> -----Original Message-----
> From: Worley, Dale AVAYA (BL60:9D30) 
> Sent: Wednesday, February 10, 2010 9:43 AM
> To: Beeton, Carolyn AVAYA (CAR:9D60)
> Cc: Yang, Huijun AVAYA (CAR:9D30); Mossman, Paul AVAYA 
> (CAR:9D30); Lawrence, Scott AVAYA (BL60:9D30); 
> [email protected]
> Subject: Re: [sipX-dev] XX-7319 - TLS Peer UI proposal
> 
> On Wed, 2010-02-10 at 09:31 -0500, Carolyn Beeton wrote:
> > > -----Original Message-----
> > > From: [email protected]
> > > [mailto:[email protected]] On Behalf Of Yang, 
> > > Huijun AVAYA (CAR:9D30)
> > > 
> > > Since "TLS Peer Name" comes from the TLS Certificate 
> Subject Name, 
> > > rather letting user to read the certificate, find and type in the 
> > > value, which is error prone, i.e. typo. Since we have the 
> > > Certificate imported, does it make sense for sipXconfig 
> to get the 
> > > value from the certificate and not bother to have admin 
> to configure 
> > > it manually?
> 
> > We have a Certificate Authority which will allow us to accept their 
> > certificate.  We do not import their certificate.
> 
> Though I suppose we could make a TLS connection to the 
> indicated address and read the certificate that was presented 
> just to check that the subject name is what we think it is.
> 
> Dale

Hmmm... could sipXconfig provide a Test Connection button which would do
this?  This would make troubleshooting much easier... assuming that we
can set up a connection (i.e. route) to the "TLS Peer Name".  So in
cases where we have Outbound Proxies configured this would not work...
_______________________________________________
sipx-dev mailing list [email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
sipXecs IP PBX -- http://www.sipfoundry.org/

Reply via email to