[Freeswitch-users] Polycom & TLS - help please...

[Yehavi Bourvine]

I've built the slef-signed root certificate and server;s certificate per the
TLS wiki, and installed the root certificate on the phone (both manually and
via the config files). I did not enter the "== untrusted ==" instead of the
cerificate (as the Polycom's wiki suggests) as the pone doesn't allow this.
It accepted the certificate.

I've tried this on 501 (running 3.1.3 which is the last supported version on
it), and 550 & 650 running 3.2.2.

                            Thans, __Yehavi:

 2010/1/4 Brian West <brian at freeswitch.org>

>  If you didn't manually install the CA cert into the phone as per the wiki
> it won't ever work.
>
> /b
>
>  On Jan 3, 2010, at 7:25 PM, Michael Jerris wrote:
>
> Perhapse cranking up the Sofia tport log to level 9 may help.
>
> Mike
>
> On Jan 3, 2010, at 10:57 AM, Yehavi Bourvine
> <yehavi.bourvine at gmail.com> wrote:
>
> Hello,
>
>
>  I am writing again because I am quite desparate... I fail to
>
> enable TLS on Polycom while on SNOM I can make it work with the same
>
> configuration. From TCPDUMP I see the following difference between
>
> the two handshakes:
>
>
> SNOM: The protocol suite used is TLS_RSA_WITH_RC4_128_SHA
>
> Polyco: The protocol suite used is TLS_RSA_WITH_AES_256_CBC_SHA and
>
> sessionTicketTLS also appears there. After the key exchange the
>
> phone disconnects the connection.
>
> Any idea how to debug it?
>
>
>                               Thanks! __Yehavi:
>
>
>
> _______________________________________________
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20100104/d536fdd9/attachment-0002.html