<div dir="ltr"><div>I am trying now to set a Polycom to work with FreeSwitch and TLS. I have a Polycom-501 which does not have an internal certificate, thus only one-way certificate validation is needed. I've downloaded the root certificate to he Polyciom, and Freeswitch gives me the following error:</div>
<div> </div>
<div>Peer did not provide X.509 Certificate<br></div>
<div>I understand that it tries to do mutual authentication which is not possible in this case. How can I tell FreeSwitch to ignore the client's certificate?</div>
<div> </div>
<div>BTW, I am running 1.0.5pre9, and it works ok using TLS with SNOM and Yealink.</div>
<div> </div>
<div> Thanks! __Yehavi:<br></div>
<div class="gmail_quote">2009/12/17 Yehavi Bourvine <span dir="ltr"><<a href="mailto:yehavi.bourvine@gmail.com">yehavi.bourvine@gmail.com</a>></span><br>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0.8ex; PADDING-LEFT: 1ex; PADDING-RIGHT: 1ex; BORDER-RIGHT: #ccc 1px solid" class="gmail_quote">
<div dir="rtl">
<div style="TEXT-ALIGN: left" dir="ltr">I am trying Audiocodes and Vegastream ATAs, and work with either the manufacturer or the local representative here.</div>
<div style="TEXT-ALIGN: left" dir="ltr">On SNOM I managed to make it work, and will try Polycom soon (once I manage to grab one unit from our users...).</div>
<div style="TEXT-ALIGN: left" dir="ltr"> </div>
<div style="TEXT-ALIGN: left" dir="ltr"> Thanks, __yehavi:<br><br></div>
<div dir="ltr" class="gmail_quote">2009/12/17 Brian West <span dir="ltr"><<a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a>></span></div>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote">
<div>
<div></div>
<div class="h5">
<div dir="ltr">
<div style="WORD-WRAP: break-word">Also what device are you using? I haven't tested with many so far... Polycom, Snom and a few others do TLS (see interop page on wiki) others do it wrong.
<div><br></div><font color="#888888">
<div>/b</div></font>
<div>
<div><br>
<div>
<div>On Dec 17, 2009, at 10:04 AM, Kristian Kielhofner wrote:</div><br>
<blockquote type="cite"><span style="TEXT-TRANSFORM: none; TEXT-INDENT: 0px; BORDER-COLLAPSE: separate; FONT: medium Helvetica; WHITE-SPACE: normal; LETTER-SPACING: normal; WORD-SPACING: 0px">You could try ssldump:<br><br>
<a href="http://www.rtfm.com/ssldump/" target="_blank">http://www.rtfm.com/ssldump/</a><br></span></blockquote></div><br></div></div></div></div><br></div></div>
<div class="im">_______________________________________________<br>FreeSWITCH-users mailing list<br><a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br><a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><br>
<br></div></blockquote><br></div></blockquote></div></div>