#!define WITH_TLS

#!ifdef WITH_TLS

enable_tls=1

listen=tls:1.2.3.4:5061

/* upper limit for TLS connections */

tls_max_connections=2048

#!endif

#!ifdef WITH_TLS

loadmodule "tls.so"

#!endif

#!ifdef WITH_TLS

# ----- tls params -----

modparam("tls", "config", "/usr/local/etc/kamailio/tls.cfg")

#!endif

[server:default]

method = TLSv1.2+

verify_certificate = yes

require_certificate = yes

private_key = /usr/local/etc/kamailio/certs/privkey.pem

certificate = /usr/local/etc/kamailio/certs/cert.crt

ca_list = /usr/local/etc/kamailio/certs/cacert.pem

[client:default]

method = TLSv1.2+

verify_certificate = yes

require_certificate = yes

private_key = /usr/local/etc/kamailio/certs/privkey.pem

certificate = /usr/local/etc/kamailio/certs/cert.crt

ca_list = /usr/local/etc/kamailio/certs/cacert.pem

Sep 24 10:31:07kama1 /usr/local/sbin/kamailio[8708]: INFO: {1 1 OPTIONS 84bbc013-5cd1-43a7-a240-106ec00aa628} <core> [core/tcp_main.c:2948]: tcpconn_1st_send(): quick connect for 0x7f776544c978 sock 13

Sep 24 10:31:07kama1 /usr/local/sbin/kamailio[8711]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error

Sep 24 10:31:07kama1 /usr/local/sbin/kamailio[8711]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca

Sep 24 10:31:07kama1 /usr/local/sbin/kamailio[8711]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 1.2.3.4

Sep 24 10:31:07kama1 /usr/local/sbin/kamailio[8711]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 1.2.3.4

Sep 24 10:31:07kama1 /usr/local/sbin/kamailio[8711]: ERROR: <core> [core/tcp_read.c:1473]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f7765419b50 r: 0x7f7765419c78 (-1)

Sep 24 10:31:07kama1 /usr/local/sbin/kamailio[8712]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error

Sep 24 10:31:07kama1 /usr/local/sbin/kamailio[8712]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 1.2.3.4

Sep 24 10:31:07kama1 /usr/local/sbin/kamailio[8712]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 1.2.3.4

Sep 24 10:31:07kama1 /usr/local/sbin/kamailio[8712]: ERROR: <core> [core/tcp_read.c:1473]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f776544c978 r: 0x7f776544caa0 (-1)