Hi,<br><br>Sorry, but I'm still a bit lost here. What .pem files do I need to import to the Windows XP certificate store? And what was again this cert/key (pk12) that was imported to the client? Did you somehow combine the certificate and the private key or something?
<br><br>I'm kind of lost with the certificates and keys and stuff. :) It would be nice if someone could write a brief example on the wiki or something about how to get eyeBeam working with OpenSER and TLS.<br><br>Regards,
<br><br>Teemu<br><br><div><span class="gmail_quote">On 5/16/06, <b class="gmail_sendername">Christoph Fürstaller</b> <<a href="mailto:christoph.fuerstaller@kurtkrenn.com">christoph.fuerstaller@kurtkrenn.com</a>> wrote:
</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">-----BEGIN PGP SIGNED MESSAGE-----<br>Hash: SHA1<br><br>Hi Klaus,<br><br>>> Hi Christoph!
<br>><br>>> What is the "cert/key (pk12) for the client"? Is it for TLS client<br>>> authentication (the proxy requests a certificate from eyebeam)?<br><br>I'm very sorry, I'm not using client authentication. On the OpenSER
<br>Website there is an error in the TLS Tutorial. The mentioned parameter<br>tls_verify = 1 is wrong. The correct one is tls_verify_client = 1 (as<br>given in the README file in the sources)<br><br>After I corrected this I get that error:
<br>tls_error: error:140890C7:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:peer<br>did not return a certificate<br><br>So my eyeBeam doesn't send a cert. I asked on the counterpath forum and<br>searched the docs, but didn't found something concerning that. So,
<br>eyeBeam isn't compatible of that? Anyone knows?<br><br>>> If yes - how does eyebeam know which of the available client<br>>> certificates it should use?<br>><br>>> regards<br>>> klaus<br><br>
<br>chris...<br>-----BEGIN PGP SIGNATURE-----<br>Version: GnuPG v1.4.1 (GNU/Linux)<br><br>iD8DBQFEaZ9ZR0exH8dhr/YRAhTcAKCsGpyYCLluX8MZuWtMeL2PDwwd8QCgoTul<br>QZQCfeY2QK/+n5z36d6BxCM=<br>=+fL3<br>-----END PGP SIGNATURE-----
<br></blockquote></div><br><br clear="all"><br>-- <br>Teemu Harju<br><a href="http://www.teemuharju.net">http://www.teemuharju.net</a>