[SR-Users] mutual TLS

[Daniel-Constantin Mierla]

Hello,

On 7/30/13 9:37 PM, johnc wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi,
>
> Has anybody implemented and documented a kamailio set-up with mutual
> TLS authentication. i.e. using client certificates as well as a server
> certificate?

you have to require the client certificate in tls config.

>   I'd be really interested if you have also federated your
> proxy with another proxy. Many thanks.

When federating, the server side certificate is used.

Cheers,
Daniel
>
> Regards,
> John
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.12 (GNU/Linux)
> Comment: Using GnuPG with Icedove - http://www.enigmail.net/
>
> iQIcBAEBAgAGBQJR+BXuAAoJELy1jPQ1KER74rcP/RDGQtQdGwnE77eYf0jilY2S
> yjXxP3xcAQvv1gJzGOY9kaYaefU3yavjOVoBd8muoEXApESWErgTp8VpKDmb5cb7
> gPSi/fQhduDtgd1F/cqumgrLX7r1StnTocc2GCy/5jqafUL7o5jBuKcmTLmIzR49
> zhN57ZK4HmB78rcRDVrnfcytZslriXdiQXCkxCKTAOFoJ05wC8L6cReE7WdZJ+u8
> Lt6ONxdmcdNE256gmLAbu2E1I1ly0ppp92Min/w8v5ohUnyBSMIRXuy+nNbES16f
> 4tWG3TGXIJHk7nt3w/ocqrnz3zluPRCce3SN03aH2rq9R3Auh5NhmIPjblUNilSS
> k6bH400oniwZ9r33uKfQS8KQ7Ky4u0AEsFIz51LGzrhykqnl50VIdDwSAPDGU7UR
> /M+tGzu84Y9RshekMAQtaDL4hvdiO3NPL51rStn67K+r8vRUh4hEI8hVHn4Vz1zG
> IJRD+pHyq7f2GT9uyao+Imq7UWI9FqLtxJNcJnh8PzRXqZoOnXNmGLG3f30j6uB8
> 8WIehdWBrRXnO8KfoSqZjsn/Hzc7zCGFwGZw5igI1NrUAeZfzHfllGaKsLA/OJgh
> TRyaj8fblF/ltBKYnxfZKh6Dnckz0GQUq6zEIBUcgC+pwzD4lDBMbyrXaqyVATU/
> s6BUpCSFdFzEZCwl6Sya
> =Vf9E
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
> sr-users at lists.sip-router.org
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla - http://www.asipto.com
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda