hello all.
we compiled kamailio with TLS Support. but have next
problem when using CRL Lits.
Our Certificate issuing scheme is follow:
Offline Root CA -> Enterprise SubCA -> Server and
Phone Certificate
CRL list is signed by SubCA.
option "require client certificate is enables (1) "
When we enable CRL list, phones are not registered.
CA file is offline RootCA certificate in pem format.
We think that the reason is that СRL was signed by Subca or
incorrect CRL format.
CRL is converted from MS CRL to PEM. (What is the format
for the CRL)
maybe someone have experiance with similar scenarios?