Page Index Toggle Pages: 1 Send TopicPrint
Normal Topic Client certificate not going from PhonerLite(2.43) (Read 4473 times)
shruthi
YaBB Newbies
*
Offline


Phoner is great!

Posts: 5
Joined: 11. Oct 2016
Client certificate not going from PhonerLite(2.43)
11. Oct 2016 at 11:11
Print Post  
Hi,
So I am trying to enable tls with PhonerLite and the requirement is that both the client and the server authenticate each other.But everytime from the server side "Unknown CA error" keeps coming.On verifying the packets leaving PhonerLite(2.43),the packet where the client certificate is supposed to be there,the certificate length is showing 0.I have checked with PhonerLite 2.11 too,but still its the same.I have configured the client certificate in the field which says client certificate.Can somebody please help me resolve this issue.I have attached the wireshark packet which shows certificate length as 0.Many Thanks.
« Last Edit: 11. Oct 2016 at 16:51 by shruthi »  

packetcli.png ( 23 KB | 231 Downloads )
packetcli.png
Back to top
 
IP Logged
 
Phoner Admin
YaBB Administrator
*****
Offline



Posts: 11421
Location: Germany
Joined: 12. Oct 2003
Gender: Male
Re: Client certificate not going from PhonerLite(2.43)
Reply #1 - 11. Oct 2016 at 12:27
Print Post  
I can't test it here, because I don't have a server that needs client certificates. You can try to delete your certificate files in PhonerLite configuration. If no external certificate (and key) is configured, PhonerLite uses a built in default certificate. Do you see that one in Wireshark?
  
Back to top
WWW  
IP Logged
 
shruthi
YaBB Newbies
*
Offline


Phoner is great!

Posts: 5
Joined: 11. Oct 2016
Re: Client certificate not going from PhonerLite(2.43)
Reply #2 - 11. Oct 2016 at 16:40
Print Post  
Hi,
yeah i did that but then the server shows an "ERR_CERT_EXPIRED" error.But technically the client certificate should be going inh the packet right?could it because I'm using a trial version?
Thanks
  
Back to top
 
IP Logged
 
shruthi
YaBB Newbies
*
Offline


Phoner is great!

Posts: 5
Joined: 11. Oct 2016
Re: Client certificate not going from PhonerLite(2.43)
Reply #3 - 11. Oct 2016 at 17:08
Print Post  
And this is the default certficate it takes.Where can I get the root CA from?and is there any reason my server throws the "ERR_CERT_EXPIRED" error?
  

pkt2.png ( 20 KB | 230 Downloads )
pkt2.png
Back to top
 
IP Logged
 
Phoner Admin
YaBB Administrator
*****
Offline



Posts: 11421
Location: Germany
Joined: 12. Oct 2003
Gender: Male
Re: Client certificate not going from PhonerLite(2.43)
Reply #4 - 12. Oct 2016 at 08:49
Print Post  
This was only for testing, if PhonerLite can send a client certificate. That is the case. Therefore I assume that the import of your certificate and key was not successful. 
The client certificate file you configure in PhonerLite should look like this:
Code
Select All
-----BEGIN CERTIFICATE-----
[...]
-----END CERTIFICATE-----   


The private key file should look like this:
Code
Select All
-----BEGIN RSA PRIVATE KEY-----
[...]
-----END RSA PRIVATE KEY-----  

  
Back to top
WWW  
IP Logged
 
shruthi
YaBB Newbies
*
Offline


Phoner is great!

Posts: 5
Joined: 11. Oct 2016
Re: Client certificate not going from PhonerLite(2.43)
Reply #5 - 12. Oct 2016 at 13:51
Print Post  
The same certificate and key works fine with openssl.Could there be any other reason behind this?Before running my call,I have just configured the client certificate file in the client certificate file field.I have imported the private key and placed it in the desktop.I'm a beginner trying my hand at this.So have I done it right?
  
Back to top
 
IP Logged
 
shruthi
YaBB Newbies
*
Offline


Phoner is great!

Posts: 5
Joined: 11. Oct 2016
Re: Client certificate not going from PhonerLite(2.43)
Reply #6 - 12. Oct 2016 at 14:26
Print Post  
Thanks for your help as I was able to figure out where I was going wrong and now it works fine.I configured the client certificate with just the certificate and not the key.Thank you once again  Smiley
  
Back to top
 
IP Logged
 
Phoner Admin
YaBB Administrator
*****
Offline



Posts: 11421
Location: Germany
Joined: 12. Oct 2003
Gender: Male
Re: Client certificate not going from PhonerLite(2.43)
Reply #7 - 12. Oct 2016 at 14:56
Print Post  
I am glad to hear this. Thanks for the feedback.
  
Back to top
WWW  
IP Logged
 
Page Index Toggle Pages: 1
Send TopicPrint