ssl - Linphone Android: TLS Handshake Error with Self Signed Certificate -
i'm trying use self-signed certificate configure tls in linphone android able communicate freeswitch sip server. ssl handshake fails following errors:
channel [0x9ec3c000]: ssl handshake failed : x509 - certificate verification failed, e.g. crl, ca or signature check failed cannot connect [tls://52.3.207.224:5061]
can please suggest what's way forward debug issue? or how can configure self-signed certificate in linphone android.
note: don't want disable tls server certificate verification suggested below
[sip] verify_server_certs=0
it because self-signed cert can not recognized third-party cas official linphone app pre-configured.
linphone uses it's own root ca store list server-cert going verified used linphone when received cert sip server.
if don't want disable server cert verification (it's avoid man-in-the-middle attack), , since there no ca linphone pre-configured can verify cert, you must create own ca , add linphone's ca list.
you can find ca list in linphone android source: res/raw/rootca.pem
add ca , recompiled.
i'm not familiar linphone, think way go.
some useful links:
creating own ssl certificate authority (and dumping self signed certs)
Comments
Post a Comment