<div dir="auto">Back when I did my first TLS, I did it with </div><div dir="auto"><br></div><div dir="auto"><div><a href="https://www.fredposner.com/1836/kamailio-tls-and-letsencrypt/">https://www.fredposner.com/1836/kamailio-tls-and-letsencrypt/</a></div><br></div><div dir="auto">It worked for me on the first try.</div><div dir="auto"><br></div><div dir="auto">Maybe give it a try.</div><div dir="auto"><br></div><div dir="auto">David</div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, 15 Jul 2021 at 11:02, ThanhTruong <<a href="mailto:thanhtruong217@gmail.com">thanhtruong217@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-color:rgb(204,204,204)"><div style="word-wrap:break-word;line-break:after-white-space">Hi Henning and all,<div><br></div><div>I can restart kamailio without error so i think kamailio can access the certs file, am i right?</div><div><br></div><div>Next, i can check the tls configuration via some command  and result like:</div><div><br></div><div><br></div><div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">openssl s_client -connect <a href="http://mydomain.com:4443" target="_blank" style="font-family:Monaco">mydomain.com:4443</a></span></div></div><div><br></div><div>result is:</div><div><br></div><div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">CONNECTED(00000003)</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">depth=1 C = US, ST = US, L = HCM, O = <a href="http://mydomain.com" target="_blank" style="font-family:Monaco">mydomain.com</a>, OU = <a href="http://mydomain.com" target="_blank" style="font-family:Monaco">mydomain.com</a>, CN = <a href="http://mydomain.com" target="_blank" style="font-family:Monaco">mydomain.com</a>, emailAddress = <a href="mailto:thanhtruong217@gmail.com" target="_blank" style="font-family:Monaco">thanhtruong217@gmail.com</a></span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">verify error:num=19:self signed certificate in certificate chain</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">verify return:0</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">---</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">Certificate chain</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco"> 0 s:/<a href="mailto:C=US/ST=US/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" target="_blank" style="font-family:Monaco">C=US/ST=US/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">   i:/<a href="mailto:C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" target="_blank" style="font-family:Monaco">C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco"> 1 s:/<a href="mailto:C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" target="_blank" style="font-family:Monaco">C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">   i:/<a href="mailto:C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" target="_blank" style="font-family:Monaco">C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">---</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">Server certificate</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">-----BEGIN CERTIFICATE-----</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)">xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx</div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">IKqnZKfVhfs=</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">-----END CERTIFICATE-----</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco"><a href="mailto:subject=/C=US/ST=US/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" target="_blank" style="font-family:Monaco">subject=/C=US/ST=US/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco"><a href="mailto:issuer=/C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" target="_blank" style="font-family:Monaco">issuer=/C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">---</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">No client certificate CA names sent</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">---</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">SSL handshake has read 2890 bytes and written 391 bytes</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">---</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">Server public key is 2048 bit</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">Secure Renegotiation IS supported</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">Compression: NONE</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">Expansion: NONE</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">SSL-Session:</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Protocol  : TLSv1.2</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Cipher    : ECDHE-RSA-AES256-GCM-SHA384</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Session-ID: 047913A6C905B007C53EB31C51CBED00FDF8BBBBC8ACDA79238314C3AF899776</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Session-ID-ctx: </span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Master-Key: 98D20DD5C85389F6BA32F0CADC76789D03BA3534D45F446418120E8358ACE5142FC21C02E0E3E22090A9E5920F8AB835</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Key-Arg   : None</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    PSK identity: None</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    PSK identity hint: None</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    SRP username: None</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    TLS session ticket lifetime hint: 7200 (seconds)</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    TLS session ticket:</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0000 - fa 90 a9 99 5e 02 04 26-ae bf ce f4 05 06 87 e0   ....^..&........</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0010 - d5 a7 f2 74 ac 4a 7d 0b-ae ba 53 a4 89 14 95 52   ...t.J}...S....R</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0020 - 68 53 ea 9b e2 1d 23 ae-77 86 6b 74 21 5e 1e 88   hS....#.w.kt!^..</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0030 - 50 75 3f e4 2a 7a 95 63-5a 87 58 b8 ac c1 ae 85   Pu?.*z.cZ.X.....</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0040 - d9 73 3d 4d 5f 27 df 37-37 98 02 15 0c 3c 62 96   .s=M_'.77....<b.</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0050 - 50 22 cd 2c e9 b0 aa ba-3e e0 9e a5 65 17 35 3f   P".,....>...e.5?</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0060 - d5 2d 37 4a 99 1a 19 42-aa 63 6a 74 8b fe 70 72   .-7J...B.cjt..pr</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0070 - b6 cc 3d e1 b1 f8 da ee-9c 31 db 25 eb 2a 22 f5   ..=......1.%.*".</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0080 - 38 87 13 aa 13 c1 4c c4-f9 1a 83 1c 38 a8 a9 15   8.....L.....8...</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0090 - c4 70 cd 3f e5 0a 5e 5e-13 a3 13 a7 6d 29 0e 70   .p.?..