[sr-dev] [kamailio/kamailio] ERROR tls: alert certificate unknown (#2104)

Thadeu Esteves Jr notifications at github.com
Fri Oct 18 18:16:57 CEST 2019


### Description

I have received an error that the certificate could not be found

#### Log Messages

Oct 18 13:04:35 Debian9-104 /usr/local/sbin/kamailio[5675]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown

Oct 18 13:04:35 Debian9-104 /usr/local/sbin/kamailio[5675]: ERROR: <core> [core/tcp_read.c:1505]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f54c3613588 r: 0x7f54c3613608 (-1)

### Additional Information

* **Kamailio Version** - output of `kamailio -v`

version: kamailio 5.2.5 (x86_64/linux) e10d4f
flags: STATS: Off, USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MEM, SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLACKLIST, HAVE_RESOLV_RES, TLS_PTHREAD_MUTEX_SHARED
ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144 MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB
poll method support: poll, epoll_lt, epoll_et, sigio_rt, select.
id: e10d4f
compiled on 11:51:09 Oct 18 2019 with gcc 6.3.0

* **tls.cfg**
[server:default]
method = SSLv23
verify_certificate = no
require_certificate = no
private_key = my.key
certificate = my.crt

[client:default]
verify_certificate = yes
require_certiificate = yes

**Operating System**:

Distributor ID:	Debian
Description:	Debian GNU/Linux 9.9 (stretch)
Release:	9.9
Codename:	stretch

Linux Debian9-104 4.9.0-9-amd64 #1 SMP Debian 4.9.168-1+deb9u5 (2019-08-11) x86_64 GNU/Linux

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2104
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-dev/attachments/20191018/52db29c1/attachment-0001.html>


More information about the sr-dev mailing list