[Freeswitch-users] Freeswitch TLS and Yealink t26p

[Mario G]

I have some of the new Yealink T32s I will add to the wiki. So far no issues with FreeSwitch. We really like them much better than the Cisco SPA962 they replaced.
Mario G

On Dec 21, 2012, at 9:41 AM, Michael Collins wrote:

> Antonio,
> 
> It looks like we have a number of phones listed here:
> 
> http://wiki.freeswitch.org/wiki/Tls#SIP_TLS_Device_Interoperability
> 
> However, Yealink is not among them. I've created a spot for Yealinks here:
> 
> http://wiki.freeswitch.org/wiki/Interop_List#Yealink_TLS_Configuration
> 
> Could you put what you've learned into that spot on the wiki?
> 
> Thanks!
> -MC
> 
> 
> On Fri, Dec 21, 2012 at 3:54 AM, Antonio <asilva at wirelessmundi.com> wrote:
> Answer to myself....
> 
> In the yealink configuration, in the account parameters, the "transport" must be force to TLS.  
> 
> I don't know why it just works.... Before i was using DNS-SRV, that should be the first option, yealink should have some issue here... i will report to them.
> 
> 
> Thanks,
> António
> 
> 
> On Fri, 2012-12-21 at 10:35 +0100, Antonio wrote:
>> Hi,
>> 
>> I'm trying to register a yealink with TLS, using my one certificates.
>> 
>> I follow the wiki and In fs i have both agent.pem and cafile.pem . I install in the phone the root certificate.
>> 
>> But when i try to register, i have (tport log):
>> 
>> 
>> tport.c:3186 tport_recv_iovec() tport_recv_iovec(0x808fb0) msg 0x7fe9d0aa8180 from (udp/192.168.10.1:5060) has 340 bytes, veclen = 1
>> tport.c:3004 tport_deliver() tport_deliver(0x808fb0): msg 0x7fe9d0aa8180 (340 bytes) from udp/192.168.10.23:5060/sip next=(nil)
>> tport.c:4202 tport_release() tport_release(0x808fb0): 0x7fe9d01142f0 by 0x7fe9d025d920 with 0x7fe9d0aa8180
>> tport.c:2730 tport_wakeup_pri() tport_wakeup_pri(0x7fe9c802aad0): events IN
>> tport.c:869 tport_alloc_secondary() tport_alloc_secondary(0x7fe9c802aad0): new secondary tport 0x7fe9c03e8450
>> tport_type_tls.c:603 tport_tls_accept() tport_tls_accept(0x7fe9c03e8450): new connection from tls/192.168.10.36:48754/sips
>> tport_tls.c:869 tls_connect() tls_connect(0x7fe9c03e8450): events NEGOTIATING
>> tport_tls.c:869 tls_connect() tls_connect(0x7fe9c03e8450): events NEGOTIATING
>> tport_tls.c:526 tls_post_connection_check() tls_post_connection_check(0x7fe9c03e8450): Peer did not provide X.509 Certificate.
>> 
>> 
>> 
>> I could make it work and have a register in the tls profile when i check on the phone the option in Security->Trusted Certificates: "Only Accept Trusted Certificates: DISABLED".
>> Could it be some bug in the yealink, or I’m missing something in the conf...
>> 
>> Another question, is there any problem if i choose to use this configuration... since is the phone that ignores the certificate and the validation is done by the server and not by the client. 
>> 
>> Can you help me?
>> 
>> Thanks,
>> António
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>> 
>> 
>> 
>> 
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://wiki.freeswitch.org
>> http://www.cluecon.com
>> 
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
> 
> -- 
> 
> Un cordial saludo / Best regards, 
> 
>  _________________________
> 
> António Silva
> 
> E-mail:asilva at wirelessmundi.com
> 
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
> 
> 
> 
> 
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
> 
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
> 
> 
> 
> 
> -- 
> Michael S Collins
> Twitter: @mercutioviz
> http://www.FreeSWITCH.org
> http://www.ClueCon.com
> http://www.OSTAG.org
> 
> 
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
> 
> 
> 
> 
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
> 
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20121221/b9f1b92c/attachment.html