matrix-org / matrix-federation-tester

Tester for matrix federation written in golang.

81 stars 17 forks source link

Certs marked as valid on matrix.example.org, but invalid on example.org #27

Closed anoadragon453 closed 5 years ago

anoadragon453 commented 5 years ago

Testing matrix.snopyta.org, we get ValidCertificates == true, but testing snopyta.org gives false.

Well-known seems to be set up correctly, so this doesn't make much sense.

26 may be the cause however.

tulir commented 5 years ago

This does not seem to be fixed by matrix-org/gomatrixserverlib#109.

richvdh commented 5 years ago

indeed. the problem is not the parsing of the port (as per #26), but the fact that it is looking for the wrong server name in the certificate. it looks like #35 fixes this

richvdh commented 5 years ago

https://matrix.org/federationtester/api/report?server_name=snopyta.org now gives "ValidCertificates": true \o/