<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""></blockquote><font color="#5856d6" class=""><span style="caret-color: rgb(88, 86, 214);" class=""><br class=""></span></font>Dear,<br class=""><font color="#5856d6" class=""><span style="caret-color: rgb(88, 86, 214);" class=""><br class=""></span></font>I am trying to make a test to see how can webrtc work in kamailio and tls.<br class=""><font color="#5856d6" class=""><span style="caret-color: rgb(88, 86, 214);" class=""><br class=""></span></font>I was try some link :<br class=""><a href="https://github.com/havfo/WEBRTC-to-SIP" rel="nofollow noreferrer" class="" style="font-family: inherit; font-style: inherit; font-variant-caps: inherit; orphans: 2; widows: 2; margin: 0px; padding: 0px; border: 0px; font-variant-ligatures: inherit; font-variant-position: inherit; font-variant-numeric: inherit; font-variant-alternates: inherit; font-variant-east-asian: inherit; font-stretch: inherit; line-height: inherit; vertical-align: baseline; box-sizing: inherit; color: var(--theme-link-color-hover); cursor: pointer;"><span class="Apple-tab-span" style="white-space: pre;"> </span>1</a>. <font color="rgba(0, 0, 0, 0)" face="inherit" class=""><span style="font-style: inherit; font-variant-caps: inherit; orphans: 2; widows: 2; font-variant-ligatures: inherit; font-variant-position: inherit; font-variant-numeric: inherit; font-variant-alternates: inherit; font-variant-east-asian: inherit; font-stretch: inherit; line-height: inherit; box-sizing: inherit; cursor: pointer;" class=""><a href="https://github.com/havfo/WEBRTC-to-SIP" class="">https://github.com/havfo/WEBRTC-to-SIP</a></span></font><br class=""><a href="https://telecom.altanai.com/2018/09/04/kamailio-webrtc-sip-server/" rel="nofollow noreferrer" class="" style="font-family: inherit; font-style: inherit; font-variant-caps: inherit; font-size: 15px; orphans: 2; widows: 2; margin: 0px; padding: 0px; border: 0px; font-variant-ligatures: inherit; font-variant-position: inherit; font-variant-numeric: inherit; font-variant-alternates: inherit; font-variant-east-asian: inherit; font-stretch: inherit; line-height: inherit; vertical-align: baseline; box-sizing: inherit; color: var(--theme-link-color); cursor: pointer;"><span class="Apple-tab-span" style="white-space:pre"> </span>2. https://telecom.altanai.com/2018/09/04/kamailio-webrtc-sip-server/</a><br class=""><font color="#5856d6" class=""><span style="caret-color: rgb(88, 86, 214);" class=""><br class=""></span></font>And Generate CA from the link:<br class=""><font color="#5856d6" class=""><span style="caret-color: rgb(88, 86, 214);" class=""><br class=""></span></font><a href="https://www.kamailio.org/dokuwiki/doku.php/tls:create-certificates" class="">https://www.kamailio.org/dokuwiki/doku.php/tls:create-certificates</a><br class=""><font color="#5856d6" class=""><span style="caret-color: rgb(88, 86, 214);" class=""><br class=""></span></font>Then, I tried to login with simpl5 and i got the message back <br class=""><i class="" style="color: rgb(51, 51, 51); font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 13px; font-variant-ligatures: normal; orphans: 2; text-align: center; widows: 2; background-color: rgb(245, 245, 245);">Disconnected: <b class="">Failed to connet to the server</b></i><br class=""><font color="#5856d6" class=""><span style="caret-color: rgb(88, 86, 214);" class=""><br class=""></span></font>I do not know how can i fix that issue, look like TLS configure has issue with that. the log is showing something like<br class=""><font color="#5856d6" class=""><span style="caret-color: rgb(88, 86, 214);" class=""><br class=""></span></font><span style="color: rgb(244, 244, 244); font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098);" class="">Jul 14 17:56:16 ip-172-31-44-170 sbin/kamailio[13813]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error</span><br class=""><span style="color: rgb(244, 244, 244); font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098);" class="">Jul 14 17:56:16 ip-172-31-44-170 sbin/kamailio[13813]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown</span><br class=""><span style="color: rgb(244, 244, 244); font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098);" class="">Jul 14 17:56:16 ip-172-31-44-170 sbin/kamailio[13813]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 27.65.214.194</span><br class=""><span style="color: rgb(244, 244, 244); font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098);" class="">Jul 14 17:56:16 ip-172-31-44-170 sbin/kamailio[13813]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 172.31.44.170</span><br class=""><span style="color: rgb(244, 244, 