[17:33:14] pprrks leaves the room: Disconnected: Replaced by new connection
[17:33:40] apach joins the room
[17:34:14] eteebo leaves the room: Disconnected: Replaced by new connection
[17:34:15] eteebo joins the room
[17:35:32] Tim leaves the room
[17:35:37] i.freedom leaves the room
[17:36:26] debacle joins the room
[17:36:57] Jeroen joins the room
[17:37:22] Jeroen leaves the room
[17:37:53] debalance joins the room
[17:39:02] pprrks joins the room
[17:39:04] marc leaves the room
[17:39:27] marc joins the room
[17:39:27] pprrks leaves the room: Disconnected: closed
[17:40:21] sunblade joins the room
[17:40:33] Marc joins the room
[17:43:05] jannic joins the room
[17:43:23] suren leaves the room: Disconnected: Replaced by new connection
[17:43:26] suren joins the room
[17:43:37] marzzzello leaves the room
[17:43:40] marzzzello joins the room
[17:43:46] abba joins the room
[17:43:54] Marc leaves the room
[17:44:30] Titi joins the room
[17:45:09] rom1dep leaves the room
[17:46:31] marzzzello leaves the room
[17:46:31] marzzzello joins the room
[17:47:19] inkey joins the room
[17:47:42] inkey joins the room
[17:48:18] bkero joins the room
[17:48:19] Mike leaves the room
[17:49:58] Mike joins the room
[17:50:15] eteebo leaves the room: Disconnected: Replaced by new connection
[17:50:15] eteebo joins the room
[17:50:16] spla joins the room
[17:51:42] marc0s leaves the room: Disconnected: Replaced by new connection
[17:51:42] marc0s joins the room
[17:54:36] p42ity joins the room
[17:55:47] p42ity leaves the room
[17:59:25] p42ity joins the room
[17:59:35] p42ity leaves the room
[18:07:51] pitchum joins the room
[18:08:06] Jeroen joins the room
[18:09:03] Jeroen leaves the room
[18:12:10] gooya leaves the room
[18:12:38] Jeroen joins the room
[18:14:06] Jeroen leaves the room
[18:14:09] teftera leaves the room
[18:14:09] teftera joins the room
[18:14:35] Jeroen joins the room
[18:14:47] kinky_nekoboi joins the room
[18:15:11] kinky_nekoboi leaves the room
[18:16:31] Jeroen leaves the room
[18:17:36] pitchum leaves the room
[18:17:37] kinetik leaves the room
[18:17:56] kinetik joins the room
[18:20:26] Marc joins the room
[18:21:08] rom1dep joins the room
[18:21:28] Mike leaves the room
[18:22:27] Mike joins the room
[18:24:41] spla leaves the room
[18:25:58] Jeroen joins the room
[18:26:32] Jeroen leaves the room
[18:26:32] stp leaves the room
[18:26:33] sunblade leaves the room
[18:27:04] <sunblade> Holger: Thanks a million for pointing out that UDP was blocked on port 3478! After some investigation I realized that docker-compose.yml port entries are TCP by default. I added the '/udp' suffix to 3478 and my TURN port range and now it is working 🎉️
[18:27:04] daniel leaves the room
[18:27:18] gooya joins the room
[18:30:41] ff leaves the room
[18:32:18] smalltimebloke joins the room
[18:33:29] Thomas Lewis joins the room
[18:34:36] Marc leaves the room
[18:34:50] basti joins the room
[18:35:25] bkero leaves the room
[18:36:59] Marc joins the room
[18:37:16] Titi leaves the room
[18:38:13] Thomas Lewis leaves the room
[18:40:32] Marc leaves the room
[18:42:06] <Holger> 👍
[18:42:27] smalltimebloke leaves the room
[18:42:45] smalltimebloke joins the room
[18:43:55] marc0s leaves the room: Disconnected: Replaced by new connection
[18:43:56] marc0s joins the room
[18:45:03] mirux joins the room
[18:45:34] marc0s leaves the room: Disconnected: Replaced by new connection
[18:45:35] marc0s joins the room
