lobilets.blogg.se

1. #Ejabberd chat security how to
2. #Ejabberd chat security install
3. #Ejabberd chat security full
4. #Ejabberd chat security code

Go to your website and test the chat out.Ejabberd, the “Erlang Jabber Daemon,” is an extensible, flexible and very high performance XMPP server written in the Erlang programming language. BOSH is served over an HTTPS proxy for better security and availability. Then place it in the right folder cp -r cryptocat/src/core /var/www/Įdit the config file to use your own server: cd /var/www A use case could beĪn internal cryptocat chat service where people don't need to change the default Take that into consideration when setting up the frontend. This is why the only recommended Cryptocat download is the browser extension from the official website, which downloads only once as opposed to every time (just like a regular desktop application), and is authenticated by Cryptocat's development team as genuine.

#Ejabberd chat security code

By centralizing the code redistribution in a "web front-end" and making it necessary for everyone to redownload the code every time, you create an opportunity for malicious code poisoning by the host, or code injection by a third party.

#Ejabberd chat security full

This means that every use needs a full re-download of the Cryptocat code. The comment below, and read the full thread on this Reddit post When you host Cryptocat as a website, this means that every time someone wants to use it, they technically will need to re-download the entire code by visiting the website. Setting up a web frontend is not recommended by the cryptocat developers. We are going to set up our own frontend on our Note that you now already can use your own server with the CryptoCat frontend That way once every 24 hours the ejabberd server gets cleaned up. Create a new crontabĪnd place the following in it: 1 1 * * * ejabberdctl delete-old-users 1 This is important, it cleans up unused ejabberd accounts. Save it and restart NGINX: /etc/init.d/nginx restart Ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:RC4:HIGH:!MD5:!aNULL:!EDH Ssl_certificate_key /etc/ssl/certs/key.pem vim /etc/nginx/sites-enabled/defaultĪdd_header Strict-Transport-Security max-age=31536000 When the certificate is in place you can continue to configure NGINX.Įdit the file or create a new virtual host. Openssl req -nodes -newkey rsa:4096 -keyout private.key -out CSR.csr Or generate a CSR and let it sign by a "official" CA like verisign or digicert: cd /etc/ssl/certs Openssl req -nodes -x509 -newkey rsa:4096 -keyout key.pem -out cert.crt -days 356 Using the following command: cd /etc/ssl/certs We need an SSL certificate for the web server.

#Ejabberd chat security how to

If you want a signed ejabberd ssl certificate you can read my tutorial how to

#Ejabberd chat security install

Install required packagesįirst we install the required packages: apt-get install ejabberd nginx vim gitĮdit the ejabberd configuratio file located: /etc/ejabberd/ejabberd.cfgĪnd place the following contents in it, replacing with

In the configuration files, you should replace with One should be forĮxample and the other is for the conferencing:Ĭ. Make sure you set up two DNS A records to your chat server. If you want to set up a federated XMPP Chat Network with ejabberd, see my With this referral link you'll get $100 credit for 60 days. You can also sponsor me by getting a Digital Ocean VPS. It means the world to me if you show your appreciation and you'll help pay the server costs. Go check it out!Ĭonsider sponsoring me on Github.

I'm developing an open source monitoring app called Leaf Node Monitoring, for windows, linux & android. Please, if you found this content useful, consider a small donation using any of the options below: Recently I removed all Google Ads from this site due to their invasive tracking, as well as Google Analytics. There were/are some issues with the encryption provided by CryptoCat. It supports secure encrypted group chat, secure encrypted private It covers the set up of ejabberd, nginx and the web interfaceįor CryptoCat. This is a guide on setting up a self hosted secure multiuser webchat service