^^....m).p</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    00a0 - fc 09 ee df e0 89 f6 48-29 04 1e 69 65 92 f0 e7   .......H)..ie...</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;min-height:14px;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco"></span><br></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Start Time: 1626338959</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Timeout   : 300 (sec)</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Verify return code: 19 (self signed certificate in certificate chain)</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">---</span></div><div><span style="font-variant-ligatures:no-common-ligatures"><br></span></div><div><br></div><div>or normal tls port 5061:</div><div><br></div><div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco"> openssl s_client -connect <a href="http://mydomain.com:5061" target="_blank" style="font-family:Monaco">mydomain.com:5061</a> -tls1</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">CONNECTED(00000003)</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">depth=1 C = US, ST = US, L = HCM, O = <a href="http://mydomain.com" target="_blank" style="font-family:Monaco">mydomain.com</a>, OU = <a href="http://mydomain.com" target="_blank" style="font-family:Monaco">mydomain.com</a>, CN = <a href="http://mydomain.com" target="_blank" style="font-family:Monaco">mydomain.com</a>, emailAddress = <a href="mailto:thanhtruong217@gmail.com" target="_blank" style="font-family:Monaco">thanhtruong217@gmail.com</a></span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">verify error:num=19:self signed certificate in certificate chain</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">verify return:0</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">---</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">Certificate chain</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco"> 0 s:/<a href="mailto:C=US/ST=US/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" target="_blank" style="font-family:Monaco">C=US/ST=US/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">   i:/<a href="mailto:C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" target="_blank" style="font-family:Monaco">C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco"> 1 s:/<a href="mailto:C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" target="_blank" style="font-family:Monaco">C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">   i:/<a href="mailto:C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" target="_blank" style="font-family:Monaco">C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">---</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">Server certificate</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">-----BEGIN CERTIFICATE-----</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">MIIEVDCCAzygAwIBAgIBATANBgkqhkiG9w0BAQsFADCBtTELMAkGA1UEBhMCVVMx</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)">xxxxxxxxxx...</div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">IKqnZKfVhfs=</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">-----END CERTIFICATE-----</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco"><a href="mailto:subject=/C=US/ST=US/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" target="_blank" style="font-family:Monaco">subject=/C=US/ST=US/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco"><a href="mailto:issuer=/C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com" target="_blank" style="font-family:Monaco">issuer=/C=US/ST=US/L=HCM/O=mydomain.com/OU=mydomain.com/CN=mydomain.com/emailAddress=thanhtruong217@gmail.com</a></span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">---</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">No client certificate CA names sent</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">---</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">SSL handshake has read 2896 bytes and written 307 bytes</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">---</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-SHA</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">Server public key is 2048 bit</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">Secure Renegotiation IS supported</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">Compression: NONE</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">Expansion: NONE</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">SSL-Session:</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Protocol  : TLSv1</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Cipher    : ECDHE-RSA-AES256-SHA</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Session-ID: EF724C7926D18D0B727709E4D42650D2141EA44771E3FF8B566161F51095B0C7</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Session-ID-ctx: </span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Master-Key: 61C323CD42A4447B4E662958EA4E5F9DE039A4F257342BBAED236E3B811D6052192FEC36CC245D810A847B9E5FFF54C6</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Key-Arg   : None</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    PSK identity: None</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    PSK identity hint: None</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    SRP username: None</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    TLS session ticket lifetime hint: 7200 (seconds)</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    TLS session ticket:</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0000 - 45 b4 44 76 46 b2 f5 a5-39 a4 ec 4e 53 22 5c 20   E.DvF...9..NS"\ </span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0010 - d5 a7 f2 74 ac 4a 7d 0b-ae ba 53 a4 89 14 95 52   ...t.J}...S....R</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0020 - fe 69 4e 7a 3e 23 ff 41-62 54 f1 71 f5 a3 a4 3f   .iNz>#.AbT.q...?</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0030 - 99 81 5c d9 71 b6 82 be-7e 17 19 a7 d3 55 6a c9   ..\.q...~....Uj.</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0040 - 9f 9c da ef ef 35 54 30-6e 60 6f f1 e2 13 6c 95   .....5T0n`o...l.</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0050 - 7e 2a 48 7b 07 51 57 2d-7d 69 7a 8a 46 34 9d 32   ~*H{.QW-}iz.F4.2</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0060 - b4 7f 4b a4 61 c6 3a 13-3d 86 af cf 22 be 50 63   ..K.a.:.=...".Pc</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0070 - 93 41 3e 18 d3 37 38 bc-cb b2 83 ea 63 8a 1c c0   .A>..78.....c...</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0080 - 5a a4 ed 35 18 85 17 9d-24 7c 87 25 ff 98 11 eb   Z..5....$|.%....</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    0090 - f6 1d 89 41 9b ba a1 18-03 0a 90 90 bd 76 c8 80   ...A.........v..