Help on how to set up the certificate in openfire

The import of the certificate seems to have been successful.

Ideally, a certificate is used that contains entries for all of these domain names:

  • the XMPP domain name (eg: igniterealtime.org)
  • the FQDN of the server (or servers when running a cluster) on which Openfire is installed (eg: xmpp.igniterealtime.org)
  • All domain names of XMPP services ran by Openfire. These, by default, include:
    – the multi-user chat service called ‘conference’ (eg: conference.igniterealtime.org)
    – the pubsub service (eg: pubsub.igniterealtime.org)

When a certificate is installed that does not cover all of these, then the warning that you’re copy/pasting is displayed by Openfire.

Some or all functionality of Openfire might be unavailable (or not available through an encrypted channel) when not all of these entries are present in the certificate. In many cases, you can still use Openfire perfectly fine.