# SSL certificate for xmpp-upload

**URL:** <https://forum.yunohost.org/t/ssl-certificate-for-xmpp-upload/11218>\
**Category:** Support\
**Tags:** french, english\
**Created:** [May 6, 2020, 12:41pm UTC](https://forum.yunohost.org/t/ssl-certificate-for-xmpp-upload/11218 "2020-05-06T12:41:05Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![guilg](https://forum.yunohost.org/letter_avatar_proxy/v4/letter/g/ebca7d/32.png) [@guilg](https://forum.yunohost.org/u/guilg)\
**Post date:** [May 6, 2020, 12:41pm UTC](https://forum.yunohost.org/t/ssl-certificate-for-xmpp-upload/11218/1 "2020-05-06T12:41:05Z")

</div>

## 🇬🇧/🇺🇸

### My YunoHost server

**Hardware:** VPS bought online (ARM)  
**YunoHost version:** 3.8.2.2  
**I have access to my server :** Through SSH | through the webadmin  
**Are you in a special context or did you perform some particular tweaking on your YunoHost instance ?** : no

### Description of my issue

Hey there, I have an issue sending file with XMPP. It seems there were some problems that were fixed quite recently, but now I have a certificate issue. From my understanding, now the files are sent through xmpp-upload.domain.tld.  
Depending on the client, it either display some spooky message because the certificate is not correct (on Conversations for Android), or fail to send the message without explanation (Dino on Linux).  
When visiting xmpp-upload.domain.tld with Firefox, it refuses to connect because of HSTS with error code “SSL\_ERROR\_BAD\_CERT\_DOMAIN”.  
I think I just need to sign a certificate for xmpp-upload.domain.tld with Let’s Encrypt, as mentionned [here](https://forum.yunohost.org/t/yunohost-3-8-testing-call-for-feedback/10870/44). But I have no idea how to do that. I thought to add the domain with the Yunohost web admin to get a LE certificate, but logically it is not allowed to use this subdomain.  
I guess my question can be summed up :

**TL;DR** : how to sign with Let’s Encrypt a subdomain that is not registered in the Yunohost web admin ?

Cheers,  
Guillaume

---

<div class="post-metadata">

**Author:** ![Aleks](https://forum.yunohost.org/user_avatar/forum.yunohost.org/aleks/32/1704_2.png) [@Aleks](https://forum.yunohost.org/u/Aleks)\
**Post date:** [May 6, 2020, 12:51pm UTC](https://forum.yunohost.org/t/ssl-certificate-for-xmpp-upload/11218/2 "2020-05-06T12:51:20Z")

</div>

If you added the DNS configuration for xmpp-upload recently, you should just force-renew the certificate for your domain.tld and it will contain an “alternative name” which will be xmpp-upload.domain.tld and will be automatically used by Yunohost etc.

Just go to the webadmin in Domains \> domain.tld \> SSL certificate \> Force the renewal of the current cert

---

<div class="post-metadata">

**Author:** ![guilg](https://forum.yunohost.org/letter_avatar_proxy/v4/letter/g/ebca7d/32.png) [@guilg](https://forum.yunohost.org/u/guilg)\
**Post date:** [May 6, 2020, 12:59pm UTC](https://forum.yunohost.org/t/ssl-certificate-for-xmpp-upload/11218/3 "2020-05-06T12:59:51Z")

</div>

This was it, during signing it detected xmpp-upload and it is signed now, no certificates problem anymore !  
Now, images can be sent but I have an issue sending pdf, saying it is not allowed but I think I saw a fix for that somewhere.  
Thanks pour ta réactivité en tout cas 😉

---

<div class="post-metadata">

**Author:** ![system](https://forum.yunohost.org/uploads/default/original/2X/f/f59fe8e3ee6b100b4f574d30d6e30479c68b89f0.png) [@system](https://forum.yunohost.org/u/system)\
**Post date:** [May 21, 2020, 12:59pm UTC](https://forum.yunohost.org/t/ssl-certificate-for-xmpp-upload/11218/4 "2020-05-21T12:59:52Z")

</div>

Closed on May 21, 2020, 12:59pm UTC

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.