I am able to resolve the tls sni issue with this setting finally.
``` [server:default] method = TLSv1.2+ verify_certificate = yes require_certificate = yes private_key = /etc/letsencrypt/live/abcsbc.com/privkey.pem certificate = /etc/letsencrypt/live/abcsbc.com/fullchain.pem ca_list = /etc/kamailio/ca_list.pem #ca_list = /etc/letsencrypt/live/abcsbc.com/cert.pem
[server:172.31.19.8:5061] method = TLSv1.2+ verify_certificate = yes require_certificate = yes private_key = /etc/letsencrypt/live/abcsbc.com/privkey.pem certificate = /etc/letsencrypt/live/abcsbc.com/fullchain.pem ca_list = /etc/kamailio/ca_list.pem server_name = localhost
[client:default] method = TLSv1.2+ verify_certificate = no require_certificate = no server_name = abcsbc.com
[client:172.31.19.8:5061] method = TLSv1.2+ verify_certificate = yes require_certificate = yes private_key = /etc/letsencrypt/live/abcsbc.com/privkey.pem certificate = /etc/letsencrypt/live/abcsbc.com/fullchain.pem ca_list = /etc/kamailio/ca_list.pem server_name = localhost server_id = localhost
#private_key = /etc/letsencrypt/live/abcsbc.com/privkey.pem #certificate = /etc/letsencrypt/live/abcsbc.com/fullchain.pem #ca_list = /etc/kamailio/ca_list.pem #ca_list = /etc/letsencrypt/live/abcsbc.com/cert.pem ```
But now the thing to worry is my dispatcher flag goes from AX to IP. :(
kamcmd dispatcher.list | egrep "URI|FLAGS" URI: sip:sip.pstnhub.microsoft.com:5061;transport=tls FLAGS: IP URI: sip:sip2.pstnhub.microsoft.com:5061;transport=tls FLAGS: IP URI: sip:sip3.pstnhub.microsoft.com:5061;transport=tls FLAGS: IP
why ?