Hello,
i tested the new SNG7 Distro and i have some problems with openssl.
I have installed the Nginx from repository and tried to connect a phone with a valid SSL Client cert with the server.
Nginx has an error and the phone cannot get the config files:
ignoring stale global SSL error (SSL: error:0D0C50A1:asn1 encoding routines:ASN1_item_verify:unknown message digest algorithm) while waiting for request,
Config:
ssl on;
ssl_certificate /etc/httpd/pki/webserver.pem;
ssl_certificate_key /etc/httpd/pki/webserver.key;
ssl_client_certificate /etc/httpd/pki/yealink/ca.crt;
ssl_ciphers ALL:-RC4+SSLv2;
ssl_verify_client on;
ssl_verify_depth 2;
I use the same configs on a PBXACT UC60 Appliance and everything works.
I just copied the Nginx config files and certs from PKI folder to the new SNG7 Server.
Does anyone know how to solve this?
I tried updating curl, nginx and openssl but had no luck. The errors are still there.