Re: [Linphone-developers] how to set up tls for linphone.

[Steve Kieu]

you are welcome.

On Thu, Sep 11, 2014 at 9:23 PM, george wu <address@hidden> wrote:

Hi Steve:

Thanks very much.
I have found it and it works for my local server.
Just add those 2 lines in the configuration file to stop it from verifying certificate:

[sip]
verify_server_certs=0
verify_server_cn=0

Thanks again.

George

At 2014-09-11 07:12:47, "Steve Kieu" <address@hidden> wrote:

i forgot just google it you will find

On Thu, Sep 11, 2014 at 9:09 PM, george wu <address@hidden> wrote:

Hi, Steve:
Thank you very much.
Now linphone is working great with sip:sip.linphone.org server.
Now I am testing it againt my local opensips server.

Obviously it complains the certifcate from opensips self-signed certificate.
How do I disable verifying the server certificate?

ortp-message-Proxy config [0x1391cf0] for identity [sip:address@hidden] moving from state [LinphoneRegistrationNone] to [LinphoneRegistrationProgress]
ortp-message-Channel [0x13b8c50]: Connected at TCP level, now doing TLS handshake
ortp-message-Channel [0x13b8c50]: SSL handshake in progress...
ortp-message-Found certificate depth=[1], flags=[not-trusted ]:
cert. version : 3
serial number : DF:F3:78:0A:79:75:0A:86
issuer name   : CN=OpenSIPS, ST=opensips.org, C=IP, emailAddress=address@hidden, O=opensips.org
subject name  : CN=OpenSIPS, ST=opensips.org, C=IP, emailAddress=address@hidden, O=opensips.org
issued  on    : 2014-04-17 10:38:31
expires on    : 2015-04-17 10:38:31
signed using  : RSA with SHA1
RSA key size  : 2048 bits
ortp-message-Found certificate depth=[0], flags=[CN-mismatch ]:
cert. version : 3
serial number : 01
issuer name   : CN=OpenSIPS, ST=opensips.org, C=IP, emailAddress=address@hidden, O=opensips.org
subject name  : C=IP, ST=SIP, O=OpenSIPS project, OU=OpenSIPS TLS tester, CN=OpenSIPS, emailAddress=address@hidden
issued  on    : 2014-04-17 10:38:36
expires on    : 2015-04-17 10:38:36
signed using  : RSA with SHA1
RSA key size  : 512 bits

ortp-error-Channel [0x1599d90]: SSL handshake failed : X509 - Certificate verification failed, e.g. CRL, CA or signature check failed
ortp-error-Cannot connect to [TLS://192.168.1.3:5061]
ortp-message-channel 0x1599d90: state ERROR
ortp-message-transaction [0x15b23c0] channel state changed to [ERROR]

At 2014-09-11 06:52:13, "Steve Kieu" <address@hidden> wrote:

sudo add-apt-repository ppa:linphone/release
$ sudo apt-get update
$ sudo apt-get install linphone



Make sure your linphone version is 3.7.0




On Thu, Sep 11, 2014 at 8:18 PM, george wu <address@hidden> wrote:

Actually I am using ubuntu 14.04. I don't know what's ppa.
I am testing it againt server sip:sip.linphone.org

At 2014-09-11 05:58:46, "Steve Kieu" <address@hidden> wrote:

which OS you run linphone? I believe some vendor does not enable tls in linphone when they build it.

I know ubuntu 14.04 up witth linphone ppa support it. Also android linphone version 2.2.x - not tested with new version 2.3.x yet.

On Thu, Sep 11, 2014 at 7:50 PM, george wu <address@hidden> wrote:

for tcp and udp, I have no problem.
But tls does not work for me. It complains the port is in use.
How to debug it?

This is the configuration:
sip_port=0
sip_tcp_port=0
sip_tls_port=5161



linphonec -c myconfig -d

ortp-warning-Could not start tls transport on port 5161, maybe this port is already used.
Warning: Could not start tls transport on port 5161, maybe this port is already used.
Ready

_______________________________________________
Linphone-developers mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/linphone-developers

--
Steve Kieu

_______________________________________________
Linphone-developers mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/linphone-developers

--
Steve Kieu

_______________________________________________
Linphone-developers mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/linphone-developers

--
Steve Kieu

_______________________________________________
Linphone-developers mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/linphone-developers

--
Steve Kieu