<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Monaco;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.E-MailFormatvorlage18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Hello,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="mso-fareast-language:EN-US">please format your e-mail only with black – its really hard to read (it might be related to my client, though).<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="mso-fareast-language:EN-US">Have you already checked the file system access rights to the certs if kamailio can actually read them?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="mso-fareast-language:EN-US">Cheers,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="mso-fareast-language:EN-US">Henning<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span lang="EN-GB" style="mso-fareast-language:EN-US">-- <o:p>
</o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="mso-fareast-language:EN-US">Henning Westerholt –
</span><span style="mso-fareast-language:EN-US"><a href="https://skalatan.de/blog/"><span lang="EN-GB" style="color:#0563C1">https://skalatan.de/blog/</span></a></span><span lang="EN-GB" style="mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="mso-fareast-language:EN-US">Kamailio services –
</span><span style="mso-fareast-language:EN-US"><a href="https://gilawa.com/"><span lang="EN-GB" style="color:#0563C1">https://gilawa.com</span></a></span><span style="mso-fareast-language:EN-US">
<span lang="EN-GB"><o:p></o:p></span></span></p>
</div>
<p class="MsoNormal"><span lang="EN-GB" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="margin-left:35.4pt"><b>From:</b> sr-users <sr-users-bounces@lists.kamailio.org>
<b>On Behalf Of </b>ThanhTruong<br>
<b>Sent:</b> Thursday, July 15, 2021 5:09 AM<br>
<b>To:</b> Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org><br>
<b>Subject:</b> Re: [SR-Users] please help to configure tls in kamailio for webrtc client like simpl5<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:35.4pt">Hello Fred and all,<o:p></o:p></p>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt">I tried some changes, and result bellow.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt">with :<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#34BC26">[server:default]<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">method =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> SSLv23</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">verify_certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720">
</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#CD7923">no</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">require_certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720">
</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#CD7923">no</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">private_key =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> /etc/certs/webrtc.killermobile.mobi/key.pem<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> /etc/certs/webrtc.killermobile.mobi/cert.pem<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">ca_list =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> /etc/certs/demoCA/cert.pem<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#34BC26">[client:default]<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">verify_certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720">
</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#CD7923">yes</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">require_certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720">
</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#CD7923">yes</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#5E34FF">~ <o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt">error log:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:02:57 ip-172-31-44-170 sbin/kamailio[17590]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:02:57 ip-172-31-44-170 sbin/kamailio[17590]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3
alert certificate unknown<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:02:57 ip-172-31-44-170 sbin/kamailio[17590]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 27.65.214.194<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:02:57 ip-172-31-44-170 sbin/kamailio[17590]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 172.31.44.170<o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt">With settings:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#34BC26">[server:default]<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">method =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> SSLv23</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">verify_certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720">
</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#CD7923">no</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">require_certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720">
</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#CD7923">no</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">private_key =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> /etc/certs/webrtc.killermobile.mobi/key.pem<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> /etc/certs/webrtc.killermobile.mobi/cert.pem<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">ca_list =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> /etc/certs/demoCA/cert.pem<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#34BC26">[client:default]<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">verify_certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> </span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#CD7923">no</span><span style="font-size:7.5pt;font-family:"Monaco",serif"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">require_certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> </span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#CD7923">no</span><span style="font-size:7.5pt;font-family:"Monaco",serif"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#5E34FF">~ <o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
<div>
<p class="MsoNormal" style="margin-left:35.4pt">and error log:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:05:28 ip-172-31-44-170 sbin/kamailio[17648]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:05:28 ip-172-31-44-170 sbin/kamailio[17648]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3
alert certificate unknown<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:05:28 ip-172-31-44-170 sbin/kamailio[17648]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 27.65.214.194<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:05:28 ip-172-31-44-170 sbin/kamailio[17648]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 172.31.44.170<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:05:28 ip-172-31-44-170 sbin/kamailio[17648]: ERROR: <core> [core/tcp_read.c:1493]: tcp_read_req(): ERROR: tcp_read_req: error reading
