https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse/docs/how_to_make_your_own_ca_correctly.txt?at=79b3cdfc967376511d113d6386e450a5f7ab0db2&raw

On Mon, Nov 17, 2014 at 6:07 AM, Emrah <lists@kavun.ch> wrote:
Hi all,

I tried regenerating new certificates with a lower key size, bypassed the commercial component and instead uploaded the CA on my devices, changed the SSL port and… Well still stuck.

Your help is more than welcome! 

Any idea?

Emrah


On Nov 14, 2014, at 5:14 PM, Emrah <lists@kavun.ch> wrote:

Hi list,

I am able to use FS with SSLv23 with Blink Pro on Mac OS, but that’s about it.
I get the following error if I connect with any other device (Bria iOS, Yealink phone, Join Softphone):
TLS setup failed (error:00000001:lib(0):func(0):reason(1))

I came across this thread: http://freeswitch-users.2379917.n2.nabble.com/FS-with-SSL-TLS-issues-td7587736.html but it doesn’t seem to apply to my scenario.

I am using a commercial certificate. My devices connect to a domain which has an SRV record which points to itself on the SSL port. SSL host is an A record and matches the CN in the certificate. Server cA check is even turned off on certain phones.

The only error I get on my Yealink phone is this:
Nov 14 11:04:03 SIP [524]: SDL <6+info  > [000] SSL_connect (read done)
Nov 14 11:04:03 SIP [524]: SDL <3+error > [000] SSL ERROR
Nov 14 11:04:03 SIP [524]: SDL <3+error > [000] SSL_connect error

I would appreciate to know how I could debug this further. Or if you have any clue at what may be going on.

Thanks!
Emrah


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--

Brian West
brian@freeswitch.org


Twitter: @FreeSWITCH , @briankwest
http://www.freeswitchbook.com
http://www.freeswitchcookbook.com

T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)
iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest