<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body>
<p>Hello,</p>
<p>one of the error messages say the certificate authority is
unknown. Is the linphone using tls certificates itself? What kind
of certificate you configured for kamailio )e.g., letsencrypt,
self signed, ...)?</p>
<p>Cheers,<br>
Daniel<br>
</p>
<div class="moz-cite-prefix">On 07.04.21 12:29,
<a class="moz-txt-link-abbreviated" href="mailto:amitsharma@coraltele.com">amitsharma@coraltele.com</a> wrote:<br>
</div>
<blockquote type="cite"
cite="mid:008c01d72b98$d50559c0$7f100d40$@coraltele.com">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<style>@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}div.WordSection1
{page:WordSection1;}</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">Hello Team,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am using Linphone with Kamailio and
facing *SSL handshake failed : X509 - Certificate verification
failed, e.g. CRL, CA or signature check failed* error over *<b>TLS</b>*.<o:p></o:p></p>
<p class="MsoNormal">Following error is coming<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Apr 7 15:54:36 irisivdxcloud
/usr/sbin/kamailio[9089]: ERROR: tls [tls_server.c:1290]:
tls_h_read_f(): destination IP: 172.105.49.156<o:p></o:p></p>
<p class="MsoNormal">Apr 7 15:54:36 irisivdxcloud
/usr/sbin/kamailio[9089]: ERROR: <core>
[core/tcp_read.c:1500]: tcp_read_req(): ERROR: tcp_read_req:
error reading - c: 0x7f2c7f85a2e0 r: 0x7f2c7f85a408 (-1)<o:p></o:p></p>
<p class="MsoNormal">Apr 7 15:54:36 irisivdxcloud
/usr/sbin/kamailio[9036]: WARNING: {1 20 REGISTER ~OkQyvT70a}
sanity [sanity.c:612]: check_cl(): content length header
missing in request<o:p></o:p></p>
<p class="MsoNormal">Apr 7 15:54:40 irisivdxcloud
/usr/sbin/kamailio[9040]: WARNING: {1 20 REGISTER ~OkQyvT70a}
sanity [sanity.c:612]: check_cl(): content length header
missing in request<o:p></o:p></p>
<p class="MsoNormal">Apr 7 15:54:43 irisivdxcloud
/usr/sbin/kamailio[9071]: ERROR: tls [tls_server.c:1283]:
tls_h_read_f(): protocol level error<o:p></o:p></p>
<p class="MsoNormal">Apr 7 15:54:43 irisivdxcloud
/usr/sbin/kamailio[9071]: ERROR: tls [tls_util.h:42]:
tls_err_ret(): TLS accept:error:14094418:SSL
routines:ssl3_read_bytes:tlsv1 alert unknown ca<o:p></o:p></p>
<p class="MsoNormal">Apr 7 15:54:43 irisivdxcloud
/usr/sbin/kamailio[9071]: ERROR: tls [tls_server.c:1287]:
tls_h_read_f(): source IP: 49.36.149.254<o:p></o:p></p>
<p class="MsoNormal">Apr 7 15:54:43 irisivdxcloud
/usr/sbin/kamailio[9071]: ERROR: tls [tls_server.c:1290]:
tls_h_read_f(): destination IP: 172.105.49.156<o:p></o:p></p>
<p class="MsoNormal">Apr 7 15:54:43 irisivdxcloud
/usr/sbin/kamailio[9071]: ERROR: <core>
[core/tcp_read.c:1500]: tcp_read_req(): ERROR: tcp_read_req:
error reading - c: 0x7f2c7f85a2e0 r: 0x7f2c7f85a408 (-1)<o:p></o:p></p>
<p class="MsoNormal">Apr 7 15:54:44 irisivdxcloud
/usr/sbin/kamailio[9042]: WARNING: {1 20 REGISTER ~OkQyvT70a}
sanity [sanity.c:612]: check_cl(): content length header
missing in request<o:p></o:p></p>
<p class="MsoNormal">Apr 7 15:54:44 irisivdxcloud
/usr/sbin/kamailio[9072]: INFO: {1 674 REGISTER
<a class="moz-txt-link-abbreviated" href="mailto:583608109@192.168.1.105">583608109@192.168.1.105</a>} <script>: REGISTRATION CALLED:
740,Count: 0,Contact:
<a class="moz-txt-link-freetext" href="sip:740@117.242.44.49:3668;transport=TCP,Domain">sip:740@117.242.44.49:3668;transport=TCP,Domain</a>: location<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Please suggest, what is this issue all
about.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:gray">Thanks
& Regards,<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:gray">Amit
Sharma<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:gray">(Sr.
Team Leader)<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="color:#1F497D"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><span style="color:gray"> </span><span
style="color:#1F497D"><img style="width:.9083in;height:.6in"
id="Picture_x0020_1"
src="cid:part1.116CE228.8E20CF1F@gmail.com" alt="Copy of
34643416.jpg" class="" width="87" height="58"></span><span
style="color:#1F497D" lang="EN-IN"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:gray"><br>
</span><b><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:gray">(An
ISO 9001:2008 company)</span></b><span
style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:gray"> </span><span
style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:gray">Mobile:
<a href="tel:9891612004" moz-do-not-send="true"><span
style="color:blue">tel:9891612004</span></a></span></b><span
style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:gray">PH:
+91 120 2595870</span></b><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:gray">Ext.:
<a href="tel:870" moz-do-not-send="true"><span
style="color:blue">tel:870</span></a></span></b><span
style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:gray">Email
: <a href="mailto:amitsharma@coraltele.com"
moz-do-not-send="true"><span style="color:blue">amitsharma@coraltele.com</span></a></span></b><span
style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:gray">Web : <a
href="blocked::http://www.coraltele.com"
title="http://www.coraltele.com
blocked::http://www.polycom.com/" moz-do-not-send="true"><b><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:gray">www.coraltele.com</span></b></a></span><span
style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#44546A"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black"><img
style="width:5.075in;height:.25in" id="Picture_x0020_2"
src="cid:part6.ED66FFFE.50AB7992@gmail.com"
alt="https://docs.google.com/uc?export=download&id=0BwYYBqN87-tfM2JiYmhMSFdSZkk&revid=0BwYYBqN87-tfZW5iNExpazJqc01WUDZpOWFXd09SakhuUWJRPQ"
class="" width="487" height="24" border="0"></span><span
style="color:#44546A"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Kamailio (SER) - Users Mailing List
<a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.kamailio.org">sr-users@lists.kamailio.org</a>
<a class="moz-txt-link-freetext" href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a>
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda">www.linkedin.com/in/miconda</a>
Funding: <a class="moz-txt-link-freetext" href="https://www.paypal.me/dcmierla">https://www.paypal.me/dcmierla</a></pre>
</body>
</html>