Thanks Brian. 

I couldn't find an earlier version of the gentls in git, but I'm still new to git. I tried modifying gentls to use rsa:1024 instead of ec, but I'm still getting the same error messages in the sofia log when the SPA112 tries to connect. FSClient connects with both rsa:1024 and rsa:2048, but I haven't tried to connect any other devices to the server. 

Changes made to gentls_cert:
setup_ca():
       openssl req -out "${CONFDIR}/CA/cacert.pem" -new -x509 -keyout "${CONFDIR}/CA/cakey.pem" -newkey rsa:1024 -config "${TMPFILE}.cfg" -nodes -days ${DAYS} -sha1 >/dev/null || exit 1

generate_cert():
  openssl req -new -out "${TMPFILE}.req" -newkey rsa:1024 -keyout "${TMPFILE}.key" -config "${TMPFILE}.cfg" -nodes -sha1 >/dev/null || exit 1


On Sun, Sep 22, 2013 at 5:14 PM, Brian West <brian@freeswitch.org> wrote:
Its going to be a cipher suite issue, I think the changing of gen_tlscert to do EC certs was a BAD IDEA.  Some devices can't deal with it properly.

/b

On Sep 22, 2013, at 2:38 PM, Nick Vines <jnvines@gmail.com> wrote:

> Has anyone successfully setup the spa112 or spa122 to use TLS? I tried setting my spa112 up following the generic TLS guide, but I am getting the following repeated error when I use `sofia loglevel all 9`:
>
> tport.c:2730 tport_wakeup_pri() tport_wakeup_pri(0x7fb6d40054c0): events IN
> tport.c:869 tport_alloc_secondary() tport_alloc_secondary(0x7fb6d40054c0): new secondary tport 0x7fb6d40e9b00
> tport_type_tls.c:603 tport_tls_accept() tport_tls_accept(0x7fb6d40e9b00): new connection from tls/my_ip_address:my_port/sips
> tport_tls.c:869 tls_connect() tls_connect(0x7fb6d40e9b00): events NEGOTIATING
> tport_tls.c:958 tls_connect() tls_connect(0x7fb6d40e9b00): TLS setup failed (error:00000001:lib(0):func(0):reason(1))
> tport.c:2084 tport_close() tport_close(0x7fb6d40e9b00): tls/my_ip_address:my_port/sips
>
>
> I double checked that TLS would work using fsclient to connect to my server, and that connected instantly.
>
> Thanks,
> Nick
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting@freeswitch.org
> http://www.freeswitchsolutions.com
>
> FreeSWITCH-powered IP PBX: The CudaTel Communication Server
> http://www.cudatel.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users@lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org