Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm developing client-server app and trying to secure the connection. I'm using openfire as the server. I don't want any other jabber-clients to connect to it except mine.

I want to make it by using SSL client certificates ... I would integrate it in my client application, import it into openfire and check it on every connection attempt.

Does anybody had experience securing openfire server in such way? I would like to know how to generate certs (cert type), import it in openfire (still can't import anything!) and use it on the client side.

share|improve this question
    
This should probably have been asked on stackoverflow.com since it is a software development question. –  Caleb Apr 14 '11 at 7:45
add comment

1 Answer

SSL certificates are not a solution to limit connections to only verified users. SSL certificates are designed to prove the identity of a host, but not that of a client.

It sounds like you need to implement some other private key based authentication system, possibly using PGP or RSA keys built into your program.

Also be aware that building keys into your program would make it easy to take advantage of your system if the app fell into the wrong hands, and it would be hard for you to fix because you would have to distribute a new app. Usually keys should be distributed separately so that they can be updated by the user if necessary.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.