<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Dear,<div class=""><br class=""></div><div class="">I am trying to make a test to see how can webrtc work in kamailio and tls.</div><div class=""><br class=""></div><div class="">I was try some link :</div><div style="orphans: auto; widows: auto;" class=""><a href="https://github.com/havfo/WEBRTC-to-SIP" rel="nofollow noreferrer" style="font-family: inherit; font-style: inherit; font-variant-caps: inherit; orphans: 2; widows: 2; margin: 0px; padding: 0px; border: 0px; font-variant-ligatures: inherit; font-variant-position: inherit; font-variant-numeric: inherit; font-variant-alternates: inherit; font-variant-east-asian: inherit; font-stretch: inherit; line-height: inherit; vertical-align: baseline; box-sizing: inherit; color: var(--theme-link-color-hover); cursor: pointer;" class=""><span class="Apple-tab-span" style="white-space: pre;"> </span>1</a>. <font color="rgba(0, 0, 0, 0)" face="inherit" class=""><span style="font-style: inherit; font-variant-caps: inherit; orphans: 2; widows: 2; font-variant-ligatures: inherit; font-variant-position: inherit; font-variant-numeric: inherit; font-variant-alternates: inherit; font-variant-east-asian: inherit; font-stretch: inherit; line-height: inherit; box-sizing: inherit; cursor: pointer;" class=""><a href="https://github.com/havfo/WEBRTC-to-SIP" class="">https://github.com/havfo/WEBRTC-to-SIP</a></span></font></div><div style="orphans: auto; widows: auto;" class=""><a href="https://telecom.altanai.com/2018/09/04/kamailio-webrtc-sip-server/" rel="nofollow noreferrer" style="font-family: inherit; font-style: inherit; font-variant-caps: inherit; font-size: 15px; orphans: 2; widows: 2; margin: 0px; padding: 0px; border: 0px; font-variant-ligatures: inherit; font-variant-position: inherit; font-variant-numeric: inherit; font-variant-alternates: inherit; font-variant-east-asian: inherit; font-stretch: inherit; line-height: inherit; vertical-align: baseline; box-sizing: inherit; color: var(--theme-link-color); cursor: pointer;" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>2. https://telecom.altanai.com/2018/09/04/kamailio-webrtc-sip-server/</a></div><div class=""><br class=""></div><div class="">And Generate CA from the link:</div><div class=""><br class=""></div><div class=""><a href="https://www.kamailio.org/dokuwiki/doku.php/tls:create-certificates" class="">https://www.kamailio.org/dokuwiki/doku.php/tls:create-certificates</a></div><div class=""><br class=""></div><div class="">Then, I tried to login with simpl5 and i got the message back </div><div class=""><i style="color: rgb(51, 51, 51); font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 13px; font-variant-ligatures: normal; orphans: 2; text-align: center; widows: 2; background-color: rgb(245, 245, 245);" class="">Disconnected: <b class="">Failed to connet to the server</b></i></div><div class=""><br class=""></div><div class="">I do not know how can i fix that issue, look like TLS configure has issue with that. the log is showing something like</div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Jul 14 17:56:16 ip-172-31-44-170 sbin/kamailio[13813]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Jul 14 17:56:16 ip-172-31-44-170 sbin/kamailio[13813]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Jul 14 17:56:16 ip-172-31-44-170 sbin/kamailio[13813]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 27.65.214.194</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Jul 14 17:56:16 ip-172-31-44-170 sbin/kamailio[13813]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 172.31.44.170</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Jul 14 17:56:16 ip-172-31-44-170 sbin/kamailio[13813]: ERROR: <core> [core/tcp_read.c:1493]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f4233c60fc0 r: 0x7f4233c610e8 (-1)</span></div></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">My tls.cfg is :</div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(52, 188, 38); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">[server:default]</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">method =</span><span style="font-variant-ligatures: no-common-ligatures; color: #c33720" class=""> SSLv23</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">verify_certificate =</span><span style="font-variant-ligatures: no-common-ligatures; color: #c33720" class=""> </span><span style="font-variant-ligatures: no-common-ligatures; color: #cd7923" class="">yes</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">require_certificate =</span><span style="font-variant-ligatures: no-common-ligatures; color: #c33720" class=""> </span><span style="font-variant-ligatures: no-common-ligatures; color: #cd7923" class="">yes</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(195, 55, 32); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures; color: #f4f4f4" class="">private_key =</span><span style="font-variant-ligatures: no-common-ligatures" class=""> /etc/certs/my.domain/key.pem</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(195, 55, 32); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures; color: #f4f4f4" class="">certificate =</span><span style="font-variant-ligatures: no-common-ligatures" class=""> /etc/certs/my.domain/cert.pem</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(195, 55, 32); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures; color: #f4f4f4" class="">ca_list =</span><span style="font-variant-ligatures: no-common-ligatures" class=""> /etc/certs/demoCA/cert.pem</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098); min-height: 14px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(52, 188, 38); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">[client:default]</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">verify_certificate =</span><span style="font-variant-ligatures: no-common-ligatures; color: #c33720" class=""> </span><span style="font-variant-ligatures: no-common-ligatures; color: #cd7923" class="">yes</span></div><div style="margin: 0px; font-stretch: normal; font-size: 10px; line-height: normal; font-family: Monaco; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">require_certificate =</span><span style="font-variant-ligatures: no-common-ligatures; color: #c33720" class=""> </span><span style="font-variant-ligatures: no-common-ligatures; color: #cd7923" class="">yes</span></div></div><div class=""><br class=""></div><div class="">Please help me to register sipml5 or how can i create CA for TLS in kamailio to use with webrtc.</div><div class=""><br class=""></div><div class="">Thank all.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div></body></html>