Verification client certificate

loop · Post by **loop** » Wed Nov 15, 2017 12:09 am

1. Brekeke Product Name and Version:SIP Server 3.7.7.8

2. Your problem: Does Brekeke SIP Server support verification client certificate?

I want to register a client(phone) to the SIP server over TLS. How sould I configure the SIP Server to verify client certificate?

Harold · Post by **Harold** » Wed Nov 15, 2017 12:20 am

Which SIP client product is it?
Generally, we don't use client certificate. so.. does your SIP client support it?

If so, add the setting below at [Configuration]->[Advanced] page.
------------------------------
net.sip.tls.clientauth=need
------------------------------

loop · Post by **loop** » Wed Nov 15, 2017 5:00 am

I use PJSIP library for client and it supports.

Thanks

lakeview · Post by **lakeview** » Wed Nov 15, 2017 11:24 am

If you use a self-signed certificate as Client's certificate, you need to add it as a trusted certificate. Or set [Peer Certification Validation]=off at [Configuration] > [SIP] -> [TLS] page.

FYI:
http://wiki.brekeke.com/wiki/Making-SIP ... r-Over-TLS