{"id":1353,"date":"2011-11-20T22:37:20","date_gmt":"2011-11-20T22:37:20","guid":{"rendered":"http:\/\/nethemba.com\/de\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\/"},"modified":"2011-11-20T22:37:20","modified_gmt":"2011-11-20T22:37:20","slug":"openfire-jabber-server-and-ssl-certificate-configuration-how-to","status":"publish","type":"post","link":"https:\/\/nethemba.com\/de\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\/","title":{"rendered":"Openfire jabber server and SSL certificate configuration HOW-TO"},"content":{"rendered":"

Last week, I was up to configure well known and successful Openfire jabber server with valid SSL certificate configuration. Initially I have had hard times trying to do it according to many howtos and forums accessible using google, none of which worked. Each of them referenced manipulation of java SSL keystore directly with keytool.<\/p>\n

It did not work. It was waste of time. And if after many attempts all seemed good, asterisk throwed java exceptions, when accessing certificate management functionality of Openfire administration interface.<\/p>\n

Despite all these troubles, setup of SSL certificates with asterisk is in fact very simple.<\/p>\n

First, login to the administration web interface, enter within same browser session following URL in your browser:<\/p>\n

http:\/\/localhost:9090\/import-certificate.jsp<\/a><\/p>\n

or<\/p>\n

https:\/\/localhost:9091\/import-certificate.jsp<\/a>
\n(Replace localhost with your Openfire server’s IP address or hostname).<\/p>\n

Then, log in to asterisk machine via ssh and find keystore files (usually found at \/etc\/openfire\/security\/keystore).<\/p>\n

Then list certificates present in this keystore file (it usualy contains self-signed certificate created at openfire installation):<\/p>\n

