ssl - PJSIP TLS verify error (PJSIP_TLS_ECERTVERIF) -

-


ssl - PJSIP TLS verify error (PJSIP_TLS_ECERTVERIF) -

i have started develop tiny sip softphone application using pj project , gtk+. main goal create softphone supports both tls , srtp encryption (and mwi). have got stuck right @ part library registers business relationship because application has failed verify server when asked it. thought misunderstood while coding i'm newbie today i've tested library using pjsua application attached in source code , register sip business relationship unless i've started programme --tls-verify-server flag. create clear i've created asterisk own certificate authority, keys , certificate , i've installed ca machine. must note setup works commercial software, can verify certificate without problem.

the pjsua flags i've used:

--use-tls --tls-ca-file /etc/ssl/certs/ca-certificates.crt --id=sip:u-kuklinistvan1@kingdom.info.tm;transport=tls --registrar=sip:kingdom.info.tm;transport=tls --realm=kingdom.info.tm --username=u-kuklinistvan1 --password=xxxxxx --use-srtp=2 --mwi --tls-verify-server

it says(please follow link long version):

19:21:44.728 pjsua_app.c tls cert verification result of [94.21.11.229:5061] : server identity not match identities specified in certificate

...which not true openssl accepts certificate:

openssl s_client -cafile /etc/ssl/certs/ca-certificates.crt -connect kingdom.info.tm:5061

(click here rest)

verify homecoming code: 0 (ok)

extra information connect pjsua endpoint registrar hostname kingdom.info.tm.

is possible i've encountered bug or don't understand something? give thanks help!

... not match identities specified in certificate

... not true openssl accepts certificate: ... openssl s_client ...

the error messages refers checking identity against certificate, i.e. hostname provide against names in certificate (subject alternative names, mutual name). openssl s_client not identity checks checks valid trust chain.

looking @ certificate provided server contains contain mutual name kingdom.info.tm. error message looks expects ip address: tls cert verification result of [94.21.11.229:5061]: .... did specify sip url of peer ip address?

ssl certificate voip pjsip verify

Comments

Post a Comment

Popular posts from this blog

java - How to set log4j.defaultInitOverride property to false in jboss server 6 -

-
java - How to set log4j.defaultInitOverride property to false in jboss server 6 - how set log4j property false in jboss. not using log4j in application still property has set true. the reason, why trying set property false is, suspecting property overrides java.util.logging.logger configuration provided application. might because of this, log file not getting generated. boot.log infomation below: 02:46:10,495 debug [serverinfo] log4j.defaultinitoverride: true 02:46:10,496 debug [serverinfo] org.jboss.deployers.spi.deployer.matchers.nameignoremechanism: org.jboss.deployers.spi.deployer.helpers.dummynameignoremechanism 02:46:10,496 debug [serverinfo] org.jboss.logging.logger.pluginclass: org.jboss.logging.logmanager.loggerpluginimpl i have found in boot.log in jboss. in 1 of blog, developers told me that, log4j.defaultinitoverride property should set false avoid override of java.util.logging.logger. comment same if wrong. java logging jboss log4j
Read more

c - GStreamer 1.0 1.4.5 RTSP Example Server sends 503 Service unavailable -

-
c - GStreamer 1.0 1.4.5 RTSP Example Server sends 503 Service unavailable - i'm trying create rtsp server based on gstreamer 1.0 1.4.5 plugin. source code of illustration taken here. with_tls , with_auth flags not enabled. i'm compiling using visual studio 2013 community edition. project building , running successfully. when i'm trying play video using vlc on address rtsp://127.0.0.1:8554/test says can't open mrl. recorded traffic (using rawcap) of communication between compiled server , vlc player following: request: options rtsp://127.0.0.1:8554/test rtsp/1.0 cseq: 2 user-agent: libvlc/2.2.0 (live555 streaming media v2014.07.25) response: rtsp/1.0 200 ok cseq: 2 public: options, describe, get_parameter, pause, play, setup, set_parameter, teardown server: gstreamer rtsp server date: thu, 09 apr 2015 03:35:30 gmt request: describe rtsp://127.0.0.1:8554/test rtsp/1.0 cseq: 3 user-agent: libvlc/2.2.0 (live555 streaming media v2014.07.25) accept: applicat...
Read more

Using ajax with sonata admin list view pagination -

-
Using ajax with sonata admin list view pagination - i'm using sonata admin in project. in list view sonata refresh page when clik sec list pagination. that's default behavior of sonata.is there way utilize ajax phone call list view pagination !!! same question when using sortable list view. thanks. this possible, have overwrite of basic functionality of sonata admin bundle. tested symfony 2.6.6 sonata admin-bundle dev-master (4f23e1a30e49681bf8ebdbbae549848784be7699) 1. edit bundles services.yml you have implement own crudcontroller , new list template. tell in services.yml sonata.admin.youradmin: class: your\bundle\admin\youradmin tags: - { name: sonata.admin, manager_type: orm, group: "groupname", label: "grouplabel" } arguments: - ~ - your\bundle\entity\entityclass - yourbundle:yournewcrud # <- add together crud class here calls: ...
Read more