<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hello,<br>
<br>
<div class="moz-cite-prefix">On 25/10/15 13:10, Vladimer Gabunia
wrote:<br>
</div>
<blockquote
cite="mid:767F5380AA99204F816B30B238C456CF45E981E6@HN-MCAS-01.hn.ge"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style type="text/css" id="owaParaStyle"></style>
<div style="direction: ltr;font-family: Tahoma;color:
#000000;font-size: 10pt;">
<div>hello all.</div>
<div>we compiled kamailio with TLS Support. but have next
problem when using CRL Lits.</div>
<div>Our Certificate issuing scheme is follow:</div>
<div>Offline Root CA -> Enterprise SubCA -> Server and
Phone Certificate </div>
<div>CRL list is signed by SubCA.</div>
<div>option "require client certificate is enables (1) "</div>
<div>When we enable CRL list, phones are not registered.</div>
<div>CA file is offline RootCA certificate in pem format.</div>
<div>We think that the reason is that СRL was signed by Subca or
incorrect CRL format.</div>
<div>CRL is converted from MS CRL to PEM. (What is the format
for the CRL)</div>
<div>maybe someone have experiance with similar scenarios?</div>
</div>
</blockquote>
the readme file of the tls module has some documentation about crl:<br>
<br>
<a class="moz-txt-link-freetext" href="http://www.kamailio.org/docs/modules/stable/modules/tls.html#tls.p.crl">http://www.kamailio.org/docs/modules/stable/modules/tls.html#tls.p.crl</a><br>
<br>
You can also try to run with debug=3 in kmailio.cfg and see more
debug messages about what happens internally.<br>
<br>
Cheers,<br>
Daniel<br>
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla
<a class="moz-txt-link-freetext" href="http://twitter.com/#!/miconda">http://twitter.com/#!/miconda</a> - <a class="moz-txt-link-freetext" href="http://www.linkedin.com/in/miconda">http://www.linkedin.com/in/miconda</a>
Book: SIP Routing With Kamailio - <a class="moz-txt-link-freetext" href="http://www.asipto.com">http://www.asipto.com</a>
Kamailio Advanced Training, Nov 30-Dec 2, Berlin - <a class="moz-txt-link-freetext" href="http://asipto.com/kat">http://asipto.com/kat</a></pre>
</body>
</html>