Skip to content

The latest nksip (v0.6.1) along with nkpacket (from master) doesn't provide certificates during tls handshake #9

@pickme467

Description

@pickme467

It looks like configuration map stored in ets table doesn't have tls_keyfile, tls_certfile nor tls_cacertfile elements. As a result the ssl:connect is invoked without certificates because nkpacket_tls:make_outbound_opts is unable to retrieve them from registered record. I am not sure where exactly it is removed. I looked at nkpacket_transport_tcp:init where configuration is inserted into the ets table. The mechanism doesn't include tls specific keys, but the whole algorithm looks the same as for v0.6.1 version and this version seems to work.

It seems that the version v0.5.0 of nksip also doesn't have this working. A solution would be to extend ConnMetaOpts variable used in nkpacket_transport_tcp:init with the following elements:
ConnMetaOpts = [tcp_packet, tls_certfile, tls_keyfile, tls_cacertfile, tls_verify | ?CONN_LISTEN_OPTS],

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions