> Thank you in advance for your help. Attached you will find the generated > certificates and the sniffed traffic on the configured TLS port. Maybe there > is a simple but effective mistake. > Lars,
Thank you for the certificates archive We are using "openssl verify" command to check if a certificate is OK or not before importing it I found two certificates there servercert.pem is not valid but cacert.pem looks like valid but still has a problem Here are my results: [mirceac@decebal lars]$ openssl verify servercert.pem servercert.pem: C = DE, ST = NDS, O = Teamprojekt, CN = sipx.teamprojekt.local, emailAddress = [email protected] error 20 at 0 depth lookup:unable to get local issuer certificate [mirceac@decebal lars]$ openssl verify cacert.pem cacert.pem: C = DE, ST = NDS, L = Wolfenbuettel, O = Teamprojekt, CN = sipx.teamprojekt.local, emailAddress = [email protected] error 18 at 0 depth lookup:self signed certificate OK Below you have an example of a certificate verify that passes our validation. Here is how openssl verify should return for a valid certificate [mirceac@decebal lars]$ openssl verify verisignclass3ca.crt verisignclass3ca.crt: OK [mirceac@decebal lars]$ Here you find some docs: http://www.mkssoftware.com/docs/man1/openssl_verify.1.asp Hope this helps, Mircea > > Regards, > > Lars > > -- > ----------------------------------------------- > Lars Schiller > > IANT- APPLIED NGN-TECHNOLOGIES > > Schlüsselfertige VoIP-Lösungen und mehr... > > IANT GmbH > Salzdahlumer Straße 46/48 > D-38302 Wolfenbüttel > Fon: +49/(0)5331/ 900989-450 > Fax: +49/(0)5331/ 900989-499 > Internet: www.iant.de > > Ust.-IdNr: DE264352710 > HRB 201710, Amtsgericht Braunschweig > Geschäftsführer: Prof. Dr.-Ing. Diederich Wermser, Dipl.-Ing. Jan Schumacher > > IANT is Member of GROUPLINKwww.grouplink.de > > > ----------------------------------------------- > > > _______________________________________________ > sipx-dev mailing list > [email protected] > List Archive: http://list.sipfoundry.org/archive/sipx-dev/ >
_______________________________________________ sipx-dev mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-dev/
