<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Henning and all,<div class=""><br class=""></div><div class="">I can restart kamailio without error so i think kamailio can access the certs file, am i right?</div><div class=""><br class=""></div><div class="">Next, i can check the tls configuration via some command and result like:</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">openssl s_client -connect <a href="http://mydomain.com:4443" class="">mydomain.com:4443</a></span></div></div><div class=""><br class=""></div><div class="">result is:</div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">CONNECTED(00000003)</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">depth=1 C = US, ST = US, L = HCM, O = <a href="http://mydomain.com" class="">mydomain.com</a>, OU = <a href="http://mydomain.com" class="">mydomain.com</a>, CN = <a href="http://mydomain.com" class="">mydomain.com</a>, emailAddress = <a href="mailto:thanhtruong217@gmail.com" class="">thanhtruong217@gmail.com</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">verify error:num=19:self signed certificate in certificate chain</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">verify return:0</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">---</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Certificate chain</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0 s:/<a href="mailto:C=US/ST=US/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" class="">C=US/ST=US/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> i:/<a href="mailto:C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" class="">C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 1 s:/<a href="mailto:C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" class="">C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> i:/<a href="mailto:C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" class="">C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">---</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Server certificate</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">-----BEGIN CERTIFICATE-----</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class="">xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx</div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">IKqnZKfVhfs=</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">-----END CERTIFICATE-----</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><a href="mailto:subject=/C=US/ST=US/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" class="">subject=/C=US/ST=US/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><a href="mailto:issuer=/C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" class="">issuer=/C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">---</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">No client certificate CA names sent</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">---</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">SSL handshake has read 2890 bytes and written 391 bytes</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">---</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Server public key is 2048 bit</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Secure Renegotiation IS supported</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Compression: NONE</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Expansion: NONE</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">SSL-Session:</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Protocol : TLSv1.2</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Cipher : ECDHE-RSA-AES256-GCM-SHA384</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Session-ID: 047913A6C905B007C53EB31C51CBED00FDF8BBBBC8ACDA79238314C3AF899776</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Session-ID-ctx: </span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Master-Key: 98D20DD5C85389F6BA32F0CADC76789D03BA3534D45F446418120E8358ACE5142FC21C02E0E3E22090A9E5920F8AB835</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Key-Arg : None</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> PSK identity: None</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> PSK identity hint: None</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> SRP username: None</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> TLS session ticket lifetime hint: 7200 (seconds)</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> TLS session ticket:</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0000 - fa 90 a9 99 5e 02 04 26-ae bf ce f4 05 06 87 e0 ....^..&........</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0010 - d5 a7 f2 74 ac 4a 7d 0b-ae ba 53 a4 89 14 95 52 ...t.J}...S....R</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0020 - 68 53 ea 9b e2 1d 23 ae-77 86 6b 74 21 5e 1e 88 hS....#.w.kt!^..</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0030 - 50 75 3f e4 2a 7a 95 63-5a 87 58 b8 ac c1 ae 85 Pu?.*z.cZ.X.....</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0040 - d9 73 3d 4d 5f 27 df 37-37 98 02 15 0c 3c 62 96 .s=M_'.77....<b.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0050 - 50 22 cd 2c e9 b0 aa ba-3e e0 9e a5 65 17 35 3f P".,....>...e.5?</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0060 - d5 2d 37 4a 99 1a 19 42-aa 63 6a 74 8b fe 70 72 .-7J...B.cjt..pr</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0070 - b6 cc 3d e1 b1 f8 da ee-9c 31 db 25 eb 2a 22 f5 ..=......1.%.*".</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0080 - 38 87 13 aa 13 c1 4c c4-f9 1a 83 1c 38 a8 a9 15 8.....L.....8...</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0090 - c4 70 cd 3f e5 0a 5e 5e-13 a3 13 a7 6d 29 0e 70 .p.?..^^....m).p</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 00a0 - fc 09 ee df e0 89 f6 48-29 04 1e 69 65 92 f0 e7 .......H)..ie...</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098); min-height: 14px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Start Time: 1626338959</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Timeout : 300 (sec)</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Verify return code: 19 (self signed certificate in certificate chain)</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">---</span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div><br class=""></div><div>or normal tls port 5061:</div><div><br class=""></div><div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> openssl s_client -connect <a href="http://mydomain.com:5061" class="">mydomain.com:5061</a> -tls1</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">CONNECTED(00000003)</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">depth=1 C = US, ST = US, L = HCM, O = <a href="http://mydomain.com" class="">mydomain.com</a>, OU = <a href="http://mydomain.com" class="">mydomain.com</a>, CN = <a href="http://mydomain.com" class="">mydomain.com</a>, emailAddress = <a href="mailto:thanhtruong217@gmail.com" class="">thanhtruong217@gmail.com</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">verify error:num=19:self signed certificate in certificate chain</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">verify return:0</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">---</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Certificate chain</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0 s:/<a href="mailto:C=US/ST=US/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" class="">C=US/ST=US/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> i:/<a href="mailto:C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" class="">C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 1 s:/<a href="mailto:C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" class="">C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> i:/<a href="mailto:C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" class="">C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">---</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Server certificate</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">-----BEGIN CERTIFICATE-----</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">MIIEVDCCAzygAwIBAgIBATANBgkqhkiG9w0BAQsFADCBtTELMAkGA1UEBhMCVVMx</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class="">xxxxxxxxxx...