Conversation

Notices

1. Embed this notice
   Cadu Silva :v_fb: (cadusilva@bolha.one)'s status on Friday, 21-Mar-2025 12:51:08 JST Cadu Silva :v_fb:

   • monocles

   Hey @monocles, what does Monocles Chat expects in order to successfully validate DANE/TLSA?

   DNSSEC and TLSA records are correctly configured for my domain and yet I receive "DANE failed" when trying to connect while enforcing it.

   It works when I'm using WiFi in the same network as the server, but when I switch to mobile data, outside the server network, it doesn't work anymore.

   I can't pinpoint what is causing this behavior.

   • Embed this notice
     Cadu Silva :v_fb: (cadusilva@bolha.one)'s status on Friday, 21-Mar-2025 20:26:57 JST Cadu Silva :v_fb:

     in reply to

     • monocles

     @monocles my server has only IPv4, but my carrier uses both IPv4 and IPv6 :thinking_rotate:

     But even when disabling IPv6, the "DANE failed" error persists.

     I tried to join the room but it says I wasn't authorized because my server certificate is not trusted (it's from ZeroSSL).

   • Embed this notice
     monocles (monocles@monocles.social)'s status on Friday, 21-Mar-2025 20:26:58 JST monocles

     in reply to

     @cadusilva Hi Cadu Silva! Could be your mobile data provider the problem? Is both IPv4 and IPv6 correctly configured on the server?

     Also feel free to join our support chat room:
     xmpp:support@conference.monocles.eu

   • Embed this notice
     Cadu Silva :v_fb: (cadusilva@bolha.one)'s status on Saturday, 22-Mar-2025 02:52:11 JST Cadu Silva :v_fb:

     in reply to

     • monocles

     @monocles I'm using a pretty recent set of ciphers, but the problem was solved when I issued a new cert, now from Let's Encrypt.

     Ciphers: ECDH+AESGCM:EDH+AESGCM:ECHACHA20+POLY1305:ECDHE+CHACHA20:ECDHE+AES:@STRENGTH:!SHA:!CBC
     Curve: secp256r1
     Min TLS version: 1.2

   • Embed this notice
     monocles (monocles@monocles.social)'s status on Saturday, 22-Mar-2025 02:52:12 JST monocles

     in reply to

     @cadusilva Which ciphers do you use on your XMPP server? For security reasons monocles chat and the monocles servers are restricted to the newest only.