<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body>
<p>Hi Adrian,</p>
<p>It is not possible to change those parameters on the fly. But I
think you can implement your scenarios by setting a domain with
require_cert=0, verify_cert=0 and using the is_peer_verified()
script function to check the connections from the remote server.</p>
<p>Regards,<br>
</p>
<pre class="moz-signature" cols="72">--
Vlad Patrascu
OpenSIPS Core Developer
<a class="moz-txt-link-freetext" href="http://www.opensips-solutions.com">http://www.opensips-solutions.com</a></pre>
<div class="moz-cite-prefix">On 22.04.2021 17:15, Adrian Georgescu
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:5D29DEF8-AFCE-419D-A84A-338FF45B23BD@ag-projects.com">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<div class="">Hello,</div>
<div class=""><br class="">
</div>
<div class="">I have a question.</div>
<div class=""><br class="">
</div>
<div class="">I have the following TLS scenarios:</div>
<div class=""><br class="">
</div>
<div class="">1) A local user for a domain I own, connects to my
server using TLS. If the domain is local, I will authenticate
the user against my database and I do not care if the user has a
certificate</div>
<div class="">2) A remote server, connects to my server using TLS
and pretends that is <a href="http://domainX.com" class=""
moz-do-not-send="true">domainX.com</a>. In such case, the only
way to verify that this is true is by requiring a certificate
and verify it</div>
<div class=""><br class="">
</div>
<div class="">So there is a logic split between when to require
and how to verify a certificate depending on the fact that we
deal with a local user or a foreign domain.</div>
<div class=""><br class="">
</div>
<div class="">I would like to know if is possible to set <span
style="font-family: Helvetica, Arial; text-align: justify;
background-color: rgb(255, 255, 255);" class="">require_cert
and </span><span style="font-family: Helvetica, Arial;
text-align: justify; background-color: rgb(255, 255, 255);"
class="">verify_cert on the fly, while routing packets,
instead of configuring them statically per domain.</span>
<div class=""><br class="">
</div>
</div>
<div class="">Regards,</div>
<div class="">Adrian</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""> </div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a>
<a class="moz-txt-link-freetext" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a>
</pre>
</blockquote>
</body>
</html>