</div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">IKqnZKfVhfs=</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">-----END CERTIFICATE-----</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><a href="mailto:subject=/C=US/ST=US/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" class="">subject=/C=US/ST=US/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><a href="mailto:issuer=/C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" class="">issuer=/C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">---</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">No client certificate CA names sent</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">---</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">SSL handshake has read 2896 bytes and written 307 bytes</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">---</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-SHA</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Server public key is 2048 bit</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Secure Renegotiation IS supported</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Compression: NONE</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Expansion: NONE</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">SSL-Session:</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Protocol : TLSv1</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Cipher : ECDHE-RSA-AES256-SHA</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Session-ID: EF724C7926D18D0B727709E4D42650D2141EA44771E3FF8B566161F51095B0C7</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Session-ID-ctx: </span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Master-Key: 61C323CD42A4447B4E662958EA4E5F9DE039A4F257342BBAED236E3B811D6052192FEC36CC245D810A847B9E5FFF54C6</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Key-Arg : None</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> PSK identity: None</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> PSK identity hint: None</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> SRP username: None</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> TLS session ticket lifetime hint: 7200 (seconds)</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> TLS session ticket:</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0000 - 45 b4 44 76 46 b2 f5 a5-39 a4 ec 4e 53 22 5c 20 E.DvF...9..NS"\ </span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0010 - d5 a7 f2 74 ac 4a 7d 0b-ae ba 53 a4 89 14 95 52 ...t.J}...S....R</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0020 - fe 69 4e 7a 3e 23 ff 41-62 54 f1 71 f5 a3 a4 3f .iNz>#.AbT.q...?</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0030 - 99 81 5c d9 71 b6 82 be-7e 17 19 a7 d3 55 6a c9 ..\.q...~....Uj.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0040 - 9f 9c da ef ef 35 54 30-6e 60 6f f1 e2 13 6c 95 .....5T0n`o...l.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0050 - 7e 2a 48 7b 07 51 57 2d-7d 69 7a 8a 46 34 9d 32 ~*H{.QW-}iz.F4.2</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0060 - b4 7f 4b a4 61 c6 3a 13-3d 86 af cf 22 be 50 63 ..K.a.:.=...".Pc</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0070 - 93 41 3e 18 d3 37 38 bc-cb b2 83 ea 63 8a 1c c0 .A>..78.....c...</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0080 - 5a a4 ed 35 18 85 17 9d-24 7c 87 25 ff 98 11 eb Z..5....$|.%....</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 0090 - f6 1d 89 41 9b ba a1 18-03 0a 90 90 bd 76 c8 80 ...A.........v..</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 00a0 - 44 1f 3a 8c 99 ac 2f ef-a5 e2 22 a6 58 9a e8 2a D.:.../...".X..*</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098); min-height: 14px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Start Time: 1626339048</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Timeout : 7200 (sec)</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> Verify return code: 19 (self signed certificate in certificate chain)</span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div></div><div><br class=""></div><div><br class=""></div><div>So, I am not sure what is my issue/wrong here. or can you help me to check more?</div><div><br class=""></div><div>Thanks,</div><div>ThanhTruon</div><div><br class=""><blockquote type="cite" class=""><div class="">On Jul 15, 2021, at 15:33, Henning Westerholt <<a href="mailto:hw@skalatan.de" class="">hw@skalatan.de</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="">Hello,<o:p class=""></o:p></span></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class=""><o:p class=""> </o:p></span></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">please format your e-mail only with black – its really hard to read (it might be related to my client, though).<o:p class=""></o:p></span></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""><o:p class=""> </o:p></span></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">Have you already checked the file system access rights to the certs if kamailio can actually read them?<o:p class=""></o:p></span></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""><o:p class=""> </o:p></span></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">Cheers,<o:p class=""></o:p></span></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""><o:p class=""> </o:p></span></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">Henning<o:p class=""></o:p></span></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""><o:p class=""> </o:p></span></div><div class=""><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">--<span class="Apple-converted-space"> </span><o:p class=""></o:p></span></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">Henning Westerholt –<span class="Apple-converted-space"> </span></span><span class=""><a href="https://skalatan.de/blog/" style="color: blue; text-decoration: underline;" class=""><span lang="EN-GB" style="color: rgb(5, 99, 193);" class="">https://skalatan.de/blog/</span></a></span><span lang="EN-GB" class=""><o:p class=""></o:p></span></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">Kamailio services –<span class="Apple-converted-space"> </span></span><span class=""><a href="https://gilawa.com/" style="color: blue; text-decoration: underline;" class=""><span lang="EN-GB" style="color: rgb(5, 99, 193);" class="">https://gilawa.com</span></a></span><span class=""><span