[Users] TLS problem

[Cesc]

Hi,

see inline ...

On 1/10/06, David <david.castro at adianta.net> wrote:
> Hello.
> I'm trying to use TLS with openser. I've made the steps from the
> tutorial:http://openser.org/docs/tls.html.
> I have "tls_verify = 1" and "tls_require_certificate = 1".
> I have a phone without TLS support, but it registers in openser. I think, this
> shouldn't happend.
> Anybody has ideas?
>
a few ;)
your phone does support udp (and probably tcp) ... and your ser is
mostly sure listening to udp (and almost tcp for sure), as well as tls
(if you have configured it properly to do so). So ... the phone uses
either of them ... that is why you can register.

>
> Second question:
> I used netstat to verify if somebody is listening on 5060 and 5061, but if I put
>  ip_openser:5061 in the phone, I have an icmp message with "destination
> unreachable".
> What's happening?
>
probably the phone tries to use udp on port 5061 (to connect to
ip_openser) ... but in that ip, openser is not listening on port 5061
...

Cesc