[18:47:04] Pingu from Woodquarter leaves the room
[18:47:37] Millesimus leaves the room
[18:50:03] Marc joins the room
[18:53:11] stp joins the room
[18:53:41] Mike leaves the room
[18:55:06] Jeroen joins the room
[18:55:17] Marc leaves the room
[18:55:22] Mike joins the room
[18:55:45] Jeroen leaves the room
[18:57:06] i.freedom leaves the room
[18:59:22] p42ity joins the room
[18:59:29] Dom leaves the room
[18:59:58] p42ity leaves the room
[19:01:16] kryptos leaves the room
[19:01:16] robert_mobil leaves the room
[19:02:25] Thomas Lewis joins the room
[19:02:55] marzzzello leaves the room
[19:03:03] marzzzello joins the room
[19:03:09] carlos leaves the room
[19:03:32] Thomas Lewis leaves the room
[19:04:28] Steffen van Bergerem leaves the room
[19:04:29] rauhfasertapete leaves the room
[19:04:29] sunblade leaves the room
[19:04:29] Dom joins the room
[19:06:38] rozzin leaves the room
[19:08:26] Millesimus leaves the room
[19:09:16] basti leaves the room
[19:11:54] mimi89999 leaves the room
[19:11:54] rozzin joins the room
[19:12:00] mimi89999 joins the room
[19:12:35] SUN leaves the room
[19:17:04] Titi joins the room
[19:17:42] suren leaves the room: Disconnected: Replaced by new connection
[19:17:44] suren joins the room
[19:17:45] Steffen van Bergerem joins the room
[19:19:07] Marc joins the room
[19:19:30] ru_maniac joins the room
[19:20:42] ru_maniac leaves the room
[19:20:49] ru_maniac joins the room
[19:21:00] sander joins the room
[19:23:31] Marc leaves the room
[19:23:43] daniel joins the room
[19:25:40] Jeroen joins the room
[19:25:47] Jeroen leaves the room
[19:27:08] ru_maniac leaves the room
[19:27:09] yann-kaelig leaves the room
[19:28:03] Mike leaves the room
[19:28:03] Mike joins the room
[19:28:22] Millesimus joins the room
[19:28:50] carlos joins the room
[19:30:39] smalltimebloke leaves the room
[19:30:42] smalltimebloke joins the room
[19:32:53] meeson_ leaves the room
[19:33:00] suren leaves the room: Disconnected: Replaced by new connection
[19:33:02] suren joins the room
[19:34:02] TheCoffeMaker leaves the room
[19:34:28] TheCoffeMaker joins the room
[19:35:55] Ramiro Romani joins the room
[19:36:10] robert_mobil leaves the room
[19:36:21] andrey.g joins the room
[19:38:33] robert_mobil leaves the room
[19:38:59] JonNJ leaves the room
[19:39:18] JonNJ joins the room
[19:40:05] [Alien] leaves the room
[19:41:39] SUN joins the room
[19:43:51] Pingu from Woodquarter joins the room
[19:45:31] mirux leaves the room
[19:46:58] smalltimebloke leaves the room
[19:50:59] suren leaves the room: Disconnected: Replaced by new connection
[19:51:00] suren joins the room
[19:51:07] ru_maniac joins the room
[19:52:51] basti joins the room
[19:57:38] mirux leaves the room: Disconnected: Replaced by new connection
[19:57:39] meeson_ leaves the room
[19:57:41] meeson_ joins the room
[19:57:44] mirux joins the room
[19:59:16] Mike leaves the room
[20:00:49] Mike joins the room
[20:01:07] apach joins the room
[20:01:23] Licaon_Kter joins the room
[20:09:35] apach leaves the room
[20:10:19] Jeroen joins the room
[20:10:46] Jeroen leaves the room
[20:12:15] william.chatner leaves the room
[20:12:17] rozzin leaves the room
[20:12:49] twl joins the room
[20:12:56] TheCoffeMaker leaves the room
[20:16:42] isotelo joins the room
[20:18:34] Jeroen joins the room
[20:18:55] mirux leaves the room
[20:19:03] Jeroen leaves the room
[20:19:48] rozzin joins the room
[20:20:55] Jeroen joins the room
[20:21:23] Jeroen leaves the room