lang="EN-GB" class=""><o:p class=""></o:p></span></span></div></div><div style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""><o:p class=""> </o:p></span></div><div class=""><div style="border-style: solid none none; border-top-width: 1pt; border-top-color: rgb(225, 225, 225); padding: 3pt 0cm 0cm;" class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class="">From:</b><span class="Apple-converted-space"> </span>sr-users <<a href="mailto:sr-users-bounces@lists.kamailio.org" class="">sr-users-bounces@lists.kamailio.org</a>><span class="Apple-converted-space"> </span><b class="">On Behalf Of<span class="Apple-converted-space"> </span></b>ThanhTruong<br class=""><b class="">Sent:</b><span class="Apple-converted-space"> </span>Thursday, July 15, 2021 5:09 AM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span>Kamailio (SER) - Users Mailing List <<a href="mailto:sr-users@lists.kamailio.org" class="">sr-users@lists.kamailio.org</a>><br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>Re: [SR-Users] please help to configure tls in kamailio for webrtc client like simpl5<o:p class=""></o:p></div></div></div><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Hello Fred and all,<o:p class=""></o:p></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">I tried some changes, and result bellow.<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">with :<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(52, 188, 38);" class="">[server:default]<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">method =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span>SSLv23</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">verify_certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span></span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(205, 121, 35);" class="">no</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">require_certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span></span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(205, 121, 35);" class="">no</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">private_key =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span>/etc/certs/<a href="http://mydomain.com/key.pem" class="">mydomain.com/key.pem</a><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span>/etc/certs/<a href="http://mydomain.com/cert.pem" class="">mydomain.com/cert.pem</a><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">ca_list =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span>/etc/certs/demoCA/cert.pem<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""> </o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(52, 188, 38);" class="">[client:default]<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">verify_certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span></span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(205, 121, 35);" class="">yes</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">require_certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span></span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(205, 121, 35);" class="">yes</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(94, 52, 255);" class="">~ <o:p class=""></o:p></span></div></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">error log:<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:02:57 ip-172-31-44-170 sbin/kamailio[17590]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:02:57 ip-172-31-44-170 sbin/kamailio[17590]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:02:57 ip-172-31-44-170 sbin/kamailio[17590]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 27.65.214.194<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:02:57 ip-172-31-44-170 sbin/kamailio[17590]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 172.31.44.170<o:p class=""></o:p></span></div></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">With settings:<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(52, 188, 38);" class="">[server:default]<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">method =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span>SSLv23</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">verify_certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span></span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(205, 121, 35);" class="">no</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">require_certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span></span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(205, 121, 35);" class="">no</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">private_key =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span>/etc/certs/<a href="http://mydomain.com/key.pem" class="">mydomain.com/key.pem</a><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span>/etc/certs/<a href="http://mydomain.com/cert.pem" class="">mydomain.com/cert.pem</a><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">ca_list =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span>/etc/certs/demoCA/cert.pem<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""> </o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(52, 188, 38);" class="">[client:default]<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">verify_certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""> </span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(205, 121, 35);" class="">no</span><span style="font-size: 7.5pt; font-family: Monaco, serif;" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">require_certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""> </span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(205, 121, 35);" class="">no</span><span style="font-size: 7.5pt; font-family: Monaco, serif;" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(94, 52, 255);" class="">~ <o:p class=""></o:p></span></div></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">and error log:<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:05:28 ip-172-31-44-170 sbin/kamailio[17648]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:05:28 ip-172-31-44-170 sbin/kamailio[17648]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:05:28 ip-172-31-44-170 sbin/kamailio[17648]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 27.65.214.194<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:05:28 ip-172-31-44-170 sbin/kamailio[17648]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 172.31.44.170<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:05:28 ip-172-31-44-170 sbin/kamailio[17648]: ERROR: <core> [core/tcp_read.c:1493]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7fd64ee4bfc0 r: 0x7fd64ee4c0e8 (-1)<o:p class=""></o:p></span></div></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">and tried:<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(52, 188, 38);" class="">[server:default]<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">method =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span>SSLv23</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">verify_certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span></span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(205, 121, 35);" class="">yes</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">require_certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span></span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(205, 