<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1258">
</head>
<body>
<p>Hello,</p>
<p><br>
</p>
<p>if the certificates are deployed, be sure that the process
running kamailio has privileges to read them.</p>
<p><br>
</p>
<p>You can set:</p>
<p><br>
</p>
<p>debug=3</p>
<p><br>
</p>
<p>in kamailio.cfg and then run again kamailio, you should see many
DEBUG messages, many from tls module that should give more hints
about what happens there.</p>
<p><br>
</p>
<p>Cheers,<br>
Daniel</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 08.03.21 14:01, Daniel Hermann N'don
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:MWHPR05MB291169566E5F8B351DC78FEF81939@MWHPR05MB2911.namprd05.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1258">
<style type="text/css" style="display:none;">P {margin-top:0;margin-bottom:0;}</style>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255,
255, 255);">
Hi guys, </div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255,
255, 255);">
<div>I am a beginner in kamailio technology.</div>
<div>I want to use kamailio in secure mode with TLS.</div>
But when I try to connect via TLS, I get this error in terminal:<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255,
255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255,
255, 255);">
<p class="p1" style="margin: 0px; font: 24px "Andale
Mono"; color: rgb(47, 255, 18); background-color: rgba(0,
0, 0, 0.9);">
<span class="s1"
style="font-variant-ligatures:no-common-ligatures">Mar 08
12:29:36 KAMAILIO5 /usr/sbin/</span><span class="s2"
style="font-variant-ligatures: no-common-ligatures; color:
rgb(180, 36, 25);">kamailio</span><span class="s1"
style="font-variant-ligatures:no-common-ligatures">[1627]:
ERROR: <core> [core/tcp_read.c:1512]: tcp_read_req():
ERROR: tcp_read_req: error reading - c: 0x7f6d71a82800 r:
0x7f6d71a828e8 (-1)</span></p>
<p class="p1" style="margin: 0px; font: 24px "Andale
Mono"; color: rgb(47, 255, 18); background-color: rgba(0,
0, 0, 0.9);">
<span class="s1"
style="font-variant-ligatures:no-common-ligatures">Mar 08
12:29:44 KAMAILIO5 /usr/sbin/</span><span class="s2"
style="font-variant-ligatures: no-common-ligatures; color:
rgb(180, 36, 25);">kamailio</span><span class="s1"
style="font-variant-ligatures:no-common-ligatures">[1629]:
ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS
accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3
alert certificate unknown</span></p>
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255,
255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255,
255, 255);">
tls.cfg :</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255,
255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255,
255, 255);">
<div style="color: rgb(212, 212, 212); background-color: rgb(30,
30, 30); font-family: Menlo, Monaco, "Courier New",
monospace; font-weight: normal; font-size: 12px; line-height:
18px;">
<span><span>[server:</span><span style="color: rgb(197, 134,
192);">default</span><span>]</span></span>
<div><span style="color: rgb(156, 220, 254);">method</span><span> =
</span><span style="color: rgb(86, 156, 214);">TLSv1</span><span>.</span><span
style="color: rgb(181, 206, 168);">2</span><span>+</span></div>
<div><span>verify_certificate = </span><span style="color:
rgb(86, 156, 214);">no</span></div>
<div><span>require_certificate = </span><span style="color:
rgb(86, 156, 214);">no</span></div>
<div><span>private_key = /etc/certs/kamailio/kamailio-key.pem</span></div>
<div><span>certificate = /etc/certs/kamailio/kamailio-cert.pem</span></div>
<span><span>ca_list = /etc/certs/demoCA/kamailio-cert.pem</span></span></div>
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255,
255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255,
255, 255);">
I followed this tutorial to generate the ssl keys: </div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255,
255, 255);">
<a
href="http://www.kamailio.net/dokuwiki/doku.php/tls:create-certificates"
id="LPlnk905029" moz-do-not-send="true">http://www.kamailio.net/dokuwiki/doku.php/tls:create-certificates</a><br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255,
255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255,
255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255,
255, 255);">
Can someone please help me?<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Kamailio (SER) - Users Mailing List
<a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.kamailio.org">sr-users@lists.kamailio.org</a>
<a class="moz-txt-link-freetext" href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a>
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda">www.linkedin.com/in/miconda</a>
Funding: <a class="moz-txt-link-freetext" href="https://www.paypal.me/dcmierla">https://www.paypal.me/dcmierla</a></pre>
</body>
</html>