For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rick_Nyman's avatar
Rick_Nyman
Icon for Nimbostratus rankNimbostratus
May 23, 2009

XMPP with STARTTLS

I love the simplicity of SSL offload using standard SSL/TLS. Unfortunately, I've recently been given a requirement to do XMPP (an Instant Messaging protocol) using STARTTLS.     I found ...
application delivery
dev
devops
iRules
Rick_Nyman's avatar
Rick_Nyman
Icon for Nimbostratus rankNimbostratus
Apr 30, 2012
Set up your virtual server with an SSL profile (as if you were setting up SSL/TLS over port 5223, but using 5222). The SSL profile won't take effect at connect because of the SSL::disable command.

 

 

Wireshark will be your friend troubleshooting this; you should see the XML/XMPP data going back and forth clear text, then SSL handshaking (which you might need to decode 5222 as SSL in Wireshark to decode.

 

 

Sorry for the delayed response, hope this helps.