![PP](/rails/active_storage/representations/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBWDA9IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--08d9c0c0c40ebf75e482da72b97b8f697df4a57a/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdDRG9MWm05eWJXRjBTU0lJYW5CbkJqb0dSVlE2RkhKbGMybDZaVjkwYjE5c2FXMXBkRnNIYVFHQWFRR0FPZ3B6WVhabGNuc0hPZ3h4ZFdGc2FYUjVhVlU2Q25OMGNtbHdWQT09IiwiZXhwIjpudWxsLCJwdXIiOiJ2YXJpYXRpb24ifX0=--ab08e3537826c078bb35a6ee1bf34556480c5182/IMG_20200919_132719.jpg)
Pirate Praveen Mon 11 Jan 2016 6:59AM
@fayadfami I have started https://gitlab.com/piratemovin/diasp.in/wikis/home and you can delete the other repo.
Pirate Vik Mon 11 Jan 2016 9:32AM
@praveenarimbrathod I am still seeing the old certificate and the expiry warning when trying to use xmpp. Is the certificate for the xmpp service handled differently?
![PP](/rails/active_storage/representations/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBWDA9IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--08d9c0c0c40ebf75e482da72b97b8f697df4a57a/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdDRG9MWm05eWJXRjBTU0lJYW5CbkJqb0dSVlE2RkhKbGMybDZaVjkwYjE5c2FXMXBkRnNIYVFHQWFRR0FPZ3B6WVhabGNuc0hPZ3h4ZFdGc2FYUjVhVlU2Q25OMGNtbHdWQT09IiwiZXhwIjpudWxsLCJwdXIiOiJ2YXJpYXRpb24ifX0=--ab08e3537826c078bb35a6ee1bf34556480c5182/IMG_20200919_132719.jpg)
Pirate Praveen Mon 11 Jan 2016 12:34PM
@vik yes, prosody configuration (/etc/prosody/prosody.cfg.lua) is still using the old certificates. /etc/nginx/sites-available/diasp.in has path for the new certificates. I'll update prosody now.
![PP](/rails/active_storage/representations/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBWDA9IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--08d9c0c0c40ebf75e482da72b97b8f697df4a57a/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdDRG9MWm05eWJXRjBTU0lJYW5CbkJqb0dSVlE2RkhKbGMybDZaVjkwYjE5c2FXMXBkRnNIYVFHQWFRR0FPZ3B6WVhabGNuc0hPZ3h4ZFdGc2FYUjVhVlU2Q25OMGNtbHdWQT09IiwiZXhwIjpudWxsLCJwdXIiOiJ2YXJpYXRpb24ifX0=--ab08e3537826c078bb35a6ee1bf34556480c5182/IMG_20200919_132719.jpg)
Pirate Praveen Mon 11 Jan 2016 12:38PM
@vik I have made the changes, can you confirm?
![PP](/rails/active_storage/representations/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBWDA9IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--08d9c0c0c40ebf75e482da72b97b8f697df4a57a/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdDRG9MWm05eWJXRjBTU0lJYW5CbkJqb0dSVlE2RkhKbGMybDZaVjkwYjE5c2FXMXBkRnNIYVFHQWFRR0FPZ3B6WVhabGNuc0hPZ3h4ZFdGc2FYUjVhVlU2Q25OMGNtbHdWQT09IiwiZXhwIjpudWxsLCJwdXIiOiJ2YXJpYXRpb24ifX0=--ab08e3537826c078bb35a6ee1bf34556480c5182/IMG_20200919_132719.jpg)
Pirate Praveen Mon 11 Jan 2016 12:55PM
Added prosody user to acl
sudo setfacl -m u:prosody:rx /etc/letsencrypt/live/
and
sudo setfacl -m u:prosody:rx /etc/letsencrypt/live/diasp.in
![PP](/rails/active_storage/representations/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBWDA9IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--08d9c0c0c40ebf75e482da72b97b8f697df4a57a/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdDRG9MWm05eWJXRjBTU0lJYW5CbkJqb0dSVlE2RkhKbGMybDZaVjkwYjE5c2FXMXBkRnNIYVFHQWFRR0FPZ3B6WVhabGNuc0hPZ3h4ZFdGc2FYUjVhVlU2Q25OMGNtbHdWQT09IiwiZXhwIjpudWxsLCJwdXIiOiJ2YXJpYXRpb24ifX0=--ab08e3537826c078bb35a6ee1bf34556480c5182/IMG_20200919_132719.jpg)
Pirate Praveen Mon 11 Jan 2016 1:21PM
acl's were not enough as it was a symlink. I changed group of /etc/letsencrypt/live and /etc/letsencrypt/archive and subdirectories to ssl-cert which includes prosody. I also made chmod g+rx for these. @manukrishnantv can you make sure new certs generated by letsencrypt has root:ssl-cert ownership?