</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    00a0 - 44 1f 3a 8c 99 ac 2f ef-a5 e2 22 a6 58 9a e8 2a   D.:.../...".X..*</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;min-height:14px;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco"></span><br></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Start Time: 1626339048</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Timeout   : 7200 (sec)</span></div><div style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;background-color:rgba(0,0,0,0.85);color:rgb(244,244,244)"><span style="font-variant-ligatures:no-common-ligatures;font-family:Monaco">    Verify return code: 19 (self signed certificate in certificate chain)</span></div><div><span style="font-variant-ligatures:no-common-ligatures"><br></span></div></div><div><br></div><div><br></div><div>So, I am not sure what is my issue/wrong here. or can you help me to check more?</div><div><br></div><div>Thanks,</div><div>ThanhTruon</div><div><br><blockquote type="cite"><div>On Jul 15, 2021, at 15:33, Henning Westerholt <<a href="mailto:hw@skalatan.de" target="_blank">hw@skalatan.de</a>> wrote:</div><br><div><div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><div style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-family:Calibri,sans-serif">Hello,<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></span></div><div style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></span></div><div style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-family:Calibri,sans-serif">please format your e-mail only with black – its really hard to read (it might be related to my client, though).<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></span></div><div style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></span></div><div style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-family:Calibri,sans-serif">Have you already checked the file system access rights to the certs if kamailio can actually read them?<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></span></div><div style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></span></div><div style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-family:Calibri,sans-serif">Cheers,<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></span></div><div style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></span></div><div style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-family:Calibri,sans-serif">Henning<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></span></div><div style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></span></div><div style="font-family:Helvetica"><div style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-family:Calibri,sans-serif">--<span style="font-family:Calibri,sans-serif"> </span><u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></span></div><div style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-family:Calibri,sans-serif">Henning Westerholt –<span style="font-family:Calibri,sans-serif"> </span></span><span style="font-family:Calibri,sans-serif"><a href="https://skalatan.de/blog/" style="text-decoration:underline;font-family:Calibri,sans-serif;color:blue" target="_blank"><span lang="EN-GB" style="font-family:Calibri,sans-serif;color:rgb(5,99,193)">https://skalatan.de/blog/</span></a></span><span lang="EN-GB" style="font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></span></div><div style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-family:Calibri,sans-serif">Kamailio services –<span style="font-family:Calibri,sans-serif"> </span></span><span style="font-family:Calibri,sans-serif"><a href="https://gilawa.com/" style="text-decoration:underline;font-family:Calibri,sans-serif;color:blue" target="_blank"><span lang="EN-GB" style="font-family:Calibri,sans-serif;color:rgb(5,99,193)">https://gilawa.com</span></a></span><span style="font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></span></span></div></div><div style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></span></div><div style="font-family:Helvetica"><div style="border-style:solid none none;border-top-width:1pt;padding:3pt 0cm 0cm;font-family:Helvetica;border-top-color:rgb(225,225,225)"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><b style="font-family:Calibri,sans-serif">From:</b><span style="font-family:Calibri,sans-serif"> </span>sr-users <<a href="mailto:sr-users-bounces@lists.kamailio.org" target="_blank" style="font-family:Calibri,sans-serif">sr-users-bounces@lists.kamailio.org</a>><span style="font-family:Calibri,sans-serif"> </span><b style="font-family:Calibri,sans-serif">On Behalf Of<span style="font-family:Calibri,sans-serif"> </span></b>ThanhTruong<br><b style="font-family:Calibri,sans-serif">Sent:</b><span style="font-family:Calibri,sans-serif"> </span>Thursday, July 15, 2021 5:09 AM<br><b style="font-family:Calibri,sans-serif">To:</b><span style="font-family:Calibri,sans-serif"> </span>Kamailio (SER) - Users Mailing List <<a href="mailto:sr-users@lists.kamailio.org" target="_blank" style="font-family:Calibri,sans-serif">sr-users@lists.kamailio.org</a>><br><b style="font-family:Calibri,sans-serif">Subject:</b><span style="font-family:Calibri,sans-serif"> </span>Re: [SR-Users] please help to configure tls in kamailio for webrtc client like simpl5<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div></div></div><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif">Hello Fred and all,<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif">I tried some changes, and result bellow.<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif">with :<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(52,188,38)">[server:default]<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">method =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span>SSLv23</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">verify_certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span></span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(205,121,35)">no</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">require_certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span></span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(205,121,35)">no</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">private_key =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span>/etc/certs/<a href="http://mydomain.com/key.pem" target="_blank" style="font-family:Monaco,serif">mydomain.com/key.pem</a><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span>/etc/certs/<a href="http://mydomain.com/cert.pem" target="_blank" style="font-family:Monaco,serif">mydomain.com/cert.pem</a><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">ca_list =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span>/etc/certs/demoCA/cert.pem<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u> <u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(52,188,38)">[client:default]<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">verify_certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span></span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(205,121,35)">yes</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">require_certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span></span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(205,121,35)">yes</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(94,52,255)">~                           <u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif">error log:<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:02:57 ip-172-31-44-170 sbin/kamailio[17590]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:02:57 ip-172-31-44-170 sbin/kamailio[17590]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:02:57 ip-172-31-44-170 sbin/kamailio[17590]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 27.65.214.194<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:02:57 ip-172-31-44-170 sbin/kamailio[17590]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 172.31.44.170<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif">With settings:<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(52,188,38)">[server:default]<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">method =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span>SSLv23</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">verify_certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span></span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(205,121,35)">no</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">require_certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span></span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(205,121,35)">no</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">private_key =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span>/etc/certs/<a href="http://mydomain.com/key.pem" target="_blank" style="font-family:Monaco,serif">mydomain.com/key.pem</a><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span>/etc/certs/<a href="http://mydomain.com/cert.pem" target="_blank" style="font-family:Monaco,serif">mydomain.com/cert.pem</a><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">ca_list =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span>/etc/certs/demoCA/cert.pem<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u> <u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(52,188,38)">[client:default]<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">verify_certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"> </span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(205,121,35)">no</span><span style="font-size:7.5pt;font-family:Monaco,serif"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">require_certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"> </span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(205,121,35)">no</span><span style="font-size:7.5pt;font-family:Monaco,serif"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(94,52,255)">~                           <u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif">and error log:<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:05:28 ip-172-31-44-170 sbin/kamailio[17648]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:05:28 ip-172-31-44-170 sbin/kamailio[17648]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:05:28 ip-172-31-44-170 sbin/kamailio[17648]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 27.65.214.194<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:05:28 ip-172-31-44-170 sbin/kamailio[17648]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 172.31.44.170<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:05:28 ip-172-31-44-170 sbin/kamailio[17648]: ERROR: <core> [core/tcp_read.c:1493]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7fd64ee4bfc0 r: 0x7fd64ee4c0e8 (-1)<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif">and tried:<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(52,188,38)">[server:default]<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">method =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span>SSLv23</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">verify_certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span></span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(205,121,35)">yes</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">require_certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span></span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(205,121,35)">yes</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">private_key =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span>/etc/certs/<a href="http://mydomain.com/key.pem" target="_blank" style="font-family:Monaco,serif">mydomain.com/key.pem</a><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span>/etc/certs/<a href="http://mydomain.com/cert.pem" target="_blank" style="font-family:Monaco,serif">mydomain.com/cert.pem</a><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">ca_list =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span>/etc/certs/demoCA/cert.pem<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u> <u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(52,188,38)">[client:default]<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">verify_certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span></span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(205,121,35)">no</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">require_certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span></span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(205,121,35)">no</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif">and error log:<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:06:37 ip-172-31-44-170 sbin/kamailio[17703]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:06:37 ip-172-31-44-170 sbin/kamailio[17703]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:06:37 ip-172-31-44-170 sbin/kamailio[17703]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 27.65.214.194<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:06:37 ip-172-31-44-170 sbin/kamailio[17703]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 172.31.44.170<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:06:37 ip-172-31-44-170 sbin/kamailio[17703]: ERROR: <core> [core/tcp_read.c:1493]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f222a018fc0 r: 0x7f222a0190e8 (-1)<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif">Then, i try with