27 Mar
2007
27 Mar
'07
7:40 a.m.
Hi, klaus,
thanks for your response.
you are right, it was not a problem with OpenSER, but with the domain certificate that i
created.
when run, eyeBeam keep saying that "503 certificate name mismath".
so i check the certificate name of OpenSER server, it was "JOE61", which was not
the machine's domain name.
as the testing machine has no domain name. i used its IP as its domain name, then it
works.
regards
yanlin
2007.3.27
----------------------------------------------------------------------
For me it works without problems:
tls_verify_server = 1
tls_verify_client = 0
tls_require_client_certificate = 0
I created my certificates with the tutorial from
http://www.eclectica.ca/howto/ssl-cert-howto.php
Then, I imported the CA's certificate into Internet Explorer's
certificate store.
regards
klaus
yanlin wrote:
Hi, all,
i have been trying to test TLS support on OpenSER with EyeBeam client, but
in no vain.
OpenSER keep complaining that "client did not present a
certificate".
really need help! thanks in advance.
here is some info of my environment:
1) OpenSER 1.2 and EyeBeam 1.5
2) run "openserctl tls rootCA", create "cacert.pem" under
/etc/openser/tls/rootCA/.
3) run "openserctl tls userCERT", create "user-calist.pem
user-cert.pem user-cert_req.pem user-privkey.pem" under
/etc/openser/tls/user/.
4) i have set openser.cfg as follow:
disable_tls = 0
listen = tls:172.22.14.61:5061
tls_verify_client = 0
tls_require_client_certificate = 0
tls_method = TLSv1
tls_certificate = /etc/openser/tls/user/user-cert.pem"
tls_private_key = "/etc/openser/tls/user/user-privkey.pem"
tls_ca_list = "/etc/openser/tls/user/user-calist.pem"
5) copy "/etc/openser/tls/rootCA/cacert.pem" created at step 2) to
EyeBeam clinet machine, which was a Windows XP machine, run
"certmrg.msc" there, import this certificate to WindowXP "root
certificate store".
when run ... error occur. OpenSER complaint that "client did not
present a certificate", and EyeBeam receive a "503 certificate name
mismath".
Any advise will be very appreciate !!