Hi, klaus, thanks for your response.
you are right, it was not a problem with OpenSER, but with the domain certificate that i created. when run, eyeBeam keep saying that "503 certificate name mismath". so i check the certificate name of OpenSER server, it was "JOE61", which was not the machine's domain name. as the testing machine has no domain name. i used its IP as its domain name, then it works. regards yanlin 2007.3.27 ---------------------------------------------------------------------- For me it works without problems: tls_verify_server = 1 tls_verify_client = 0 tls_require_client_certificate = 0 I created my certificates with the tutorial from http://www.eclectica.ca/howto/ssl-cert-howto.php Then, I imported the CA's certificate into Internet Explorer's certificate store. regards klaus yanlin wrote: > Hi, all, > > i have been trying to test TLS support on OpenSER with EyeBeam > client, but in no vain. > OpenSER keep complaining that "client did not present a > certificate". > > really need help! thanks in advance. > > here is some info of my environment: > 1) OpenSER 1.2 and EyeBeam 1.5 > 2) run "openserctl tls rootCA", create "cacert.pem" under > /etc/openser/tls/rootCA/. > 3) run "openserctl tls userCERT", create "user-calist.pem > user-cert.pem user-cert_req.pem user-privkey.pem" under > /etc/openser/tls/user/. > 4) i have set openser.cfg as follow: > disable_tls = 0 > listen = tls:172.22.14.61:5061 > tls_verify_client = 0 > tls_require_client_certificate = 0 > tls_method = TLSv1 > tls_certificate = /etc/openser/tls/user/user-cert.pem" > tls_private_key = "/etc/openser/tls/user/user-privkey.pem" > tls_ca_list = "/etc/openser/tls/user/user-calist.pem" > 5) copy "/etc/openser/tls/rootCA/cacert.pem" created at step 2) to > EyeBeam clinet machine, which was a Windows XP machine, run > "certmrg.msc" there, import this certificate to WindowXP "root > certificate store". > > when run ... error occur. OpenSER complaint that "client did not > present a certificate", and EyeBeam receive a "503 certificate name > mismath". > > Any advise will be very appreciate !! _______________________________________________ Users mailing list [email protected] http://openser.org/cgi-bin/mailman/listinfo/users
