<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Thanks for the clarifications.<BR> <BR>Now, when we ask the client to have a certificate, where do we control what client certificates will be accepted?<BR>I.e.: I don't want any valid certificate to authentcate but only those ones I accept as valid.<BR> <BR>Moacir<br> <BR><div>> Date: Thu, 23 May 2013 10:34:09 +0200<br>> From: klaus.mailinglists@pernau.at<br>> To: miconda@gmail.com; sr-users@lists.sip-router.org<br>> Subject: Re: [SR-Users] TLS<br>> <br>> <br>> <br>> On 22.05.2013 11:19, Daniel-Constantin Mierla wrote:<br>> >>><br>> >>> - Finally, do you know any free softphone that implements mutual TLS<br>> >>> authentication?<br>> >><br>> >> I am not aware of any.<br>> ><br>> > Like the softphone authenticating the server based on server certificate?<br>> <br>> MTLS just means, that the TLS server requires a certificate from the TLS <br>> client. Thus, between SIP clients and SIP server this merely means that <br>> not only the client authenticates the proxy, but the proxy also <br>> authenticates the client based on the client's TLS certificate.<br>> <br>> Nice that Jitsi supports it - although I failed to configure Jitsi :-) <br>> If someone fails configuring TLS for Jitsi, see this howto:<br>> http://www.resiprocate.org/ReproMutualTLSAuthenticationJitsi#Setting_up_Jitsi<br>> <br>> I just found out that my QjSimple [1] also supports client certificates :-)<br>> <br>> <br>> regards<br>> Klaus<br>> <br>> [1] http://www.ipcom.at/en/telephony/qjsimple/<br>> <br>> _______________________________________________<br>> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br>> sr-users@lists.sip-router.org<br>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users<br></div> </div></body>
</html>