Jabber for Mac - SSL Certificate Warning

[Kirill Klimakhin]

Hi guys,

Just applied 11 SSL certificates to all of my UC applications (CUCM, CUC, CUPS, CER and CCX) and all of the web pages are working without any SSL warnings.

When I sign in from a Windows Jabber Client, both my servers CUPS01 and CUPS02 work without ANY warnings.

I am also able to sign into https://cups01.domain.com and https://cups02.domain.com without ANY warnings.

When I sign in from a Mac Jabber client, I get a warning that CUPS02's certificate is invalid. It tells me that the certificate has not been verified by a third party.        

I deleted the certs, regenerarted the CSR and got new certs from the public CA.... applied fine and still getting that error.

Using the latest Jabber client, tried it on several machines.

[Jonathan Schulenberg]

Just checking the basics: have you checked that the root CA is trusted by OSX?

http://www.techrepublic.com/blog/mac/managing-ssl-certificate-authorities-on-os-x/314

Please remember to rate helpful responses and identify helpful or correct answers.

[Kirill Klimakhin]

This is the same thing that TAC told me... but I don't get why I would have to manually trust the root CA if it is issued by a third party CA and it works fine when you access it through the web interface?

After TAC told me the work around was to manually trust the certs from both nodes (which is NONSENSE!) I figured out what the issue was all on my own.

This is due to XMPP running over HTTPS and you need to upload certificates for both Tomcat AND for CUP-XMPP... now I get no errors...

[Mohan Vairakkannu]

Hi CK,

Thanks for your posting on this issue. I am experiencing the same issue on MAC which is xmpp over HTTPS. So do i need to install anythign on the client side or only on the server side? can you prvide detail on your steps to fix?

regards

Mohan

[Christos Georgiadis]

Hi Mohan,

cklimakhin provided the solution. You can also check this out

http://www.cisco.com/en/US/products/ps11764/products_tech_note09186a0080c178fe.shtml#anc8

HTH,

Christos

[Mohan Vairakkannu]

Thank you Christos.