Thanks for the report. This is an upstream bug in 0.9.11 when used with LuaSec 0.6. Patch is here: https://hg.prosody.im/0.9/rev/2a7b52437167
We're working on a 0.9.12 release with the fix.
- Bug#846470: prosody: fails to check incoming certificates val... hurlebouc
- Bug#846470: prosody: fails to check incoming certificate... Matthew Wild
