Hi!
I've managed to implement and compile Peter Griffiths' free TLS implementation. It worked well, a test-connection with "openssl s_client" did also work.
Now, how do I tell my UAs (snom 190, sipura SPA-1001) to use SIP over TLS? Both vendors of these UAs claim their UA is capable of SIPS, so how do I enable it?
Alex Mack
For the snom UA you need to add a DNS SRV entry for TLS for your proxy. Then the UA will prefer TLS over TCP according to RFC3264.
Nils
On Wednesday 20 April 2005 12:57, Alex Mack wrote:
Hi!
I've managed to implement and compile Peter Griffiths' free TLS implementation. It worked well, a test-connection with "openssl s_client" did also work.
Now, how do I tell my UAs (snom 190, sipura SPA-1001) to use SIP over TLS? Both vendors of these UAs claim their UA is capable of SIPS, so how do I enable it?
Alex Mack
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Thanks for the hint Nils!
I don't have the DNS Entry yet, but I sniffed with a bogus name for the server and discovered what you said: it querys for SRV _sips._tcp.mydomain.org. I'l try to get that entry up by tomorrow.
I'll report any progress to the list.
BTW is there a source/website/CVS for downloading Peter's Free TLS implementation? It's in the mailing list's archives but it would be handy to have a download source till it's finally found its way into CVS.
Alex Mack
Nils Ohlmeier schrieb:
For the snom UA you need to add a DNS SRV entry for TLS for your proxy. Then the UA will prefer TLS over TCP according to RFC3264.
Nils
On Wednesday 20 April 2005 12:57, Alex Mack wrote:
Hi!
I've managed to implement and compile Peter Griffiths' free TLS implementation. It worked well, a test-connection with "openssl s_client" did also work.
Now, how do I tell my UAs (snom 190, sipura SPA-1001) to use SIP over TLS? Both vendors of these UAs claim their UA is capable of SIPS, so how do I enable it?
Alex Mack
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers