Without one for me to test with I can only guess. I have tested TLS on Polycom, Snom you might need to setup sslv3 instead of tls on your profile for doing secure SIP. What are you trying https against? /b On Sep 12, 2008, at 10:01 AM, R. Eric Bennett wrote:
folks,
i'm wondering if anyone here has actually managed to get SIP over TLS working from a symbian s60 phone to FreeSWITCH. i've been trying for some time with an e71 and while i've made some progress, progress != success.
in fact, i've progressed to the point where the failure is known to not be specific to FreeSWITCH's implementation. however, having used the certificates generated by FreeSWITCH's gentls_cert script with openssh s_server's builtin simple web server while having my e71's browser connect to it, i can say that the failure mode is same (we send cert, e71 replies with "illegal parameter") whether we are running SIP or HTTP over SSL/TLS. as such, it could still be a result of the certs generated by the FS scripts.
to eliminate one obvious potential cause, note that i have installed the FreeSWITCH CA cert on the e71 so it shouldn't be a self-signed cert problem. this leaves me thinking that the problem is either an openssl problem (there appear to have been some interoperability issues between SSL implementations as a result of e.g. padding SSL PDUs) or a limitation in the feature set of the symbian s60 TLS implementation, specifically limitations on the types of server certs it'll accept. before exhausting more energy trying to track this down, i was hoping that someone out there may have solved this problem or at least know exactly what the problem is i can stop banging my head against the wall.
anyone? anyone? Bueller?
thanks, eric
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Brian West sip:brian@freeswitch.org