#keytool -list -keystore keystore<\/code><\/pre>\n
This will issue output similar to following:<\/p>\n
Keystore type: JKS
\nKeystore provider: SUN<\/code><\/p>\n
Your keystore contains 1 entry<\/code><\/p>\n
jabber.yourdomain.com, Oct 10, 2011, PrivateKeyEntry,
\nCertificate fingerprint (MD5): 1C:F3:70:A7:49:F2:6E:13:B7:33:53:D2:5A:97:B9:0A<\/code>
\nNext, delete this current certificate (or all of them) using alias name printed out:<\/p>\n
#keytool -delete -keystore keystore -alias jabber.yourdomain.com<\/code><\/p>\n
Provide password for your keystore, by default it is ‚changeit‘ word.<\/p>\n
After #keytool -list -keystore<\/code> keystore command shows no more keys in your keystore,<\/p>\n
After, return back to Openfire administration web console to the \/import-certificate.jsp <\/code>location opened before, which is by the way not accessible directly from any Openfire administration web console menu. It should look like following screenshot:<\/p>\n
Paster private SSL key to be used with Openfire in first large input box, put your signed certificate in second large box and in case your private key is password protected, enter password in private key password field.<\/p>\n
Press save and from now on your Openfire installation should be using SSL certificate signed by renowned SSL CA authority. (We recommend StartSSL for hobby projects).<\/p>\n
I hope this can save lots of time to any people trying to get signed SSL certificate working with Openfire jabber server so no one would repeat all the painful and time-consuming steps I took myself.<\/p>\n","protected":false},"excerpt":{"rendered":"
Last week, I was up to configure well known and successful Openfire jabber server with valid SSL certificate configuration. Initially I have had hard times trying to do it according to many howtos and forums accessible using google, none of which worked. Each of them referenced manipulation of java SSL keystore directly with keytool. It […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[11],"tags":[769,770,771],"class_list":["post-1353","post","type-post","status-publish","format-standard","hentry","category-unkategorisiert","tag-openfire-de","tag-openfire-ssl-howto-de","tag-ssl-de"],"yoast_head":"\nOpenfire jabber server and SSL certificate configuration HOW-TO - Nethemba<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nethemba.com\/de\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\/\" \/>\n<meta property=\"og:locale\" content=\"de_DE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Openfire jabber server and SSL certificate configuration HOW-TO - Nethemba\" \/>\n<meta property=\"og:description\" content=\"Last week, I was up to configure well known and successful Openfire jabber server with valid SSL certificate configuration. Initially I have had hard times trying to do it according to many howtos and forums accessible using google, none of which worked. Each of them referenced manipulation of java SSL keystore directly with keytool. It […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nethemba.com\/de\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\/\" \/>\n<meta property=\"og:site_name\" content=\"Nethemba\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/nethemba\" \/>\n<meta property=\"article:published_time\" content=\"2011-11-20T22:37:20+00:00\" \/>\n<meta name=\"author\" content=\"Pavol Lupt\u00e1k\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@nethemba\" \/>\n<meta name=\"twitter:site\" content=\"@nethemba\" \/>\n<meta name=\"twitter:label1\" content=\"Verfasst von\" \/>\n\t<meta name=\"twitter:data1\" content=\"Pavol Lupt\u00e1k\" \/>\n\t<meta name=\"twitter:label2\" content=\"Gesch\u00e4tzte Lesezeit\" \/>\n\t<meta name=\"twitter:data2\" content=\"2\u00a0Minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\\\/\"},\"author\":{\"name\":\"Pavol Lupt\u00e1k\",\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/#\\\/schema\\\/person\\\/5f4ba68c8e1a2013d30e0804245b8234\"},\"headline\":\"Openfire jabber server and SSL certificate configuration HOW-TO\",\"datePublished\":\"2011-11-20T22:37:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\\\/\"},\"wordCount\":356,\"commentCount\":0,\"keywords\":[\"openfire\",\"openfire ssl howto\",\"ssl\"],\"articleSection\":[\"Unkategorisiert\"],\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/nethemba.com\\\/de\\\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\\\/\",\"url\":\"https:\\\/\\\/nethemba.com\\\/de\\\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\\\/\",\"name\":\"Openfire jabber server and SSL certificate configuration HOW-TO - Nethemba\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/#website\"},\"datePublished\":\"2011-11-20T22:37:20+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/#\\\/schema\\\/person\\\/5f4ba68c8e1a2013d30e0804245b8234\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\\\/#breadcrumb\"},\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/nethemba.com\\\/de\\\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/nethemba.com\\\/de\\\/home-new-2025\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Openfire jabber server and SSL certificate configuration HOW-TO\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/#website\",\"url\":\"https:\\\/\\\/nethemba.com\\\/de\\\/\",\"name\":\"Nethemba\",\"description\":\"We care about your security\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/nethemba.com\\\/de\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"de\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/nethemba.com\\\/de\\\/#\\\/schema\\\/person\\\/5f4ba68c8e1a2013d30e0804245b8234\",\"name\":\"Pavol Lupt\u00e1k\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/978b23022518d076eaa243b375d2e0272af4f00dd502ce79cc357276d9bc2495?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/978b23022518d076eaa243b375d2e0272af4f00dd502ce79cc357276d9bc2495?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/978b23022518d076eaa243b375d2e0272af4f00dd502ce79cc357276d9bc2495?s=96&d=mm&r=g\",\"caption\":\"Pavol Lupt\u00e1k\"},\"sameAs\":[\"https:\\\/\\\/www.nethemba.com\\\/\"],\"url\":\"https:\\\/\\\/nethemba.com\\\/de\\\/author\\\/nethemba-admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Openfire jabber server and SSL certificate configuration HOW-TO - Nethemba","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nethemba.com\/de\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\/","og_locale":"de_DE","og_type":"article","og_title":"Openfire jabber server and SSL certificate configuration HOW-TO - Nethemba","og_description":"Last week, I was up to configure well known and successful Openfire jabber server with valid SSL certificate configuration. Initially I have had hard times trying to do it according to many howtos and forums accessible using google, none of which worked. Each of them referenced manipulation of java SSL keystore directly with keytool. It […]","og_url":"https:\/\/nethemba.com\/de\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\/","og_site_name":"Nethemba","article_publisher":"https:\/\/www.facebook.com\/nethemba","article_published_time":"2011-11-20T22:37:20+00:00","author":"Pavol Lupt\u00e1k","twitter_card":"summary_large_image","twitter_creator":"@nethemba","twitter_site":"@nethemba","twitter_misc":{"Verfasst von":"Pavol Lupt\u00e1k","Gesch\u00e4tzte Lesezeit":"2\u00a0Minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nethemba.com\/de\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\/#article","isPartOf":{"@id":"https:\/\/nethemba.com\/de\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\/"},"author":{"name":"Pavol Lupt\u00e1k","@id":"https:\/\/nethemba.com\/de\/#\/schema\/person\/5f4ba68c8e1a2013d30e0804245b8234"},"headline":"Openfire jabber server and SSL certificate configuration HOW-TO","datePublished":"2011-11-20T22:37:20+00:00","mainEntityOfPage":{"@id":"https:\/\/nethemba.com\/de\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\/"},"wordCount":356,"commentCount":0,"keywords":["openfire","openfire ssl howto","ssl"],"articleSection":["Unkategorisiert"],"inLanguage":"de","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/nethemba.com\/de\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/nethemba.com\/de\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\/","url":"https:\/\/nethemba.com\/de\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\/","name":"Openfire jabber server and SSL certificate configuration HOW-TO - Nethemba","isPartOf":{"@id":"https:\/\/nethemba.com\/de\/#website"},"datePublished":"2011-11-20T22:37:20+00:00","author":{"@id":"https:\/\/nethemba.com\/de\/#\/schema\/person\/5f4ba68c8e1a2013d30e0804245b8234"},"breadcrumb":{"@id":"https:\/\/nethemba.com\/de\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\/#breadcrumb"},"inLanguage":"de","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nethemba.com\/de\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/nethemba.com\/de\/openfire-jabber-server-and-ssl-certificate-configuration-how-to\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nethemba.com\/de\/home-new-2025\/"},{"@type":"ListItem","position":2,"name":"Openfire jabber server and SSL certificate configuration HOW-TO"}]},{"@type":"WebSite","@id":"https:\/\/nethemba.com\/de\/#website","url":"https:\/\/nethemba.com\/de\/","name":"Nethemba","description":"We care about your security","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nethemba.com\/de\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"de"},{"@type":"Person","@id":"https:\/\/nethemba.com\/de\/#\/schema\/person\/5f4ba68c8e1a2013d30e0804245b8234","name":"Pavol Lupt\u00e1k","image":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/secure.gravatar.com\/avatar\/978b23022518d076eaa243b375d2e0272af4f00dd502ce79cc357276d9bc2495?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/978b23022518d076eaa243b375d2e0272af4f00dd502ce79cc357276d9bc2495?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/978b23022518d076eaa243b375d2e0272af4f00dd502ce79cc357276d9bc2495?s=96&d=mm&r=g","caption":"Pavol Lupt\u00e1k"},"sameAs":["https:\/\/www.nethemba.com\/"],"url":"https:\/\/nethemba.com\/de\/author\/nethemba-admin\/"}]}},"_links":{"self":[{"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/posts\/1353","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/comments?post=1353"}],"version-history":[{"count":0,"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/posts\/1353\/revisions"}],"wp:attachment":[{"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/media?parent=1353"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/categories?post=1353"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nethemba.com\/de\/wp-json\/wp\/v2\/tags?post=1353"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}