- c: 0x7fd64ee4bfc0 r: 0x7fd64ee4c0e8 (-1)<o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt">and tried:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#34BC26">[server:default]<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">method =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> SSLv23</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">verify_certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720">
</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#CD7923">yes</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">require_certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720">
</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#CD7923">yes</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">private_key =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> /etc/certs/webrtc.killermobile.mobi/key.pem<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> /etc/certs/webrtc.killermobile.mobi/cert.pem<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">ca_list =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> /etc/certs/demoCA/cert.pem<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#34BC26">[client:default]<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">verify_certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720">
</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#CD7923">no</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">require_certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720">
</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#CD7923">no</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt">and error log:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:06:37 ip-172-31-44-170 sbin/kamailio[17703]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:06:37 ip-172-31-44-170 sbin/kamailio[17703]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3
alert certificate unknown<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:06:37 ip-172-31-44-170 sbin/kamailio[17703]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 27.65.214.194<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:06:37 ip-172-31-44-170 sbin/kamailio[17703]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 172.31.44.170<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:06:37 ip-172-31-44-170 sbin/kamailio[17703]: ERROR: <core> [core/tcp_read.c:1493]: tcp_read_req(): ERROR: tcp_read_req: error reading
- c: 0x7f222a018fc0 r: 0x7f222a0190e8 (-1)<o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt">Then, i try with TLSv1+<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#34BC26">[server:default]<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">method =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> TLSv1+</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">verify_certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720">
</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#CD7923">yes</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">require_certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720">
</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#CD7923">yes</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">private_key =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> /etc/certs/webrtc.killermobile.mobi/key.pem<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> /etc/certs/webrtc.killermobile.mobi/cert.pem<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">ca_list =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720"> /etc/certs/demoCA/cert.pem<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#34BC26">[client:default]<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">verify_certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720">
</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#CD7923">no</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">require_certificate =</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#C33720">
</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#CD7923">no</span><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4"><o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt">and log is:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:08:33 ip-172-31-44-170 sbin/kamailio[17826]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:08:33 ip-172-31-44-170 sbin/kamailio[17826]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3
alert certificate unknown<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:08:33 ip-172-31-44-170 sbin/kamailio[17826]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 27.65.214.194<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:08:33 ip-172-31-44-170 sbin/kamailio[17826]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 172.31.44.170<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><span style="font-size:7.5pt;font-family:"Monaco",serif;color:#F4F4F4">Jul 15 03:08:33 ip-172-31-44-170 sbin/kamailio[17826]: ERROR: <core> [core/tcp_read.c:1493]: tcp_read_req(): ERROR: tcp_read_req: error reading
- c: 0x7f9fd21cefc0 r: 0x7f9fd21cf0e8 (-1)<o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt">I am sorry to border you and all, but i dont know how to get it works, please suggest. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt">thank you so much.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt"><br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal" style="margin-left:35.4pt">On Jul 15, 2021, at 01:10, Fred Posner <<a href="mailto:fred@palner.com">fred@palner.com</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal" style="margin-left:35.4pt">On 7/14/21 2:04 PM, ThanhTruong wrote:<br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal" style="margin-left:35.4pt">verify_certificate =yes<br>
require_certificate =yes<o:p></o:p></p>
</blockquote>
<p class="MsoNormal" style="margin-left:35.4pt"><br>
Change both of those to no in your case.<br>
<br>
-- <br>
Fred Posner -- <a href="http://www.palner.com">www.palner.com</a><br>
Matrix: @fred:<a href="http://matrix.lod.com">matrix.lod.com</a><br>
<br>
__________________________________________________________<br>
Kamailio - Users Mailing List - Non Commercial Discussions<br>
* <a href="mailto:sr-users@lists.kamailio.org">sr-users@lists.kamailio.org</a><br>
Important: keep the mailing list in the recipients, do not reply only to the sender!<br>
Edit mailing list options or unsubscribe:<br>
* <a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal" style="margin-left:35.4pt"><o:p> </o:p></p>
</div>
</div>
</body>
</html>