Re: [Sip-implementors] Some TLS questions

2017-11-21 Thread Alex Balashov
On Wed, Nov 22, 2017 at 01:00:47AM -0500, Alex Balashov wrote: > You say Kamailio supports SNI? How? I suppose the answer lies in multiple TLS configs for each domain: https://kamailio.org/docs/modules/5.0.x/modules/tls.html#tls.p.config -- Alex -- Alex Balashov | Principal | Evariste Systems

Re: [Sip-implementors] Some TLS questions

2017-11-21 Thread Alex Balashov
On Tue, Nov 21, 2017 at 12:13:14PM +0100, Olle E. Johansson wrote: > Propably because they don’t trust your CA. You need to install the > CA cert in the trust store on the systems you run Bria and Blink on > (and remember to remove it later) Since I wrote that, I got an authoritative certificate

Re: [Sip-implementors] Some TLS questions

2017-11-21 Thread Roman Shpount
On Tue, Nov 21, 2017 at 6:13 AM, Olle E. Johansson wrote: > > >> > >> Not really. I haven’t seen any server that enforces this policy. At > >> the time of the writing of this RFC wildcards where highly suspected > >> for abuse but I haven’t seen much discussions about this lately. > >> Propably b

Re: [Sip-implementors] Some TLS questions

2017-11-21 Thread Olle E. Johansson
> On 18 Nov 2017, at 20:05, Alex Balashov wrote: > > Hello Olle, > > Thank you for the education! > > By way of further question to the list: > > On Sat, Nov 18, 2017 at 12:21:09PM +0100, Olle E. Johansson wrote: > >> They are important and indicate that further work is needed here. >> Plea