[20:25:12] Jeroen joins the room
[20:25:42] Jeroen leaves the room
[20:25:48] Jeroen joins the room
[20:26:16] Jeroen leaves the room
[20:27:17] doctor leaves the room
[20:27:20] doctor joins the room
[20:27:29] TheCoffeMaker joins the room
[20:28:06] bunnybunbun joins the room
[20:29:05] ru_maniac leaves the room
[20:29:45] andrey.g leaves the room
[20:31:12] Titi leaves the room
[20:32:01] Mike leaves the room
[20:32:10] Jeroen joins the room
[20:33:07] Jeroen leaves the room
[20:33:29] Tim joins the room
[20:33:35] Mike joins the room
[20:38:32] iiro joins the room
[20:40:10] meeson_ joins the room
[20:41:22] ij leaves the room
[20:41:28] ij joins the room
[20:42:21] meeson_ leaves the room
[20:42:39] Mx2 leaves the room
[20:43:53] Mx2 leaves the room
[20:46:18] gooya leaves the room
[20:47:17] nuron leaves the room
[20:47:36] gooya joins the room
[20:48:04] Holger leaves the room
[20:48:53] ij leaves the room
[20:48:59] ij joins the room
[20:54:21] marc0s leaves the room
[20:54:21] marc0s joins the room
[20:57:11] Mx2 joins the room
[20:57:29] william.chatner joins the room
[20:57:41] Mx2 leaves the room
[20:57:52] Mx2 joins the room
[21:00:08] ru_maniac joins the room
[21:03:38] kinky_nekoboi joins the room
[21:03:58] isotelo leaves the room
[21:04:38] Mike leaves the room
[21:05:21] TheCoffeMaker leaves the room
[21:06:34] Mike joins the room
[21:07:15] ru_maniac leaves the room
[21:07:23] ru_maniac joins the room
[21:07:35] suren leaves the room: Disconnected: Replaced by new connection
[21:07:37] suren joins the room
[21:08:41] inkey leaves the room
[21:12:29] TheCoffeMaker joins the room
[21:13:13] rauhfasertapete joins the room
[21:14:14] Mx2 leaves the room: Disconnected: Replaced by new connection
[21:14:15] Mx2 joins the room
[21:14:31] DOC joins the room
[21:15:10] <DOC> hey — anyone alive? I am seriously pulling my hair out with an SSL issue. Nomatterwhat i do, i keep getting LetsEncrypt cert CA is signed by Unknown CA. I even tried pulling the Intermediary CA from thier website and just loading that, and its still unknown
[21:15:10] sander leaves the room
[21:15:10] twl leaves the room
[21:15:10] Steffen van Bergerem leaves the room
[21:15:11] abba leaves the room
[21:15:18] <DOC> ive been at this for 2 days now
[21:15:20] nuron joins the room
[21:15:35] <tekdmn> DOC, I hear you.
[21:15:46] <DOC> you've dealt with this?
[21:16:11] <tekdmn> At one point, but I'm mildly too braindead to remember the exact solution.
[21:16:16] <tekdmn> Let me caffinate myself
[21:16:20] <DOC> thank you!
[21:16:48] sander leaves the room
[21:16:50] sander joins the room
[21:17:07] <tekdmn> Where are you seeing this, client-side connection to server.
[21:17:07] sponji leaves the room
[21:17:08] <tekdmn> ?
[21:17:10] sponji joins the room
[21:17:31] <DOC> technically at first startup, but then in any S2S i get connection untrusted
[21:17:44] <DOC> Invalid certificate in /opt/ejabberd/certificates/newkey.pem: at line 59: certificate is signed by unknown CA
[21:18:08] <tekdmn> So your side is failing to check its own cert?
[21:18:16] <DOC> i guess so yeah
[21:18:18] <tekdmn> What's your OS. Ubuntu?
[21:18:20] <DOC> ubuntu
[21:18:30] <tekdmn> First, make sure your ca-certificates package is updated.
[21:18:55] marc0s leaves the room
[21:18:55] marc0s joins the room
[21:19:02] <DOC> done
[21:19:10] danielepiccoli leaves the room
[21:19:13] <tekdmn> Did it need an update or was it already good?
