<div>Hi,</div>
<div> </div>
<div>I am trying to make my non-TLS/TLS UA register with my TLS enabled openSER. Currently I am just working on my local machine with the client UAs on the same subnet,(so there is only one domain, but its not named). Below is my configuration file:
</div>
<div> </div>
<div>disable_tls = 0 <br>listen = tls:<a onclick="return top.js.OpenExtLink(window,event,this)" href="http://10.30.100.41:5061/" target="_blank">10.30.100.41:5061</a><br>tls_verify_server = 1</div>
<div>tls_verify_client = 0<br>tls_require_client_certificate = 0<br>tls_method = TLSv1<br>tls_certificate = "/usr/local/etc/openser/tls/user/user- cert.pem"<br>tls_private_key = "/usr/local/etc/openser/tls/user/user-
privkey.pem"<br>tls_ca_list = "usr/local/etc/openser/tls/user/user-calist.pem"</div>
<div> </div>
<div>However, with the above configuration the client UAs couldnot register and I got 408 Request Time out Message. Is there any field that is missing to make this simple scenario work? What should be the values of "tls_client_domain" and "tls_server_domain" fields in this case?
</div>
<div> </div>
<div>I noticed that when I start the openSER without TLS support using "openserctl start" and do "ps -e" after that, there are more openSER processes running than if I start openSER with TLS support in which case I see very few of these processes running.
</div>
<div> </div>
<div>Your help is much appreciated....</div>
<div> </div>
<div>Best regards,</div>
<div>NCheeku<br> </div>