Pirate Vik Mon 11 Jan 2016 2:03PM
cool, xmpp is back up and running now
![PP](/rails/active_storage/representations/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBWDA9IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--08d9c0c0c40ebf75e482da72b97b8f697df4a57a/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdDRG9MWm05eWJXRjBTU0lJYW5CbkJqb0dSVlE2RkhKbGMybDZaVjkwYjE5c2FXMXBkRnNIYVFHQWFRR0FPZ3B6WVhabGNuc0hPZ3h4ZFdGc2FYUjVhVlU2Q25OMGNtbHdWQT09IiwiZXhwIjpudWxsLCJwdXIiOiJ2YXJpYXRpb24ifX0=--ab08e3537826c078bb35a6ee1bf34556480c5182/IMG_20200919_132719.jpg)
Pirate Praveen Mon 11 Jan 2016 2:51PM
https://xmpp.net/result.php?domain=diasp.in&type=server shpws our certficate score as B for allowing SSLv3. I think we should disable it.
I have documented these details at https://gitlab.com/piratemovin/diasp.in/wikis/tls @manukrishnantv @fayadfami @vik add anything missing there.
Fayad Fami Thu 14 Jan 2016 8:14PM
@praveenarimbrathod i don't have the rights to delete repositories. Can you remove piratemovin/diasp.in-wiki.
![BC](https://secure.gravatar.com/avatar/e3deb8748dbc816ec5af19d6858fd498.png?d=retro&r=pg&s=128)
Balasankar C Thu 14 Jan 2016 8:41PM
Done.
![BC](https://secure.gravatar.com/avatar/e3deb8748dbc816ec5af19d6858fd498.png?d=retro&r=pg&s=128)
Balasankar C Thu 14 Jan 2016 8:41PM
@fayad You are now an owner. :D
![PP](/rails/active_storage/representations/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBWDA9IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--08d9c0c0c40ebf75e482da72b97b8f697df4a57a/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdDRG9MWm05eWJXRjBTU0lJYW5CbkJqb0dSVlE2RkhKbGMybDZaVjkwYjE5c2FXMXBkRnNIYVFHQWFRR0FPZ3B6WVhabGNuc0hPZ3h4ZFdGc2FYUjVhVlU2Q25OMGNtbHdWQT09IiwiZXhwIjpudWxsLCJwdXIiOiJ2YXJpYXRpb24ifX0=--ab08e3537826c078bb35a6ee1bf34556480c5182/IMG_20200919_132719.jpg)
Pirate Praveen Sun 7 Feb 2016 6:15AM
@fayadfami @akshay can you fix the podupti.me listing for diasp.in? I think we got a negative score when certificate was expired and it was never retried.
![PP](/rails/active_storage/representations/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBWDA9IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--08d9c0c0c40ebf75e482da72b97b8f697df4a57a/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdDRG9MWm05eWJXRjBTU0lJYW5CbkJqb0dSVlE2RkhKbGMybDZaVjkwYjE5c2FXMXBkRnNIYVFHQWFRR0FPZ3B6WVhabGNuc0hPZ3h4ZFdGc2FYUjVhVlU2Q25OMGNtbHdWQT09IiwiZXhwIjpudWxsLCJwdXIiOiJ2YXJpYXRpb24ifX0=--ab08e3537826c078bb35a6ee1bf34556480c5182/IMG_20200919_132719.jpg)
Pirate Praveen Sun 7 Feb 2016 6:17AM
Just opened an issue https://github.com/diasporg/Poduptime/issues/36
Fayad Fami Tue 9 Feb 2016 10:44AM
Gave a request to podupti.me for editing existing server details. And sent a message to David about it. @praveenarimbrathod
Edit. Diasp.in has been updated. But more to do before it takes effect. https://codema.in/d/CEBGMiT5/update-diaspora-to-0-5-6-3#comment-920037
Fayad Fami · Mon 11 Jan 2016 6:52AM
Yes, that looks more organized.