[Linphone-developers] TLS Asterisk connecton without verify_server. ORTP TLS Belle problem - may be bug

[Владислав Ветров]

Can I make tls - asterisk connection with linphone without verify_server_certificates and verify_server_cn?

./coreapi/linphonecore.c:

    linphone_core_verify_server_certificates(lc,lp_config_get_int(lc->config,"sip","verify_server_certs",TRUE));
    linphone_core_verify_server_cn(lc,lp_config_get_int(lc->config,"sip","verify_server_cn",TRUE)); 

I've switched it to FALSE 

    linphone_core_verify_server_certificates(lc,lp_config_get_int(lc->config,"sip","verify_server_certs",FALSE));
    linphone_core_verify_server_cn(lc,lp_config_get_int(lc->config,"sip","verify_server_cn",FALSE)); 

but get proken ORTP pipe 

By the way:

Linphone for Linux root_ca path defined as /etc/ssl/certs and linphone doesn't see rootca.pem flile in /usr/local/share/linphone/rootca.pem
I think this is the bug in ./coreapi/linphonecore.c.

Also something wrong with ORTP + TLS  -> broken pipe. I've checked my TLS connection by the Blink sip program ( http://icanblink.com ) - it works fine with the same certificates.