[21:19:30] <DOC> it was already good
[21:19:33] <DOC> i just ran update-ca-certificates
[21:19:48] Mx2 leaves the room
[21:19:49] Mx2 joins the room
[21:20:10] basti leaves the room
[21:20:17] <tekdmn> You would not believe how many internal network errors were caused by the LE root expiry over here... I was fixing systems for weeks
[21:20:17] ted leaves the room
[21:20:59] ted joins the room
[21:21:28] <tekdmn> But if it says an unknown CA, mind sending me just the certificate file? Feel free to toss it somewhere like https://drop.tekdmn.me. I kinda wonder what it's calling "unknown"
[21:21:39] <DOC> yup
[21:21:50] hecker3000 leaves the room
[21:22:13] <DOC> the whole cert itself validates on most sites
[21:23:20] <DOC> sent. i will sned you the whole cert as well. this is just a dummy server
[21:23:32] <tekdmn> Which for most things is what I'd expect, meaning it might be a problem with ejabberd / whatever ejd is using to reference it's CA list
[21:23:39] <tekdmn> I'll need the link to read it
[21:23:52] <DOC> https://drop.tdstoragebay.com/#sXm8dFjgZJuMdyG3KWKrmQ
[21:24:04] isotelo leaves the room
[21:24:12] <tekdmn> No android, I don't want to import it. I want to look at it
[21:24:16] <DOC> blob:https://drop.tdstoragebay.com/3ebc6dfe-8313-475e-90cd-58dec0532fe8
[21:24:28] <DOC> does that work?
[21:24:28] JuniorJPDJ_ leaves the room
[21:24:29] JuniorJPDJ_ joins the room
[21:24:43] hecker3000 joins the room
[21:24:44] <DOC> or do you want me to send it as txt?
[21:25:30] <tekdmn> The URL fragment is a decryption key as well, so you need the share URL
[21:25:43] <tekdmn> Regardless I have the ca.pem.crt file... Just checking it.
[21:25:49] <DOC> https://drop.tdstoragebay.com/#heYXcL8KOti999QOmkFN2Q
[21:26:17] ff leaves the room
[21:26:17] <tekdmn> Wait, the ca file is your signing CA?
[21:26:28] <DOC> dunno?
[21:26:34] <DOC> im just using whatever lets encrypt gives me
[21:26:49] kryptos joins the room
[21:27:05] isotelo joins the room
[21:27:22] <tekdmn> ca.pem looks, well, dummy.
[21:27:43] <DOC> hm
[21:28:01] <DOC> hang on
[21:28:31] Steffen van Bergerem joins the room
[21:29:05] ff joins the room
[21:29:08] <DOC> just generated a new one
[21:29:31] <DOC> https://drop.tdstoragebay.com/#TjTYQ2pfSzYo7R_KD4SWzg
[21:29:48] <tekdmn> Four certificates?
[21:29:50] <DOC> thats the cert and the fullchain generated by letsencrypt
[21:29:54] <tekdmn> The LE chain usually only has three
[21:30:07] <DOC> top is key
[21:30:20] <DOC> but ok
[21:30:20] <DOC> hm
[21:30:27] <DOC> i mean this was literally just generated
[21:30:32] <tekdmn> Oh, I'm still not seeing correctly.
[21:31:01] <DOC> youre not seeing the file correctly? or what you see doesn't look right?
[21:31:39] tekdmn joins the room
[21:31:41] p42ity joins the room
[21:31:54] <tekdmn> No, I didn't realize that was a key
[21:32:14] <DOC> if i put the whole thing here: https://tools.keycdn.com/ssl
[21:32:27] <DOC> it says unable to get issuer cert
[21:32:28] <DOC> something is up
[21:34:29] p42ity leaves the room
[21:34:53] <tekdmn> That's weird, since they're all correct
[21:35:11] p42ity joins the room
[21:35:21] ru_maniac leaves the room
[21:35:22] <tekdmn> Technically you shouldn't need to send the ISRG root, since it should already be in the trust store
[21:36:04] <tekdmn> Removing the root cert (third) makes that tool happy
[21:36:38] <tekdmn> It's... I wonder if it's some thing where the root cert is cross-signed so SSL is trying to verify the validity of that, and can't.