244); font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098);" class="">Jul 14 17:56:16 ip-172-31-44-170 sbin/kamailio[13813]: ERROR: <core> [core/tcp_read.c:1493]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f4233c60fc0 r: 0x7f4233c610e8 (-1)</span><br class=""><font color="#5856d6" class=""><br class=""><span style="caret-color: rgb(88, 86, 214);" class=""><br class=""></span></font>My tls.cfg is :<br class=""><font color="#5856d6" class=""><span style="caret-color: rgb(88, 86, 214);" class=""><br class=""></span></font><span style="color: rgb(52, 188, 38); font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098);" class="">[server:default]</span><br class=""><span class="" style="color: rgb(244, 244, 244); font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures;">method =</span><span class="" style="font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures; color: rgb(195, 55, 32);"> SSLv23</span><br class=""><span class="" style="color: rgb(244, 244, 244); font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures;">verify_certificate =</span><span class="" style="font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures; color: rgb(195, 55, 32);"> </span><span class="" style="font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures; color: rgb(205, 121, 35);">yes</span><br class=""><span class="" style="color: rgb(244, 244, 244); font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures;">require_certificate =</span><span class="" style="font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures; color: rgb(195, 55, 32);"> </span><span class="" style="font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures; color: rgb(205, 121, 35);">yes</span><br class=""><span class="" style="font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures; color: rgb(244, 244, 244);">private_key =</span><span class="" style="color: rgb(195, 55, 32); font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures;"> /etc/certs/my.domain/key.pem</span><br class=""><span class="" style="font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures; color: rgb(244, 244, 244);">certificate =</span><span class="" style="color: rgb(195, 55, 32); font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures;"> /etc/certs/my.domain/cert.pem</span><br class=""><span class="" style="font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures; color: rgb(244, 244, 244);">ca_list =</span><span class="" style="color: rgb(195, 55, 32); font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures;"> /etc/certs/demoCA/cert.pem</span><br class=""><font color="#f4f4f4" face="Monaco" size="1" class=""><span style="caret-color: rgb(244, 244, 244);" class=""><br class=""></span></font><blockquote type="cite" class=""><meta http-equiv="Content-Type" content="text/html; charset=us-ascii" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class=""><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098); min-height: 14px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span></div></div></div></blockquote><span style="color: rgb(52, 188, 38); font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098);" class="">[client:default]</span><br class=""><span class="" style="color: rgb(244, 244, 244); font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures;">verify_certificate =</span><span class="" style="font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures; color: rgb(195, 55, 32);"> </span><span class="" style="font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures; color: rgb(205, 121, 35);">yes</span><br class=""><span class="" style="color: rgb(244, 244, 244); font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures;">require_certificate =</span><span class="" style="font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures; color: rgb(195, 55, 32);"> </span><span class="" style="font-family: Monaco; font-size: 10px; background-color: rgba(0, 0, 0, 0.85098); font-variant-ligatures: no-common-ligatures; color: rgb(205, 121, 35);">yes</span><br class=""><font color="#5856d6" class=""><span style="caret-color: rgb(88, 86, 214);" class=""><br class=""></span></font>Please help me to register sipml5 or how can i create CA for TLS in kamailio to use with webrtc.<br class=""><font color="#5856d6" class=""><span style="caret-color: rgb(88, 86, 214);" class=""><br class=""></span></font>Thank all.<br class=""><font color="#5856d6" class=""><br class=""><br class=""><br class=""><br class=""><br class=""><span style="caret-color: rgb(88, 86, 214);" class=""><br class=""></span></font><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class=""><br class=""></div></div></div><br class=""></body></html>