<div dir="ltr"><div>Why do you want to place the cert on webserver and point android browser? If you are doing this to download cert into android then that is probably not the right approach.<br><br></div>I used cafile.pem (without converting it into .der format) and placed the file in SD card or phone memory, and point out linphone to get the CA from the path. You may search in libraries where it need to tell the path. <br>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Aug 5, 2013 at 12:15 PM, Peter <span dir="ltr"><<a href="mailto:eidevm5@gmail.com" target="_blank">eidevm5@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div><div><div><div><div><div><div><div><div>Has anyone managed to get TLS working between Android Linphone and Freeswitch?<br><br></div>I've done the basic TLS setup as per <a href="https://wiki.freeswitch.org/wiki/Tls" target="_blank">https://wiki.freeswitch.org/wiki/Tls</a><br>
<br></div>I then convert the CA cert from PEM to DER format with:<br><br>openssl x509 -inform PEM -outform der -in cafile.pem -out fs.crt<br><br></div>I place fs.crt on a webserver and point my Android browser to it.<br>
<br></div>When I click on fs.crt, I get the default Android Certificate installer popup, but it always says:<br><br></div>"Package contains: one user certificate"<br><br></div>ie: it thinks it is a user cert rather than a CA cert.<br>
<br></div>Android appears to be a real pain to add a CA to its trusted credential store.<br><br></div>Really interested if anyone has managed to get Android to import the CA cert.<br><br></div>Thanks<span class="HOEnZb"><font color="#888888"><br>
<br>Peter<br></font></span></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div><br></div>