121, 35);" class="">yes</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">private_key =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span>/etc/certs/<a href="http://mydomain.com/key.pem" class="">mydomain.com/key.pem</a><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span>/etc/certs/<a href="http://mydomain.com/cert.pem" class="">mydomain.com/cert.pem</a><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">ca_list =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span>/etc/certs/demoCA/cert.pem<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""> </o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(52, 188, 38);" class="">[client:default]<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">verify_certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span></span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(205, 121, 35);" class="">no</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">require_certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span></span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(205, 121, 35);" class="">no</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">and error log:<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:06:37 ip-172-31-44-170 sbin/kamailio[17703]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:06:37 ip-172-31-44-170 sbin/kamailio[17703]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:06:37 ip-172-31-44-170 sbin/kamailio[17703]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 27.65.214.194<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:06:37 ip-172-31-44-170 sbin/kamailio[17703]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 172.31.44.170<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:06:37 ip-172-31-44-170 sbin/kamailio[17703]: ERROR: <core> [core/tcp_read.c:1493]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f222a018fc0 r: 0x7f222a0190e8 (-1)<o:p class=""></o:p></span></div></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Then, i try with TLSv1+<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""> </o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(52, 188, 38);" class="">[server:default]<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">method =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span>TLSv1+</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">verify_certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span></span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(205, 121, 35);" class="">yes</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">require_certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span></span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(205, 121, 35);" class="">yes</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">private_key =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span>/etc/certs/<a href="http://mydomain.com/key.pem" class="">mydomain.com/key.pem</a><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span>/etc/certs/<a href="http://mydomain.com/cert.pem" class="">mydomain.com/cert.pem</a><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">ca_list =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span>/etc/certs/demoCA/cert.pem<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""> </o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(52, 188, 38);" class="">[client:default]<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">verify_certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span></span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(205, 121, 35);" class="">no</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">require_certificate =</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(195, 55, 32);" class=""><span class="Apple-converted-space"> </span></span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(205, 121, 35);" class="">no</span><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class=""><o:p class=""></o:p></span></div></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">and log is:<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:08:33 ip-172-31-44-170 sbin/kamailio[17826]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:08:33 ip-172-31-44-170 sbin/kamailio[17826]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:08:33 ip-172-31-44-170 sbin/kamailio[17826]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 27.65.214.194<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:08:33 ip-172-31-44-170 sbin/kamailio[17826]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 172.31.44.170<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 7.5pt; font-family: Monaco, serif; color: rgb(244, 244, 244);" class="">Jul 15 03:08:33 ip-172-31-44-170 sbin/kamailio[17826]: ERROR: <core> [core/tcp_read.c:1493]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f9fd21cefc0 r: 0x7f9fd21cf0e8 (-1)<o:p class=""></o:p></span></div></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">I am sorry to border you and all, but i dont know how to get it works, please suggest. <o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">thank you so much.<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><br class=""><br class=""><o:p class=""></o:p></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;" class=""><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">On Jul 15, 2021, at 01:10, Fred Posner <<a href="mailto:fred@palner.com" style="color: blue; text-decoration: underline;" class="">fred@palner.com</a>> wrote:<o:p class=""></o:p></div></div><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div class=""><div class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">On 7/14/21 2:04 PM, ThanhTruong wrote:<br class=""><br class=""><o:p class=""></o:p></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;" class=""><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">verify_certificate =yes<br class="">require_certificate =yes<o:p class=""></o:p></div></blockquote><div style="margin: 0cm 0cm 0cm 35.4pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><br class="">Change both of those to no in your case.<br class=""><br class="">--<span class="Apple-converted-space"> </span><br class="">Fred Posner --<span class="Apple-converted-space"> </span><a href="http://www.palner.com/" style="color: blue; text-decoration: underline;" class="">www.palner.com</a><br class="">Matrix: @fred:<a href="http://matrix.lod.com/" style="color: blue; text-decoration: underline;" class="">matrix.lod.com</a><br class=""><br class="">__________________________________________________________<br class="">Kamailio - Users Mailing List - Non Commercial Discussions<br class=""> *<span class="Apple-converted-space"> </span><a href="mailto:sr-users@lists.kamailio.org" style="color: blue; text-decoration: underline;" class="">sr-users@lists.kamailio.org</a><br class="">Important: keep the mailing list in the recipients, do not reply only to the sender!<br class="">Edit mailing list options or unsubscribe:<br class=""> *<span class="Apple-converted-space"> </span><a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" style="color: blue; text-decoration: underline;" class="">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a></div></div></div></blockquote></div></div></div></div></blockquote></div><br class=""></div></body></html>