Member-only story
I am not focused on installation in this article, just mention about config SSL for https
Noted, for valid SSL, you need to buy one domain for Ejabberd server. With the IP address we only config as the self-sign mode. Assume that we want to config https://xmpp.domain.com:5280
Steps
To get an SSL certificate working on the Ejabberd, follow:
Create a Certificate Signing Request (CSR) and a Private Key
You can use the online tool: https://csrgenerator.com/
Or create manually:
mkdir ~/.ssl
openssl genrsa -des3 -out ~/.ssl/server.key 2048
# type passopenssl req -new -key ~/.ssl/server.key -out ~/.ssl/server.csr
# fill info
Country Name (2 letter code) [AU]:VN
State or Province Name (full name) [Some-State]:VietNam
Locality Name (eg, city) []:HCMC
Organization Name (eg, company) [Internet Widgits Pty Ltd]:BSS
Organizational Unit Name (eg, section) []:BSS
Common Name (e.g. server FQDN or YOUR name) []:*.domain.com
Email Address []:admin@domain.com
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:hehe
An optional company name []:BSS