Sorry, David if I was not clear.

x5u should keep the url to the service provider certificate. As per shaken framework that certificate to be issued by Certificate Authority (CA), That CA is a company which is approved by Policy Administrator to issue shake certificates. It is indeed a bit complicated - please check ATIS-1000080.

--
obelousov.tel

On Thu, Nov 4, 2021 at 6:03 PM David Villasmil <david.villasmil.work@gmail.com> wrote:

Thanks Oleg, i misunderstood all that.

Regards,

David Villasmil

email: david.villasmil.work@gmail.com

phone: +34669448337

On Thu, Nov 4, 2021 at 4:58 PM Oleg Belousov <obelousov@gmail.com> wrote:

Hi.

It should be certificate issued by CA certified by the Shaken Policy Administrator (iConnective in US)..

--
obelousov.tel

On Thu, Nov 4, 2021 at 5:39 PM David Villasmil <david.villasmil.work@gmail.com> wrote:

Hello guys,

I'm testing with 2 providers right now, and one of them is asking me to include my whole certificate on the

secsipid_add_identity(origTN, destTN, attest, origID, x5u, keyPath)

like:

secsipid_add_identity("$fU", "$rU", "A", "", "https://kamailio.org/stir/$rd/cert.pem", "/secsipid/$rd/key.pem");

but it is stated that:

x5u is the HTTP URL referencing to the public key that should be used to verify the signature;

One provider is asking to put the cert there, the other hasn't asked that yet.

So i'm  a little confused, should the x5u be the actual cert (with its intermediary?) or only the public key?

Regards,

David Villasmil

email: david.villasmil.work@gmail.com

phone: +34669448337

__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
  * sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
  * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
  * sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
  * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
  * sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
  * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
  * sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
  * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users