Hi list, I am able to use FS with SSLv23 with Blink Pro on Mac OS, but that’s about it. I get the following error if I connect with any other device (Bria iOS, Yealink phone, Join Softphone): TLS setup failed (error:00000001:lib(0):func(0):reason(1)) I came across this thread: http://freeswitch-users.2379917.n2.nabble.com/FS-with-SSL-TLS-issues-td75877... but it doesn’t seem to apply to my scenario. I am using a commercial certificate. My devices connect to a domain which has an SRV record which points to itself on the SSL port. SSL host is an A record and matches the CN in the certificate. Server cA check is even turned off on certain phones. The only error I get on my Yealink phone is this: Nov 14 11:04:03 SIP [524]: SDL <6+info > [000] SSL_connect (read done) Nov 14 11:04:03 SIP [524]: SDL <3+error > [000] SSL ERROR Nov 14 11:04:03 SIP [524]: SDL <3+error > [000] SSL_connect error I would appreciate to know how I could debug this further. Or if you have any clue at what may be going on. Thanks! Emrah
Hi all, I tried regenerating new certificates with a lower key size, bypassed the commercial component and instead uploaded the CA on my devices, changed the SSL port and… Well still stuck. Your help is more than welcome! Any idea? Emrah
On Nov 14, 2014, at 5:14 PM, Emrah <lists@kavun.ch> wrote:
Hi list,
I am able to use FS with SSLv23 with Blink Pro on Mac OS, but that’s about it. I get the following error if I connect with any other device (Bria iOS, Yealink phone, Join Softphone): TLS setup failed (error:00000001:lib(0):func(0):reason(1))
I came across this thread: http://freeswitch-users.2379917.n2.nabble.com/FS-with-SSL-TLS-issues-td75877... <http://freeswitch-users.2379917.n2.nabble.com/FS-with-SSL-TLS-issues-td7587736.html> but it doesn’t seem to apply to my scenario.
I am using a commercial certificate. My devices connect to a domain which has an SRV record which points to itself on the SSL port. SSL host is an A record and matches the CN in the certificate. Server cA check is even turned off on certain phones.
The only error I get on my Yealink phone is this: Nov 14 11:04:03 SIP [524]: SDL <6+info > [000] SSL_connect (read done) Nov 14 11:04:03 SIP [524]: SDL <3+error > [000] SSL ERROR Nov 14 11:04:03 SIP [524]: SDL <3+error > [000] SSL_connect error
I would appreciate to know how I could debug this further. Or if you have any clue at what may be going on.
Thanks! Emrah
https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse/docs/how_to... On Mon, Nov 17, 2014 at 6:07 AM, Emrah <lists@kavun.ch> wrote:
Hi all,
I tried regenerating new certificates with a lower key size, bypassed the commercial component and instead uploaded the CA on my devices, changed the SSL port and… Well still stuck.
Your help is more than welcome!
Any idea?
Emrah
On Nov 14, 2014, at 5:14 PM, Emrah <lists@kavun.ch> wrote:
Hi list,
I am able to use FS with SSLv23 with Blink Pro on Mac OS, but that’s about it. I get the following error if I connect with any other device (Bria iOS, Yealink phone, Join Softphone): TLS setup failed (error:00000001:lib(0):func(0):reason(1))
I came across this thread: http://freeswitch-users.2379917.n2.nabble.com/FS-with-SSL-TLS-issues-td75877... but it doesn’t seem to apply to my scenario.
I am using a commercial certificate. My devices connect to a domain which has an SRV record which points to itself on the SSL port. SSL host is an A record and matches the CN in the certificate. Server cA check is even turned off on certain phones.
The only error I get on my Yealink phone is this: Nov 14 11:04:03 SIP [524]: SDL <6+info > [000] SSL_connect (read done) Nov 14 11:04:03 SIP [524]: SDL <3+error > [000] SSL ERROR Nov 14 11:04:03 SIP [524]: SDL <3+error > [000] SSL_connect error
I would appreciate to know how I could debug this further. Or if you have any clue at what may be going on.
Thanks! Emrah
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
participants (2)
-
Brian West
-
Emrah