[21:36:49] Mike leaves the room
[21:36:50] Mike joins the room
[21:37:17] <tekdmn> DOC: Idea: try removing the root certificate. In the file you sent it's the last one in the list (but PLEASE generate something else since you published that private key)
[21:37:17] pipo10 leaves the room
[21:37:29] <DOC> yeah its a dummy server
[21:37:33] <DOC> but yeah thanks
[21:38:09] quentin joins the room
[21:40:07] bunnybunbun joins the room
[21:40:53] jannic leaves the room
[21:42:38] tekdmn leaves the room
[21:42:45] jannic joins the room
[21:43:02] tekdmn joins the room
[21:43:10] pipo10 joins the room
[21:44:08] <DOC> when i remove the last cert
[21:44:08] p42ity leaves the room
[21:44:09] admin leaves the room
[21:44:17] <DOC> it still says invalid cert… it just changes the line number
[21:44:37] <DOC> it should be worth noting that i'm not using acme for this. i am using the certbot command
[21:44:48] <tekdmn> certbot being a wrapper for ACME, but
[21:44:54] danielepiccoli joins the room
[21:45:10] <DOC> i know but i didnt know if it was doing something different. but i cant use acme because it keeps looking for these 4 subdomains that i dont have
[21:45:16] <tekdmn> That's how I do mine, copy `fullchain.pem` to the target via SSH and remotely reload the services
[21:45:32] <DOC> hm
[21:45:47] apach leaves the room
[21:47:00] <tekdmn> If you're using certbot, I assume then it dumps your certificates in /etc/letsencrypt/live/DOMAIN/
[21:47:15] <DOC> yes
[21:47:28] <DOC> then i copy the cert and fullchain to cert.pem in ejabberd/certs
[21:47:53] <tekdmn> fullchain includes your certificate.
[21:48:05] <DOC> hmm
[21:48:07] <DOC> alright one sec
[21:48:41] apach joins the room
[21:48:42] <tekdmn> cert is your certificate, chain is the intermediate(s), fullchain is end cert + intermediates, and privkey is... privkey.
[21:49:23] <DOC> right sorry
[21:49:23] pipo10 leaves the room
[21:49:28] <DOC> i mean i add the private key to the full chain
[21:49:35] <tekdmn> The only time I need to mess with combining them is because HAProxy needs the certificate and key in the same file for what I'm doing. Besides that I just dump over fullchain.pem and privkey.pem, and reload it.
[21:49:52] <DOC> ok let me try that actualy one sec
[21:50:33] <tekdmn> In your config, set the "certfiles" list to have both the certificate and key file.
certfiles:
  - "/etc/ejabberd/fullchain.pem"
  - "/etc/ejabberd/privkey.pem"
[21:50:48] <DOC> certfiles:
- /opt/ejabberd/certificates/*.pem\
[21:50:53] <DOC> ok one sec
[21:50:53] <tekdmn> That works.
[21:51:50] <DOC> ok and you have another line for your CA cert right?
[21:52:04] mightyBroccoli leaves the room
[21:52:05] <DOC> ca_file: /opt/ejabberd/certificates/ca.pem ?
[21:52:05] ted leaves the room
[21:52:15] <tekdmn> fullchain should contain exactly two certificates: your leaf cert, and the LE intermediate.
[21:52:16] admin joins the room
[21:52:38] basti joins the room
[21:53:17] <DOC> because if i remove ca from the settings, ejabberd wont load
[21:53:56] <tekdmn> Okay. Open your fullchain.pem in a text editor. How many BEGIN CERTIFICATE lines are there?
[21:54:01] apach leaves the room
[21:54:08] <DOC> 3
[21:54:27] <tekdmn> ..okay hold up. There should only be 2
[21:54:27] sponji leaves the room
[21:54:29] sponji joins the room
[21:54:34] <DOC> ok yeah i can remove the last oen
[21:54:37] <DOC> but it doesnt change anything
[21:54:42] Dragon_rouge leaves the room
[21:54:45] <tekdmn> But that second *is* the CA certificate.
