I've built the slef-signed root certificate and server;s certificate per the TLS wiki, and installed the root certificate on the phone (both manually and via the config files). I did not enter the "== untrusted ==" instead of the cerificate (as the Polycom's wiki suggests) as the pone doesn't allow this. It accepted the certificate. I've tried this on 501 (running 3.1.3 which is the last supported version on it), and 550 & 650 running 3.2.2. Thans, __Yehavi: 2010/1/4 Brian West <brian@freeswitch.org>
If you didn't manually install the CA cert into the phone as per the wiki it won't ever work.
/b
On Jan 3, 2010, at 7:25 PM, Michael Jerris wrote:
Perhapse cranking up the Sofia tport log to level 9 may help.
Mike
On Jan 3, 2010, at 10:57 AM, Yehavi Bourvine <yehavi.bourvine@gmail.com> wrote:
Hello,
I am writing again because I am quite desparate... I fail to
enable TLS on Polycom while on SNOM I can make it work with the same
configuration. From TCPDUMP I see the following difference between
the two handshakes:
SNOM: The protocol suite used is TLS_RSA_WITH_RC4_128_SHA
Polyco: The protocol suite used is TLS_RSA_WITH_AES_256_CBC_SHA and
sessionTicketTLS also appears there. After the key exchange the
phone disconnects the connection.
Any idea how to debug it?
Thanks! __Yehavi:
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org