Hello,
I am trying to find the phones that can use tls with certificate, I mean that the phone doesn't accept incoming calls unless the server certificate is signed by a public authority or manually added to a list. For now my conclusions are:
-Snom 360 - works with TLS. But although snom wiki states that a certificate is needed, incoming calls are accepted even if the certificate is not uploaded. -SJPhone - same as snom -Bria - this is the only phone I could find that works only if the certificate is loaded.
Has anybody used other phones with tls and can give me a piece of advice? also, maybe I am not configuring Snom right and that's why it doesn't need a certificate, any ideas?
Thanks Catalina
Hi!
Just to make clear things - what do you mean with "incoming" - TLS connections setup or SIP call flow.
For having incoming TLS connection you would need a client which allows to configure a client certificate and acts as TLS server - I am not aware of any.
Usually the TLS connection is setup from the client (means the proxy acts as TLS server, sending a certificate which is verified by the TLS client). Then, once the TLS connection is established, this connection is used for outgoing and incoming SIP calls, without any forther verification of TLS parameters (TLS certificate is only checked on TLS connection setup).
SNOM: I had the same results as you Eyebeam (probably like Bria): Works fine, uses Windows' certificate store QjSimple: Should work, you have to provide a file with the CA certificates (if not, let me know an I will fix it)
regards klaus
catalina oancea schrieb:
Hello,
I was referring to the phone acting as a client.
Can QJSimple work on Windows? I was unable to start it and I found no documentation: --------------------------- This application has failed to start because libeay32.dll was not found. Re-installing the application may fix this problem. ---------------------------
I am more interested in hard phones. Please let me know if you run into one that uses certificates.
Thanks for answering Catalina
2009/8/24 Klaus Darilion klaus.mailinglists@pernau.at:
catalina oancea schrieb:
Yes, it works on Windows, but I have forgotten to add the openssl DLLs. So please download again - it should work now. You have to specify the CA file and activate "verify TLS server certificate".
PS: If you do not have a TLS server handy, you can test TLS conenction again a webserver, e.g. outboundproxy: pernau.at:443 (of course registration fails, but if you see the 400 Bad Request response from the webserver this indicates that TLS is working)
I am more interested in hard phones. Please let me know if you run into one that uses certificates.
Sorry, I am not aware of hard phones
regards klaus
Now when I try to run the windows exec I get:
--------------------------- QjSimple.exe - Application Error --------------------------- The application failed to initialize properly (0xc0150002). Click on OK to terminate the application. --------------------------- OK ---------------------------
2009/8/25 Klaus Darilion klaus.mailinglists@pernau.at:
catalina oancea schrieb:
Sorry for the circumstances - I never had this issues. Maybe there is another library missing. Which version of Windows are you using?
Can you please verify the dependencies of QjSimple.exe with "Dependency Walker" (http://www.dependencywalker.com/)?
Thanks Klaus
Hello again,
It is not of major importance for me to make qjsimple work with TLS, but I don't mind trying it.
It seems the following are missing:
MSVCR90.DLL IESHIMS.DLL WER.DLL
I also get these error when opening the exec with dependencywalker:
Error: The Side-by-Side configuration information for "c:\documents and settings\catalinao\desktop\qjsimple-0.6.3-binaries(2)\qjsimple-0.6.3-binaries\LIBEAY32.DLL" contains errors. This application has failed to start because the application configuration is incorrect. Reinstalling the application may fix this problem (14001). Error: The Side-by-Side configuration information for "c:\documents and settings\catalinao\desktop\qjsimple-0.6.3-binaries(2)\qjsimple-0.6.3-binaries\SSLEAY32.DLL" contains errors. This application has failed to start because the application configuration is incorrect. Reinstalling the application may fix this problem (14001). Error: At least one required implicit or forwarded dependency was not found. Warning: At least one delay-load dependency module was not found. Warning: At least one module has an unresolved import due to a missing export function in a delay-load dependent module.
I am using: Operating System: Microsoft Windows XP Professional (32-bit) OS Version: 5.01.2600 Service Pack 2
Best regards Catalina
2009/8/25 Klaus Darilion klaus.mailinglists@pernau.at:
catalina oancea schrieb:
I found the problem. The OpenSSL binaries I use were built with Visual Studio 2008. Thus, the Microsoft Visual C++ 2008 Redistributable Package (x86) needs to be installed too: http://www.microsoft.com/DOWNLOADS/details.aspx?FamilyID=9b2da534-3e03-4391-...
IESHIMS.DLL WER.DLL
I do have these dependencies missing too - but it it working. Thus, it should work even with these DLLs missing.
regards klaus
-
catalina oancea -
Klaus Darilion