[21:54:51] <DOC> oh
[21:54:54] <DOC> ok let me move it then
[21:55:08] Titi joins the room
[21:56:25] <DOC> holy shit
[21:56:25] sponji leaves the room
[21:56:33] <DOC> i think moving the last one to the ca file did it
[21:56:35] <DOC> what the fuck
[21:56:35] Dragon_rouge joins the room
[21:56:46] <tekdmn> Okay, then here's an idea for you
[21:57:04] <tekdmn> Looking at the files certbot gives you, "cert.pem" should contain one certificate.
[21:57:12] <tekdmn> Does "chain.pem" contain one, or two?
[21:57:30] <DOC> yup. im already there
[21:57:33] <DOC> 2
[21:58:06] <DOC> however
[21:58:19] pipo10 joins the room
[21:58:49] apach joins the room
[21:58:56] <DOC> ok yeah it needs to be seperated
[21:59:00] <DOC> well this is going to be a pain in the ass
[21:59:24] <tekdmn> What, is chain the end cert + first intermediate?
[21:59:27] <DOC> alright well, thanks for your help. at least we found the problem
[21:59:27] admin leaves the room
[21:59:34] <DOC> let me see
[21:59:34] basti leaves the room
[21:59:36] isotelo leaves the room
[21:59:39] <tekdmn> Meaning, somehow, the *several* running certbots on my network are all different
[21:59:44] sander leaves the room
[21:59:55] sponji joins the room
[22:00:01] tekdmn joins the room
[22:00:32] tekdmn leaves the room
[22:00:40] APach leaves the room
[22:00:48] <DOC> no chain is its own thing
[22:00:52] <DOC> thats weird
[22:00:58] ted joins the room
[22:01:04] iiro leaves the room
[22:01:18] Titi leaves the room
[22:01:32] <tekdmn> I kinda wonder why it's giving you the root cert in the first place since *you're not supposed to need to send that* but that's beyond my ability to speculate.
[22:02:14] marc0s leaves the room: Disconnected: Replaced by new connection
[22:02:15] admin joins the room
[22:02:15] marc0s joins the room
[22:02:24] pitchum leaves the room
[22:02:32] <DOC> oh wait
[22:02:38] APach joins the room
[22:02:41] <DOC> i generated the initial certs using --nginx
[22:02:42] sander joins the room
[22:02:44] <DOC> i bet thats it
[22:03:16] pitchum leaves the room
[22:03:27] [Alien] leaves the room
[22:03:35] marc0s leaves the room: Disconnected: Replaced by new connection
[22:03:36] marc0s joins the room
[22:03:50] meeson_ leaves the room
[22:04:00] apach leaves the room
[22:04:03] marc0s leaves the room: Disconnected: Replaced by new connection
[22:04:04] marc0s joins the room
[22:04:48] <DOC> how do you generate your certs with letsencrypt? what command do you use initially?
[22:04:48] pipo10 leaves the room
[22:04:56] kinky_nekoboi leaves the room
[22:05:01] <DOC> i can remove the nginx part but hope it doesnt break anything
[22:05:28] <tekdmn> certbot certonly --dns-cloudflare --dns-cloudflare-credentials /root/.cf.ini --dns-cloudflare-propagation-seconds 60 -d "*.tdstoragebay.com"
[22:05:45] <DOC> hmmmmmm
[22:05:59] <DOC> ill try that. thanks!
[22:06:20] <tekdmn> if you're not using cloudflare and don't have the plugin, that'll complain at you
[22:06:44] pitchum joins the room
[22:07:04] <DOC> right
[22:07:07] isotelo joins the room
[22:07:18] <DOC> i would like to use cloudflare but the srv records expose the real IP anyway
[22:07:23] <DOC> so didnt see the point
[22:07:46] <tekdmn> you can ask it to do a DNS challenge with "certbot certonly --manual --preferred-challenges dns"
[22:07:56] sander leaves the room
[22:07:57] sander joins the room
[22:08:01] <DOC> what would that do?
[22:08:04] <tekdmn> Then you have to create a TXT record and tell it when to check, after it's propagated
[22:08:30] <DOC> oh
[22:08:34] <DOC> i see what you mean
[22:08:35] <DOC> thanks
[22:08:47] <tekdmn> Or if you don't have a horribly convoluted system of reverse proxying and HTTP routing... just take an empty HTTP server and tell it to do its usual HTTP challenge.
