[OpenSIPS-Users] OpenSIPs with mutual TLS and client CA lists

Alexey Vasilyev alexei.vasilyev at gmail.com
Tue Jul 9 09:38:36 EDT 2019


Hi Phil,

I tried this mode, but was unsuccessful, my phone still send certificate,
even its' CA not in the list.
This is screenshot of Certificate request from OpenSIPS side:
</file/t396951/tls_ca_client.png> 

And it seems that it's not very good idea to send full list of trusted CAs.
What so smart phones do you use, that they can choose to send or not its'
certificate?
If you like to test it in your environment?




-----
---
Alexey Vasilyev
--
Sent from: http://opensips-open-sip-server.1449251.n2.nabble.com/OpenSIPS-Users-f1449235.html



More information about the Users mailing list