Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
vendors:cisco:uc:cvp:rest [2021/11/12 14:36] – [Example] gerardorourkevendors:cisco:uc:cvp:rest [2024/12/27 14:58] (current) – [Mutual TLS] gerardorourke
Line 169: Line 169:
 https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/customer_voice_portal/cvp11_0/user/guide/CCVP_BK_14998B8D_00_1101-vxml-server-guide/Two_Way_SSL_Authentication.html#CCVP_TK_C69F94CE_00 https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/customer_voice_portal/cvp11_0/user/guide/CCVP_BK_14998B8D_00_1101-vxml-server-guide/Two_Way_SSL_Authentication.html#CCVP_TK_C69F94CE_00
  
-===== Troubleshooing =====+==== Troubleshooting ====
   *https://www.codit.eu/blog/troubleshooting-ssl-client-certificate-issue-on-iis/?country_sel=be   *https://www.codit.eu/blog/troubleshooting-ssl-client-certificate-issue-on-iis/?country_sel=be
   *https://joji.me/en-us/blog/walkthrough-decrypt-ssl-tls-traffic-https-and-http2-in-wireshark/   *https://joji.me/en-us/blog/walkthrough-decrypt-ssl-tls-traffic-https-and-http2-in-wireshark/
  
-===== CVP REST - Mutual Auth Setup and Testing =====+==== CVP REST - Mutual Auth Setup and Testing ====
  
  
-==== SSL debugging on CVP VXML Servers====+=== SSL debugging on CVP VXML Servers===
  
-=== Enable Standard output and standard Error for the VXML Tomcat is not already done ===+== Enable Standard output and standard Error for the VXML Tomcat is not already done ==
 Run the following below command on the VXML Server bin folder and set the log value to "auto" as per the below screen shot. Run the following below command on the VXML Server bin folder and set the log value to "auto" as per the below screen shot.
 <code>tomcat9w //ES//VXMLServer</code> <code>tomcat9w //ES//VXMLServer</code>
Line 238: Line 238:
  
  
-===== TLS Handshake overview =====+==== TLS Handshake overview ====
  
-====Standard TLS=====+===Standard TLS===
 <sequencediagram> <sequencediagram>
     Client ->Server : SYN      Client ->Server : SYN 
Line 270: Line 270:
 </sequencediagram> </sequencediagram>
  
-==== Example ====    +=== Example ===
  
 note - the Wireshark trace below was decrypted using the Server private key and disabling DH (Diffie-Hellmen) - so some of below is not typically visible. i.e. once the initial TLS connection is setup, you won't get to see the second Mutual Auth TLS been established as in the below example. note - the Wireshark trace below was decrypted using the Server private key and disabling DH (Diffie-Hellmen) - so some of below is not typically visible. i.e. once the initial TLS connection is setup, you won't get to see the second Mutual Auth TLS been established as in the below example.
Line 276: Line 276:
 {{:vendors:cisco:uc:cvp:cvp-rest-mutualauth.png?400|}} {{:vendors:cisco:uc:cvp:cvp-rest-mutualauth.png?400|}}
    
 +
 +===Reference===
 +  *https://hafizmohammed.medium.com/configuring-client-certificates-on-iis-95aef4174ddb
 +  *https://www.gradenegger.eu/en/inspect-https-ssl-traffic-with-wireshark/
  
  • vendors/cisco/uc/cvp/rest.1636727799.txt.gz
  • Last modified: 2021/11/12 14:36
  • by gerardorourke