Differences

This shows you the differences between two versions of the page.

--- tutorials:tls:testing-and-debugging [2014/07/30 10:06] – [TLS Clients] oej
+++ tutorials:tls:testing-and-debugging [2017/04/28 19:55] (current) – [Unencrypted TLS (NULL cipher)] mslehto
@@ Line 140: / Line 140: @@
 ===== Unencrypted TLS (NULL cipher)  =====
-TLS allows unencrypted useage when using the NULL cipher. This is very useful for debugging TLS connection, as you immediately see the SIP traffic.
+TLS allows unencrypted usage when using the NULL cipher. This is very useful for debugging TLS connection, as you immediately see the SIP traffic.
 The NULL cipher is usually disabled, thus it must be explicitly enabled. In Kamailio this can be done by configuring the TLS module:
@@ Line 164: / Line 164: @@
   * QjSimple: select private key and certificate file in configuration dialog
   * Jitis: Settings -> Advanced -> TLS
+==== Trunking with Microsoft Lync ====
+For Microsoft Lync it is very important that the CN in the Kamailio server (and client) certificate use the name configured in the Topology as the PSTN trunk. Other names may be in the SubjectAltName fields.
+Lync by default asks for a TLS client certificate when connecting to it using TLS. MS calls this MTLS - Mutual TLS.
+  * Microsoft: TLS and MTLS in Lync http://technet.microsoft.com/en-us/library/gg195752(v=ocs.14).aspx