<div dir="ltr"><div class="gmail_extra">Hello Hamid,</div><div class="gmail_extra"><br></div><div class="gmail_extra">The parameters below don't have any effects. In my scenario, the sip phones are rejecting the tls connection by saying "Certificate Validation Failure".</div><div class="gmail_extra"><br></div><div class="gmail_extra">Neither of parameters below had any effects.</div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><div class="gmail_extra">Anyone else has any idea what I need to look for?</div><div class="gmail_extra"><br></div><div class="gmail_extra">Regards,</div><div class="gmail_extra">Ali Pey</div><div class="gmail_extra"><br></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Apr 8, 2016 at 4:00 AM, Hamid Hashmi <span dir="ltr"><<a href="mailto:hamid2kviii@hotmail.com" target="_blank">hamid2kviii@hotmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div dir="ltr">Please define following values<div><pre style="border:1px solid rgb(153,204,204);padding-left:15pt;background-color:rgb(254,254,238)">tls_ca_list = "/path/to/file"
tls_method = tlsv1</pre>for details please consult <a href="https://contactmonkey.com/api/v1/tracker?cm_session=fe1ad39b-b209-487a-ae7d-5dc3874a3f4b&cm_type=link&cm_link=4c658b68-ff08-42fc-abc9-b28ade77429a&cm_destination=http://www.opensips.org/html/docs/tutorials/tls-1.4.x.html" target="_blank">http://www.opensips.org/html/docs/tutorials/tls-1.4.x.html</a></div><div><br></div><div>Regards</div><div>Hamid R. Hashmi<br><br><div><hr>Date: Thu, 7 Apr 2016 13:14:28 -0400<br>From: <a href="mailto:alipey@gmail.com" target="_blank">alipey@gmail.com</a><br>To: <a href="mailto:users@lists.opensips.org" target="_blank">users@lists.opensips.org</a><br>Subject: [OpenSIPS-Users] TLS - Certificate Validation Failure error on SIP Phones - OpenSIPS version 1.11.5<div><div class="h5"><br><br><div dir="ltr">Hello,<div><br></div><div>My opensips server is just a registrar server and I have enabled tls with the following settings:</div><div><br></div><div>listen=tls:xx.xx.xx.xx:5061<br></div><div><div>disable_tls=no</div><div>tls_certificate="/etc/opensips/pbx-bundle.crt"</div><div>tls_private_key="/etc/opensips/pbx.key"<br></div></div><div><br></div><div><br></div><div>When my sip phones try to open tls connection, they reject the connection saying "Certificate Validation Failure". My certificate is valid and works fine on the https website.</div><div><br></div><div>What am I missing? What should I look for?</div><div><br></div><div>Regards,</div><div>Ali Pey</div><div><br></div><img width="0" height="0" style="border:0;width:0px;min-height:0px"><img width="0" height="0" style="border:0;width:0px;min-height:0px"></div>
<br></div></div>_______________________________________________
Users mailing list
<a href="mailto:Users@lists.opensips.org" target="_blank">Users@lists.opensips.org</a>
<a href="https://contactmonkey.com/api/v1/tracker?cm_session=fe1ad39b-b209-487a-ae7d-5dc3874a3f4b&cm_type=link&cm_link=00f9206d-5114-4ccd-8119-2069b0340470&cm_destination=http://lists.opensips.org/cgi-bin/mailman/listinfo/users" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a></div></div> </div></div>
<br>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a><br>
<a href="https://contactmonkey.com/api/v1/tracker?cm_session=fe1ad39b-b209-487a-ae7d-5dc3874a3f4b&cm_type=link&cm_link=1103e740-0d3e-425d-950a-182c7bbe3a6e&cm_destination=http://lists.opensips.org/cgi-bin/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
<br></blockquote></div><br></div><img class="cm-tracker" src="https://contactmonkey.com/api/v1/tracker?cm_session=fe1ad39b-b209-487a-ae7d-5dc3874a3f4b&cm_type=open&cm_user_email=alipey@gmail.com" width="0" height="0" style="border:0; width:0px; height:0px;"><img class="cm-tracker" src="https://contactmonkey.com/api/v1/tracker?cm_session=fe1ad39b-b209-487a-ae7d-5dc3874a3f4b&cm_type=open&cm_user_email=alipey@gmail.com" width="0" height="0" style="border:0; width:0px; height:0px;"><font class="cm-tracker" face="https://contactmonkey.com/api/v1/tracker?cm_session=fe1ad39b-b209-487a-ae7d-5dc3874a3f4b&cm_type=open&cm_user_email=alipey@gmail.com" style=""></font></div>