Hello,
On 1/29/12 2:53 PM, Daniel Pocock wrote:
Construct the PEM file in this exact order:
cat server.example.com.pem> chain-server.example.com.pem
cat inter2.pem>> chain-server.example.com.pem
cat inter1.pem>> chain-server.example.com.pem
and then, in tls.cfg:
certificate=chain-server.ex
>> I notice that Asterisk needs to be patched to do it the way Kamailio does:
>>
>> https://issues.asterisk.org/jira/browse/ASTERISK-17727
>
> The Asterisk TCP/TLS implementation is marked experimental for a reason. And
> it's been that way for many years.
All the more reason for people to use
29 jan 2012 kl. 22:27 skrev Daniel Pocock:
>
>
> On 29/01/12 21:47, Iñaki Baz Castillo wrote:
>> 2012/1/29 Daniel Pocock :
>>> It's a little bit different in Apache, where the user specifies a file
>>> containing intermediate certs - many of the CAs give instructions for
>>> adding that file in
On 29/01/12 21:47, Iñaki Baz Castillo wrote:
> 2012/1/29 Daniel Pocock :
>> It's a little bit different in Apache, where the user specifies a file
>> containing intermediate certs - many of the CAs give instructions for
>> adding that file in Apache, but they make no mention of
>> OpenSSL/Kamaili
2012/1/29 Daniel Pocock :
> It's a little bit different in Apache, where the user specifies a file
> containing intermediate certs - many of the CAs give instructions for
> adding that file in Apache, but they make no mention of
> OpenSSL/Kamailio/concatenating everything, so I imagine people will
>> Construct the PEM file in this exact order:
>>
>> cat server.example.com.pem > chain-server.example.com.pem
>> cat inter2.pem >> chain-server.example.com.pem
>> cat inter1.pem >> chain-server.example.com.pem
>>
>> and then, in tls.cfg:
>>
>> certificate=chain-server.example.com.pem
>>
>
> This
29 jan 2012 kl. 13:11 skrev Daniel Pocock:
>
>
> I found that my TLS client was not happy because my server cert is
> signed by an intermediate root.
>
> A quick search in Google found other people mentioning the same problem,
> but no solution or documentation.
>
> I've had a quick look in t
