FreeSWITCH fully supports validating client certificates and obviously using a server certificate too. http://wiki.freeswitch.org/wiki/SIP_TLScovers several of the settings along with: http://wiki.freeswitch.org/wiki/Sofia_Configuration_Files#TLS ~mitch On Fri, Jul 12, 2013 at 6:57 AM, Burak BorYazılım <mburakbor@gmail.com>wrote:
thank you and sorry for my late reply.
Yes I'm using csipsimple. And I know the settings about verify server checkbox. But the problems starts here. After I checked the server verify, the phone could not register to server, gets a connection timeout.
2013/6/28 Daniel Ivanov <sertys@gmail.com>
It doesnt have to specifically "send" anything. It is always up to the connecting peer to do certificate verification. And if the peer is sending a client cerificate server uses it for authentication and connection key negotiation. Since you're using android and most prolly csipsimple, you have an option to verify the exact server certificate or it's certificate authority. And also use a tls password along with a client certificates. You can find the settings in the expert wizard. On Jun 27, 2013 6:06 PM, "Burak BorYazılım" <mburakbor@gmail.com> wrote:
Hi,
I want to know that does FS support mutual authentication while using TLS. More clearly, does FS send its certificate to client or not? FS can verify the client but I have problems when the clients' server verification and i thought that FS does not send some necessary files(maybe certificate for example) for mutual authentication. I used android phones for clients.
Thank you, Regards...
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org