[Users] help: what's tls_ca tls_privat-key tls_calist

[Alexander Philipp Lintenhofer]

Hi Kenny,

It would be a big deal first to acquire knowledge about the theoretical
background before installing this service.

So please read following (and related) sites:
http://www.tech-invite.com/Ti-sip-security.html
http://www.tech-invite.com/Ti-SSL.html

The definitive documentation about OpenSER/TLS
(http://openser.org/docs/tls.html) is very good and therefore easy to
understand in succession!

regards,
Philipp

> Hello all,
>
>        I have tested tls with openser by SIPp,but I donn't understant 
> the flows of TLS ctreated,who can show me the flow about TLS 
> handshake.
>
>        When I test tls by SIPp,I put the ca,private-key to it's 
> DIR,that's fils created by openssl ,and add these files path to cfg 
> of openser.the same files used.I want to know what's mean is tls_ca 
> tls_privatekey tls_calist,and how there files work. Client need 
> what's ca and private-key for creating tls connection? Is it the same 
> with openssl? to create ssl connection?
>
>
>
>
>
> ======= 2006-01-05 19:01:27 您在来信中写道：=======
>
>> Send Users mailing list submissions to
>> 	users at openser.org
>>
>> To subscribe or unsubscribe via the World Wide Web, visit
>> 	http://openser.org/cgi-bin/mailman/listinfo/users
>> or, via email, send a message with subject or body 'help' to
>> 	users-request at openser.org
>>
>> You can reach the person managing the list at
>> 	users-owner at openser.org
>>
>> When replying, please edit your Subject line so it is more specific
>> than "Re: Contents of Users digest..."
>>
>>
>> Today's Topics:
>>
>>   1. Re: deactivate an account (Helge Waastad)
>>
>>
>> ----------------------------------------------------------------------
>>
>> Message: 1
>> Date: Thu, 05 Jan 2006 11:23:30 +0100
>> From: Helge Waastad <helge at smartnet.no>
>> Subject: Re: [Users] deactivate an account
>> To: maillisting at gmail.com
>> Cc: users at openser.org
>> Message-ID: <1136456610.11157.10.camel at localhost.localdomain>
>> Content-Type: text/plain
>>
>> Hi,
>> In the openserctl script there are acl options static configured
>> (free-pstn etc).
>> Just add inactive on the same line, and it should work
>>
>> br hw
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> There is an error when I issue acl grant
>> openserctl acl grant myname at mydomain.com inactive
>> Invalid privilege: inactive ignored
>>
>>
>>
>> --
>> Mvh/Br
>> Helge Waastad
>> Senior Engineer
>> Systemavdelingen
>> Smartnet
>>
>>
>>
>> ------------------------------
>>
>> _______________________________________________
>> Users mailing list
>> Users at openser.org
>> http://openser.org/cgi-bin/mailman/listinfo/users
>>
>>
>> End of Users Digest, Vol 8, Issue 11
>> ************************************
>
> = = = = = = = = = = = = = = = = = = = =
>
>
> 　　　　　　　　致
> 礼！
>
>
> 　　　　　　　　Kenny Yeh
> 　　　　　　　　kenny at artdio.com.tw
> 　　　　　　　　　　2006-01-06
>
>