<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-family: Calibri, Helvetica, sans-serif; font-size: 10pt;">Hey guys - I'm using the following settings on my Kamailio config:</span></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<table style="box-sizing: border-box; border-collapse: separate; border-spacing: 0px; background-color: rgb(255, 255, 255); font-family: Menlo, "Liberation Mono", Consolas, "DejaVu Sans Mono", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; margin: 0px; width: 1892.22px; left: 10px; font-size: 13px; line-height: 18px; transition: left 450ms ease 0s; color: rgb(51, 51, 51)">
<tbody style="box-sizing: border-box">
<tr style="box-sizing: border-box">
<td style="box-sizing: border-box; padding: 0px 0px 0px 10px; vertical-align: top">
<br>
</td>
</tr>
<tr style="box-sizing: border-box">
<td style="box-sizing: border-box; padding: 0px 10px; vertical-align: top; border-right: 1px solid rgb(240, 240, 240); margin: 0px; max-width: 50px; min-width: 42px; text-align: right; user-select: none; width: 42px; color: rgba(0, 0, 0, 0.3); cursor: pointer; text-decoration: underline">
<span style="box-sizing: border-box; font-weight: normal; user-select: none; text-decoration: underline"></span></td>
<td style="box-sizing: border-box; padding: 0px 0px 0px 10px; vertical-align: top">
modparam("tls", "low_mem_threshold2", 1024) </td>
</tr>
<tr style="box-sizing: border-box">
<td style="box-sizing: border-box; padding: 0px 10px; vertical-align: top; border-right: 1px solid rgb(240, 240, 240); margin: 0px; max-width: 50px; min-width: 42px; text-align: right; user-select: none; width: 42px; color: rgba(0, 0, 0, 0.3); cursor: pointer; text-decoration: underline">
<span style="box-sizing: border-box; font-weight: normal; user-select: none; text-decoration: underline"></span></td>
<td style="box-sizing: border-box; padding: 0px 0px 0px 10px; vertical-align: top">
modparam("tls", "tls_force_run", 1) </td>
</tr>
<tr style="box-sizing: border-box">
<td style="box-sizing: border-box; padding: 0px 10px; vertical-align: top; border-right: 1px solid rgb(240, 240, 240); margin: 0px; max-width: 50px; min-width: 42px; text-align: right; user-select: none; width: 42px; color: rgba(0, 0, 0, 0.3); cursor: pointer; text-decoration: underline">
<span style="box-sizing: border-box; font-weight: normal; user-select: none; text-decoration: underline"></span></td>
<td style="box-sizing: border-box; padding: 0px 0px 0px 10px; vertical-align: top">
modparam("tls", "tls_disable_compression", 1) </td>
</tr>
<tr style="box-sizing: border-box">
<td style="box-sizing: border-box; padding: 0px 10px; vertical-align: top; border-right: 1px solid rgb(240, 240, 240); margin: 0px; max-width: 50px; min-width: 42px; text-align: right; user-select: none; width: 42px; color: rgba(0, 0, 0, 0.3); cursor: pointer; text-decoration: underline">
<span style="box-sizing: border-box; font-weight: normal; user-select: none; text-decoration: underline"></span></td>
<td style="box-sizing: border-box; padding: 0px 0px 0px 10px; vertical-align: top">
modparam("tls", "ssl_max_send_fragment", 4096) </td>
</tr>
<tr style="box-sizing: border-box">
<td style="box-sizing: border-box; padding: 0px 10px; vertical-align: top; border-right: 1px solid rgb(240, 240, 240); margin: 0px; max-width: 50px; min-width: 42px; text-align: right; user-select: none; width: 42px; color: rgba(0, 0, 0, 0.3); cursor: pointer; text-decoration: underline">
<span style="box-sizing: border-box; font-weight: normal; user-select: none; text-decoration: underline"></span></td>
<td style="box-sizing: border-box; padding: 0px 0px 0px 10px; vertical-align: top">
modparam("tls", "renegotiation", 0)<br>
<span style="font-family: Menlo, "Liberation Mono", Consolas, "DejaVu Sans Mono", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; background-color: rgb(255, 255, 255); display: inline !important">modparam("tls", "low_mem_threshold1",
2048)<br>
<span style="font-family: Menlo, "Liberation Mono", Consolas, "DejaVu Sans Mono", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; background-color: rgb(255, 255, 255); display: inline !important">modparam("tls", "require_certificate",
1)</span></span><br>
</td>
</tr>
</tbody>
</table>
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-size: 10pt;">When a client attempts to connect to Kamailio, the server hello it receives does *not* contain the client certificate
<b>request</b>. And I've noticed that kamailio starts with:</span></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-size: 10pt;"><br>
</span></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-size: 10pt; font-family: "Courier New", monospace;">tls [tls_domain.c:694]: set_verification(): TLSs<default>: No client certificate required and no checks performed</span><br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-size: 10pt; font-family: "Courier New", monospace;">tls [tls_domain.c:320]: fill_missing(): TLSs<default>: require_certificate=0</span><br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-family: Calibri, Helvetica, sans-serif; font-size: 10pt;">Complete version output:</span></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-size: 10pt; font-family: "Courier New", monospace;">kamailio 5.1.1 (x86_64/linux)</span><span><br>
</span>
<div><span style="font-size: 10pt; font-family: "Courier New", monospace;">flags: STATS: Off, USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MEM, SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX,
FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLACKLIST, HAVE_RESOLV_RES</span><br>
</div>
<div><span style="font-size: 10pt; font-family: "Courier New", monospace;">ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB</span><br>
</div>
<span style="font-size: 10pt; font-family: "Courier New", monospace;">poll method support: poll, epoll_lt, epoll_et, sigio_rt, select.</span><br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-size: 10pt; font-family: "Courier New", monospace;"><br>
</span></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-size: 10pt; font-family: Calibri, Helvetica, sans-serif;">Any hints?</span></div>
</body>
</html>