<div dir="ltr"><div>Thanks, I have a partial success which involved two steps:</div>
<ul>
<li>The wiki says to create a root certifcate with <strong>gentls_cert setup </strong>with no other parameters; I had to add my domain's data to this command. The new certificate has been downloaded to the phone.</li>
<li>Replaced the registrar definitions in the phone's config files from IP address to the server's name.</li>
<li>The above setup worked as-is. To be sure I've added the NAPTR records to the DNS after the above two steps worked.</li>
<ul>
<li>BTW, the wiki says that the NAPTR records are not mandatory, thus I did not add them at the first place.</li></ul></ul>
<div>I said "partial" because now I have a phenomenon similar (not the same, but close to) to the one I have with the SNOMs: The TLS link is reseted after a while and then a new (additional) registration is done. I'll continue search it per the tips I got on the other topic.</div>
<div> </div>
<div> Thanks! __Yehavi:</div>
<div> </div>
<div class="gmail_quote">2010/1/4 Brian West <span dir="ltr"><<a href="mailto:brian@freeswitch.org">brian@freeswitch.org</a>></span><br>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote">OK to properly use TLS you have to setup NAPTR and SRV records and the DNS domain has to match the cert. Did you do that?<br>
<font color="#888888"><br>/b<br></font>
<div class="im"><br>On Jan 3, 2010, at 9:32 PM, Yehavi Bourvine wrote:<br><br>> I've built the slef-signed root certificate and server;s certificate per the TLS wiki, and installed the root certificate on the phone (both manually and via the config files). I did not enter the "== untrusted ==" instead of the cerificate (as the Polycom's wiki suggests) as the pone doesn't allow this. It accepted the certificate.<br>
><br>> I've tried this on 501 (running 3.1.3 which is the last supported version on it), and 550 & 650 running 3.2.2.<br>><br>> Thans, __Yehavi:<br><br><br></div>
<div>
<div></div>
<div class="h5">_______________________________________________<br>FreeSWITCH-users mailing list<br><a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br><a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><br>
</div></div></blockquote></div></div>