Re: [Linphone-developers] Issue with TLS on Android - works on iPhone

[Sylvain Berfini]

Hi Barry,

For android just edit the linphonerc_default files (the one in res/raw is for smartphones, the one in res/raw-sw600dp is for tablets).

By the way, you'll have to uninstall the previous version of linphone on your device before compiling/installing the new one for the changes to happen.

Regards.

2013/11/12 Barry Flanagan <address@hidden>

On 12 November 2013 17:14, Jehan Monnier <address@hidden> wrote:

Hi,

To disable TLS server certificate verification, put this in linphonerc:

[sip]

verify_server_certs=0

Thanks for the reply. Do you mean one of these:

./res/raw-sw600dp/linphonerc_default 

./res/raw-sw600dp/linphonerc_factory

./res/raw/linphonerc_default

./res/raw/linphonerc_factory

...I don't see any other linphonerc in the Android source tree. I put the setting into these and did a make but no difference.

Thanks

-Barry

 

Cheers

Jehan

www.linphone.org

Le 12 nov. 2013 à 18:06, Barry Flanagan <address@hidden> a écrit :

Hi

I cannot get Linphone TLS working against my SIP (Kamailio 4.x) server on Android. TLS works fine on iPhone. This is the case with both the Android Market and my own compiled version.

The error is: "SSL handshake failed : X509 - Certificate verification failed, e.g. CRL, CA or signature check failed" 

The server has a valid, signed cert (Comodo CA) and on the server I have concatenated the ca cert with the server cert to ensure the chain of trust is available.

I have tried manually adding the ca-bundle cert and the server cert into res/raw/rootca.pem but this has made no difference.

Is there any way to either turn off certificate verification for TLS or to add my cert?

Many thanks.

-Barry Flanagan

_______________________________________________
Linphone-developers mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/linphone-developers

_______________________________________________
Linphone-developers mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/linphone-developers

_______________________________________________
Linphone-developers mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/linphone-developers

--

Sylvain Berfini