Hi All
I have enabled TLS and complied sipXezphone with NSS
libraries. I am facing problem with certifcation with OpenSer. I have
created certificates database and certificates using "certutil" tool. I have
also setup this certificate in sipxezphone-config file. But sipXezphone shows
error message that could not connect i.e. TCP connection with server get closed
due some error. I have captured SSLDump:
13 1 0.0030 (0.0030) C>S Handshake
ClientHello
Version 3.1
cipher suites
TLS_RSA_WITH_RC4_128_MD5
Unknown value 0xfeff
TLS_RSA_WITH_3DES_EDE_CBC_SHA
Unknown value 0xfefe
TLS_RSA_WITH_DES_CBC_SHA
TLS_RSA_EXPORT1024_WITH_RC4_56_SHA
TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA
TLS_RSA_EXPORT_WITH_RC4_40_MD5
TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5
TLS_RSA_WITH_NULL_MD5
compression methods
NULL
13 2 0.0137 (0.0106) S>C Handshake
ServerHello
Version 3.1
session_id[32]=
2d 0b ea 29 63 92 c0 c9 3e b6 73 82 38 7f 01 89
2a 9f 7d 0d 10 1e 7e e2 c3 59 19 b7 40 21 86 eb
cipherSuite
TLS_RSA_WITH_DES_CBC_SHA
compressionMethod NULL
13 3 0.0137 (0.0000) S>C Handshake
Certificate
13 4 0.0137 (0.0000) S>C Handshake
CertificateRequest
certificate_types rsa_sign
certificate_types dss_sign
ServerHelloDone
13 5 0.0786 (0.0649) C>S Handshake
Certificate
ClientKeyExchange
CertificateVerify
Signature[128]=
7d 8a e1 77 5f cf 2c 5c a9 e6 dd 5c 6c 75 77 2d
11 e2 81 d5 ce 40 3a b6 3c bc f2 47 0a 38 96 51
93 2f 60 5b 4b b4 3b 67 cc 0b f4 7c d0 7c f2 18
08 21 31 e1 0e a0 ef 94 b0 90 b9 ba 50 bb 9c de
0f e5 45 85 75 51 43 95 64 20 85 79 f8 ec f8 ed
f0 6b e0 27 15 98 1f cc 4d 0c 5d f3 45 5b a3 c9
d1 ab 41 50 24 4c 1d cf bf 5f 10 ca 61 89 20 0f
25 54 a7 7f 9d 15 83 2b 6d c8 4b f8 e9 b4 d9 bf
13
6 0.0786 (0.0000) C>S ChangeCipherSpec
13 7 0.0786 (0.0000) C>S Handshake
13 8 0.0793 (0.0006) S>C Alert
level fatal
value unknown_ca
13 0.0797 (0.0004) C>S TCP FIN
13 0.0917 (0.0119) S>C TCP RST
Please help me to overcome this problem.
Regards,
Rafiq
Don't pick lemons.
See all the new 2007 cars at Yahoo! Autos.
____________________________________________________________________________________
Looking for earth-friendly autos?
Browse Top Cars by "Green Rating" at Yahoo! Autos' Green Center.
http://autos.yahoo.com/green_center/_______________________________________________
sipxtapi-dev mailing list
[email protected]
List Archive: http://list.sipfoundry.org/archive/sipxtapi-dev/
