Re: [Linphone-developers] Issue with TLS on Android - works on iPhone

[amok]

Hi all,

I am having a similar issue. I am testing Linphone TLS/SRTP with an asterisk
PBX.
I can successfully connect with the Linux implementation of Linphone, but
when I try 
the Android version, it fails.

I am using certificates signed by a trusted CA that is included in the
Linphones rootca.pem 
I have also tried a version compiled with verify_server_certs=0, but it
failed as well.

When I check the ssl connection with "openssl s_client -connect .... -CAfile
" from the android device 
it succeeds.

The ssldump for Linphone shows:
New TCP connection #2: XXX.XXX.XXX.XXX(11412) <-> 17.54.10.2(5061)
2 1  0.0844 (0.0844)  S>C  Handshake
      ServerHello
        Version 3.1 
        session_id[32]=
          ee 5a f9 bd 03 49 c4 94 54 13 6a ab b7 51 9e 13 
          ea 0d 51 8f 27 f9 5a 30 a3 fd 10 13 af 51 be 74 
        cipherSuite         TLS_RSA_WITH_AES_256_CBC_SHA
        compressionMethod                   NULL
2 2  0.1896 (0.1052)  S>C  Handshake
      Certificate
2 3  0.1896 (0.0000)  S>C  Handshake
      ServerHelloDone
Error: short handshake length: expected 196865 got 109                          
                                                  
2 4  0.3067 (0.1170)  C>S  Handshake2 5  0.3076 (0.0008)  C>S  Short record:
31309 bytes available (expecting: 0)                 
2 6  0.3077 (0.0001)  C>S  ChangeCipherSpec                                     
                                                 
2 7  0.3101 (0.0023)  C>S  Handshake                                            
                                                  
2 8  0.3115 (0.0014)  S>C  ChangeCipherSpec
2 9  0.3115 (0.0000)  S>C  Handshake
2 10 0.3792 (0.0677)  S>C  Alert
2    0.3793 (0.0000)  S>C  TCP FIN
2 11 0.3903 (0.0110)  C>S  application_data

Does anybody has an idea of what is going wrong?

Thanks.



--
View this message in context: 
http://nongnu.13855.n7.nabble.com/Issue-with-TLS-on-Android-works-on-iPhone-tp174760p175698.html
Sent from the linphone-developers mailing list archive at Nabble.com.