[22:08:49] apach joins the room
[22:08:57] <DOC> yeah thats what i do
[22:09:10] APach leaves the room
[22:09:11] <DOC> but are you able to somehow keep your IP masked in cloudflare?
[22:09:15] nc1236 joins the room
[22:09:19] <tekdmn> I could.
[22:09:29] <DOC> when i add the _srv records, it says the IP is exposed
[22:09:39] marc0s leaves the room: Disconnected: Replaced by new connection
[22:09:39] marc0s joins the room
[22:09:45] <tekdmn> I don't, but I could. one domain only uses them for DNS, and nothing else. The rest use some other CF features.
[22:09:57] <DOC> gotcha
[22:09:58] <DOC> all good
[22:09:59] <tekdmn> What SRV records are you using?
[22:10:16] <DOC> _xmpp-client._tcp.
[22:10:18] Jeroen joins the room
[22:10:22] <DOC> _xmpp-server._tcp.
[22:10:29] tekdmn leaves the room
[22:10:29] tekdmn joins the room
[22:10:36] Jeroen leaves the room
[22:10:48] <DOC> _xmpp-client._tcp.domain.com. 3600 IN SRV 5 0 5222 xmpp.vn.
_xmpp-server._tcp.domain.com. 3600 IN SRV 5 0 5269 xmpp.vn.
[22:10:48] admin leaves the room
[22:11:07] <DOC> or whatever the domain is
[22:11:08] <tekdmn> In theory that shouldn't expose your IP by itself
[22:11:11] carlos leaves the room
[22:11:33] <tekdmn> just that I bet CF can't proxy XMPP traffic, so you set the domains they point to to be non-proxied, aka grey-cloud
[22:11:36] <tekdmn> and those would.
[22:12:03] APach joins the room
[22:12:15] admin joins the room
[22:12:27] Jeroen joins the room
[22:12:45] Mx2 leaves the room
[22:12:54] Mx2 joins the room
[22:12:56] Jeroen leaves the room
[22:14:11] Jeroen joins the room
[22:14:16] <tekdmn> Wow, I just found an XMPP client that's actually readable, that's amazing. (My laptop has an amazingly destroyed window theme)
[22:14:39] Jeroen leaves the room
[22:14:44] pod leaves the room
[22:14:57] pitchum leaves the room
[22:15:51] pipo10 joins the room
[22:18:18] doctor leaves the room
[22:20:03] doctor leaves the room
[22:20:44] Thomas Lewis joins the room
[22:20:44] targ leaves the room
[22:22:26] doctor joins the room
[22:22:46] DOC leaves the room
[22:22:58] Mx2 joins the room
[22:23:44] Mx2 leaves the room
[22:23:45] Mx2 joins the room
[22:25:01] Mx2 leaves the room: Disconnected: Replaced by new connection
[22:25:02] Mx2 joins the room
[22:25:08] Thomas Lewis leaves the room
[22:27:15] sunblade joins the room
[22:27:15] bkero joins the room
[22:27:21] Mx2 leaves the room: Disconnected: Replaced by new connection
[22:27:22] Mx2 joins the room
[22:27:38] quentin leaves the room
[22:27:57] Mx2 leaves the room
[22:27:58] Mx2 joins the room
[22:28:02] Mx2 leaves the room
[22:28:03] Mx2 joins the room
[22:28:14] tekdmn leaves the room
[22:28:22] kikuchiyo leaves the room
[22:29:45] Mx2 leaves the room
[22:29:46] Mx2 joins the room
[22:30:19] Titi joins the room
[22:30:22] mirux leaves the room
[22:31:02] danielepiccoli leaves the room
[22:31:16] Mx2 leaves the room: Disconnected: Replaced by new connection
[22:31:17] Mx2 joins the room
[22:31:40] Thomas Lewis joins the room
[22:31:58] danielepiccoli leaves the room
[22:32:12] Mx2 leaves the room: Disconnected: Replaced by new connection
[22:32:13] Mx2 joins the room
[22:32:36] SouL leaves the room
[22:33:08] marzzzello leaves the room
[22:33:13] Thomas Lewis leaves the room
[22:34:11] marzzzello joins the room
[22:34:24] marzzzello leaves the room
[22:34:26] marzzzello joins the room
[22:34:43] marzzzello leaves the room
[22:35:30] marzzzello joins the room
[22:35:51] pod leaves the room
[22:36:40] tekdmn joins the room
[22:36:44] tekdmn leaves the room
[22:36:58] meeson_ joins the room
[22:37:15] BlackEdge leaves the room
[22:38:13] Millesimus leaves the room
[22:38:35] bowlofeggs joins the room
[22:38:48] stefan leaves the room
[22:38:52] stefan joins the room
[22:38:57] tekdmn joins the room
[22:39:02] tekdmn leaves the room
[22:39:30] JonNJ leaves the room
[22:40:08] <Licaon_Kter> tekdmn, which one?
