ssl - Linphone Android: TLS Handshake Error with Self Signed Certificate -


i'm trying use self-signed certificate configure tls in linphone android able communicate freeswitch sip server. ssl handshake fails following errors:

channel [0x9ec3c000]: ssl handshake failed : x509 - certificate verification failed, e.g. crl, ca or signature check failed cannot connect [tls://52.3.207.224:5061]

can please suggest what's way forward debug issue? or how can configure self-signed certificate in linphone android.

note: don't want disable tls server certificate verification suggested below

[sip] verify_server_certs=0

it because self-signed cert can not recognized third-party cas official linphone app pre-configured.

linphone uses it's own root ca store list server-cert going verified used linphone when received cert sip server.

if don't want disable server cert verification (it's avoid man-in-the-middle attack), , since there no ca linphone pre-configured can verify cert, you must create own ca , add linphone's ca list.

you can find ca list in linphone android source: res/raw/rootca.pem add ca , recompiled.

i'm not familiar linphone, think way go.

some useful links:

creating own ssl certificate authority (and dumping self signed certs)

using self-signed certs android linphone


Comments

Popular posts from this blog

python - Healpy: From Data to Healpix map -

c - Bitwise operation with (signed) enum value -

xslt - Unnest parent nodes by child node -