<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=gb2312">
<META content="MSHTML 6.00.2900.2802" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Verdana><FONT size=2>Hi, all,</FONT></FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Verdana><FONT size=2>i have been trying to test TLS support on
OpenSER with EyeBeam client, but in no vain.<BR>OpenSER keep complaining that
"client did not present a certificate".</FONT></FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Verdana><FONT size=2>really need help! thanks in
advance.</FONT></FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Verdana><FONT size=2>here is some info of my environment:<BR>1)
OpenSER 1.2 and EyeBeam 1.5<BR>2) run "openserctl tls rootCA", create
"cacert.pem" under /etc/openser/tls/rootCA/.<BR>3) run "openserctl tls
userCERT", create "user-calist.pem user-cert.pem
user-cert_req.pem user-privkey.pem" under /etc/openser/tls/user/. <BR>4) i
have set openser.cfg as follow:<BR> disable_tls =
0<BR> listen = tls:172.22.14.61:5061<BR>
tls_verify_client = 0<BR> tls_require_client_certificate =
0<BR> tls_method = TLSv1<BR> tls_certificate
= /etc/openser/tls/user/user-cert.pem"<BR> tls_private_key =
"/etc/openser/tls/user/user-privkey.pem"<BR> tls_ca_list =
"/etc/openser/tls/user/user-calist.pem"<BR>5) copy
"/etc/openser/tls/rootCA/cacert.pem" created at step 2) to EyeBeam clinet
machine, which was a Windows XP machine, run "certmrg.msc" there, import
this certificate to WindowXP "root certificate store".</FONT></FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Verdana><FONT size=2>when run ... error occur. OpenSER
complaint that "client did not present a certificate", and EyeBeam receive a
"503 certificate name mismath".</FONT></FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Verdana><FONT size=2>Any advise will be very appreciate
!!</FONT></FONT></DIV>
<DIV><FONT face=Verdana><FONT size=2></FONT></FONT> </DIV>
<DIV><FONT face=Verdana size=2>yan lin</FONT></DIV>
<DIV><FONT face=Verdana size=2><A
href="mailto:yanlin@fortinet.com">yanlin@fortinet.com</A></FONT></DIV>
<DIV><FONT face=Verdana size=2>2007-3-26</FONT></DIV>
<DIV><FONT face=Verdana><FONT size=2></FONT> </DIV><FONT color=#c0c0c0>
<DIV><FONT size=2></FONT></FONT></DIV></FONT></BODY></HTML>