TLSv1+<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u> <u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(52,188,38)">[server:default]<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">method =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span>TLSv1+</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">verify_certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span></span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(205,121,35)">yes</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">require_certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span></span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(205,121,35)">yes</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">private_key =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span>/etc/certs/<a href="http://mydomain.com/key.pem" target="_blank" style="font-family:Monaco,serif">mydomain.com/key.pem</a><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span>/etc/certs/<a href="http://mydomain.com/cert.pem" target="_blank" style="font-family:Monaco,serif">mydomain.com/cert.pem</a><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div></div></div></div></div></blockquote></div></div></div><div style="word-wrap:break-word;line-break:after-white-space"><div><div><blockquote type="cite"><div><div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><div style="font-family:Helvetica"><div style="font-family:Helvetica"><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">ca_list =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span>/etc/certs/demoCA/cert.pem<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u> <u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(52,188,38)">[client:default]<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">verify_certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span></span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(205,121,35)">no</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">require_certificate =</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(195,55,32)"><span style="font-family:Monaco,serif"> </span></span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(205,121,35)">no</span><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)"><u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif">and log is:<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:08:33 ip-172-31-44-170 sbin/kamailio[17826]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:08:33 ip-172-31-44-170 sbin/kamailio[17826]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:08:33 ip-172-31-44-170 sbin/kamailio[17826]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 27.65.214.194<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:08:33 ip-172-31-44-170 sbin/kamailio[17826]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 172.31.44.170<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:7.5pt;font-family:Monaco,serif;color:rgb(244,244,244)">Jul 15 03:08:33 ip-172-31-44-170 sbin/kamailio[17826]: ERROR: <core> [core/tcp_read.c:1493]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f9fd21cefc0 r: 0x7f9fd21cf0e8 (-1)<u style="font-family:Monaco,serif"></u><u style="font-family:Monaco,serif"></u></span></div></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif">I am sorry to border you and all, but i dont know how to get it works, please suggest. <u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif">thank you so much.<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div></div><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><br><br><u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div><blockquote style="margin-top:5pt;margin-bottom:5pt;font-family:Helvetica"><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif">On Jul 15, 2021, at 01:10, Fred Posner <<a href="mailto:fred@palner.com" style="text-decoration:underline;font-family:Calibri,sans-serif;color:blue" target="_blank">fred@palner.com</a>> wrote:<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div></div><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><u style="font-family:Calibri,sans-serif"></u> <u style="font-family:Calibri,sans-serif"></u></div><div style="font-family:Helvetica"><div style="font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif">On 7/14/21 2:04 PM, ThanhTruong wrote:<br><br><u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div><blockquote style="margin-top:5pt;margin-bottom:5pt;font-family:Helvetica"><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif">verify_certificate =yes<br>require_certificate =yes<u style="font-family:Calibri,sans-serif"></u><u style="font-family:Calibri,sans-serif"></u></div></blockquote><div style="margin:0cm 0cm 0cm 35.4pt;font-size:11pt;font-family:Calibri,sans-serif"><br>Change both of those to no in your case.<br><br>--<span style="font-family:Calibri,sans-serif"> </span><br>Fred Posner --<span style="font-family:Calibri,sans-serif"> </span><a href="http://www.palner.com/" style="text-decoration:underline;font-family:Calibri,sans-serif;color:blue" target="_blank">www.palner.com</a><br>Matrix: @fred:<a href="http://matrix.lod.com/" style="text-decoration:underline;font-family:Calibri,sans-serif;color:blue" target="_blank">matrix.lod.com</a><br><br>__________________________________________________________<br>Kamailio - Users Mailing List - Non Commercial Discussions<br> *<span style="font-family:Calibri,sans-serif"> </span><a href="mailto:sr-users@lists.kamailio.org" style="text-decoration:underline;font-family:Calibri,sans-serif;color:blue" target="_blank">sr-users@lists.kamailio.org</a><br>Important: keep the mailing list in the recipients, do not reply only to the sender!<br>Edit mailing list options or unsubscribe:<br> *<span style="font-family:Calibri,sans-serif"> </span><a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" style="text-decoration:underline;font-family:Calibri,sans-serif;color:blue" target="_blank">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a></div></div></div></blockquote></div></div></div></div></blockquote></div><br></div></div>__________________________________________________________<br>
Kamailio - Users Mailing List - Non Commercial Discussions<br>
  * <a href="mailto:sr-users@lists.kamailio.org" target="_blank">sr-users@lists.kamailio.org</a><br>
Important: keep the mailing list in the recipients, do not reply only to the sender!<br>
Edit mailing list options or unsubscribe:<br>
  * <a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br>
</blockquote></div></div>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>Regards,</div><div><br></div>David Villasmil<div>email: <a href="mailto:david.villasmil.work@gmail.com" target="_blank">david.villasmil.work@gmail.com</a></div><div>phone: +34669448337</div></div></div>