[asterisk-users] TLS certificate warnings in softphone, but not until after successful registration and call placed ?

Patrick Laimbock patrick at laimbock.com
Wed Jan 4 08:29:40 CST 2017


On 03-01-17 19:06, Joshua Colp wrote:
> On Fri, Dec 30, 2016, at 05:04 AM, Kevin Long wrote:
>>
>>
>> Hello,
>>
>> I am using asterisk 14.2 and PJSIP,  with TLS transport.
>>
>> I’m sure I’m doing something wrong here ..
>>
>>
>> In 2 distinct softphone clients (Bria and Groundwire),  I am able to
>> register successfully,  and place a SIP call, with no certificate
>> warnings. But shortly after I place that first call and hang up,  I
>> receive a certificate name mismatch error in the softphone,  the error
>> presenting me with the *IP adddress* of my Asterisk server,  not the
>> hostname, and of course the TLS certificates only have the hostname, not
>> the IP, and I have configured the soft phone to use the hostname, not the
>> IP, to connect.
>>
>>
>> I’m guessing there is some currently unset hostname setting within
>> asterisk/pjsip that is defaulting to sending the IP in the sip messages,
>> and then when the soft phone tries to make a new tls sip connection to
>> asterisk,  perhaps to signal to asterisk that the call is complete,  it
>> then connects to the IP instead of the hostname, and the mismatch occurs
>> ?
>
> This might be the Contact header. Right now there is no ability to
> configure this to a hostname instead of an automatically determined IP
> address.

Thank you for your feedback Joshua. Does "right now" mean that this will 
be fixed in the (near) future? Should I file a Jira ticket?

Thanks,
Patrick



More information about the asterisk-users mailing list