[Linphone-users] using tls with linphone 3.8.4 on arch linux

[Information Technology Works]

hi,

i have a freeswitch server (1.4.20-1) out on the web i'm trying to
register with over tls using linphone desktop client in arch linux. The
server works fine with csipsimple and ip phone *without* tls. haven't
gotten tls working with any client yet.


I created my certs following the freeswitch wiki here:

https://wiki.freeswitch.org/wiki/SIP_TLS#Configuration

copied my ca.crt to /etc/ssl/certs and added to end of
/usr/share/linphone/rootca.pem for good measure.

with default /home/user/.linphonerc ...

verify_server_certs=1
verify_server_cn=1

i get:

error: 2015-07-07 11:45:49:092 Channel [0x2ae7d10]: SSL handshake failed
: X509 - Certificate verification failed, e.g. CRL, CA or signature
check failed

with modified /home/user/.linphonerc ...

verify_server_certs=0
verify_server_cn=0

i get:

warning: 2015-07-07 11:47:51:534 No client certificate key found in (null)
message: 2015-07-07 11:47:51:539 Channel [0x218bad0]: SSL handshake in
progress...
error: 2015-07-07 11:47:51:592 Channel [0x218bad0]: SSL handshake failed
: SSL - A fatal alert message was received from our peer
error: 2015-07-07 11:47:51:592 Cannot connect to [TLS://REDACTED:5061]


Thanks in advance.