Hi! Openssl only validates certificates only on TLS layer - e.g. against list of trusted CAs. But SIP also requires validation of the certificates name against the SIP domain. Are there any means in pjsua-API to implement this? e.g. are there any callbacks to make this applicaton-layer validation? regards klaus PS: http://tools.ietf.org/html/draft-ietf-sip-domain-certs-04 describes what I am talking about

Just created ticket #1302 for this issue: http://trac.pjsip.org/repos/ticket/1032 BR, nanang On Fri, Jan 22, 2010 at 10:13 PM, Klaus Darilion <klaus.mailinglists@pernau.at> wrote: > Hi! > > Openssl only validates certificates only on TLS layer - e.g. against list of > trusted CAs. > > But SIP also requires validation of the certificates name against the SIP > domain. Are there any means in pjsua-API to implement this? e.g. are there > any callbacks to make this applicaton-layer validation? > > regards > klaus > > PS: http://tools.ietf.org/html/draft-ietf-sip-domain-certs-04 describes what > I am talking about > > _______________________________________________ > Visit our blog: http://blog.pjsip.org > > pjsip mailing list > pjsip@lists.pjsip.org > http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org >