<p></p>
Daniel-Constantin Mierla writes:<br>
<br>
> The error message seems to be related to failure to open `ca_list`<br>
> file, not to `ca_path` -- can you check if `ca_list` is still set<br>
> somewhere there to an invalid file path?<br>
<br>
I checked and config file has only this:<br>
<br>
modparam("tls", "config", "/etc/sip-proxy/tls.cfg")<br>
<br>
and tls.cfg contains:<br>
<br>
# more tls.cfg<br>
[client:default]<br>
verify_certificate = yes<br>
require_certificate = yes<br>
tls_method = TLSv1.2+<br>
private_key = /etc/sip-proxy/certs/key.pem<br>
certificate = /etc/sip-proxy/certs/cert.pem<br>
ca_path = /etc/sip-proxy/certs/ca_list<br>
<br>
[server:default]<br>
verify_certificate = yes<br>
require_certificate = no<br>
server_name = lohi.tutpro.com<br>
tls_method = TLSv1.1+<br>
private_key = /etc/sip-proxy/certs/key.pem<br>
certificate = /etc/sip-proxy/certs/cert.pem<br>
ca_path = /etc/sip-proxy/certs/ca_list<br>
<br>
There is no trace of ca_list anywhere.  Also syslog shows that ca_list<br>
is null:<br>
<br>
Mar 23 13:19:03 lohi /usr/bin/sip-proxy[13983]: INFO: tls [tls_domain.c:322]: ksr_tls_fill_missing(): TLSs<default>: certificate='/etc/sip-proxy/certs/cert.pem'<br>
Mar 23 13:19:03 lohi /usr/bin/sip-proxy[13983]: INFO: tls [tls_domain.c:329]: ksr_tls_fill_missing(): TLSs<default>: ca_list='(null)'<br>
Mar 23 13:19:03 lohi /usr/bin/sip-proxy[13983]: INFO: tls [tls_domain.c:336]: ksr_tls_fill_missing(): TLSs<default>: ca_path='/etc/sip-proxy/certs/ca_list'<br>


<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />You are receiving this because you commented.<br />Reply to this email directly, <a href="https://github.com/kamailio/kamailio/issues/2682#issuecomment-804822963">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/ABO7UZICGSZIFITOUPIONWTTFB2VHANCNFSM4ZLD66AA">unsubscribe</a>.<img src="https://github.com/notifications/beacon/ABO7UZL4NBCBHYI4LO6MYWDTFB2VHA5CNFSM4ZLD66AKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOF74J7MY.gif" height="1" width="1" alt="" /></p>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/kamailio/kamailio/issues/2682#issuecomment-804822963",
"url": "https://github.com/kamailio/kamailio/issues/2682#issuecomment-804822963",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>