android - linphone 上的 SSL 客户端证书验证

Question

我正在实现来自 asterisk official site tutorial 的安全调用

经过大量的努力和对 ssl 和证书的理解，我只通过一种方式确保了它的安全。以下是最好的线索和方向: SSL using self signed certs on linphone

我如何使用客户端证书(上面教程生成的)来验证服务器上的客户端；称为完整的 ssl 身份验证

我在 linphonerc 文件中读到了这个设置:"verify_client_certs=1" 但我不知道将客户端证书放在哪里？

Answer 1

Hi you can check on our wiki to more information about client certificats.

https://wiki.linphone.org/wiki/index.php/Security:ClientCertAuth

Security:ClientCertAuth

1. Creating Client certificate


    Generate a Certificate Signing Request

Creates a new private key and a certificate request with CN=username@domain

example test@test.linphone.org

    openssl req -new -keyout key.pem -out newreq.pem

    Sign the client certificate 

Creates newcert.pem certificate signed by root certificate. You will need to enter the passphrase of the cacert.pem

    openssl ca -policy policy_anything -out newcert.pem -infiles newreq.pem

Then extract the private key in a new file

    openssl rsa -in key.pem -out clientkey.pem

    Parameters for linphone

In linphonerc add path to client/key certificate

[sip]
client_cert_chain=/pathTo/newcert.pem
client_cert_key=/pathTo/clientkey.pem