[22:40:08] sponji leaves the room
[22:40:09] pipo10 leaves the room
[22:40:09] Tim leaves the room
[22:40:14] bowlofeggs leaves the room
[22:40:21] tekdmn joins the room
[22:40:35] BlackEdge joins the room
[22:40:48] <tekdmn> Psi. It's disregarding the recommendation to use a dark theme.
[22:43:28] andrey.g joins the room
[22:43:57] JonNJ joins the room
[22:45:09] apach leaves the room
[22:45:26] ted leaves the room
[22:46:08] daniel leaves the room
[22:47:15] sponji joins the room
[22:48:18] basti joins the room
[22:48:28] Thomas Lewis joins the room
[22:48:41] apach joins the room
[22:48:57] tekdmn leaves the room
[22:49:08] tekdmn joins the room
[22:49:46] Thomas Lewis leaves the room
[22:51:25] sunblade leaves the room
[22:51:43] Mx2 leaves the room: Disconnected: Replaced by new connection
[22:51:43] Mx2 joins the room
[22:52:49] [Alien] joins the room
[22:54:58] JonNJ leaves the room
[22:55:42] JonNJ joins the room
[22:56:00] ted joins the room
[22:56:17] meeson_ leaves the room
[22:58:23] Millesimus joins the room
[23:00:34] marc0s leaves the room: Disconnected: Replaced by new connection
[23:00:34] marc0s joins the room
[23:01:13] andrey.g leaves the room
[23:01:35] spla joins the room
[23:01:41] carlos joins the room
[23:03:16] spla leaves the room
[23:05:28] basti leaves the room
[23:06:18] doctor leaves the room
[23:06:21] doctor joins the room
[23:08:39] Thomas Lewis joins the room
[23:09:13] Thomas Lewis leaves the room
[23:10:16] alacer joins the room
[23:10:41] mightyBroccoli joins the room
[23:10:55] pipo10 joins the room
[23:11:52] Titi leaves the room
[23:12:06] mightyBroccoli joins the room
[23:14:42] Zash leaves the room
[23:14:55] daniel joins the room
[23:17:27] chrys leaves the room
[23:19:24] stp leaves the room
[23:31:55] gooya leaves the room
[23:32:33] gooya joins the room
[23:34:02] apach leaves the room
[23:35:24] teftera leaves the room
[23:36:17] suren leaves the room: Disconnected: Replaced by new connection
[23:36:19] suren joins the room
[23:38:49] apach joins the room
[23:44:05] apach leaves the room
[23:44:05] JonNJ leaves the room
[23:44:09] Thomas Lewis joins the room
[23:45:07] Thomas Lewis leaves the room
[23:47:57] gooya leaves the room
[23:48:41] dwd joins the room
[23:48:49] apach joins the room
[23:49:20] gooya joins the room
[23:49:29] Licaon_Kter leaves the room
[23:52:15] BlackEdge leaves the room
[23:52:58] Licaon_Kter leaves the room
[23:57:25] JonNJ leaves the room: Machine is going to sleep
[23:58:11] JonNJ joins the room
[23:58:51] dwd leaves the room
[23:58:54] stp joins the room
Powered by ejabberd - robust, scalable and extensible XMPP server Powered by Erlang Valid XHTML 1.0 Transitional Valid CSS!