6 Sep
2010
6 Sep
'10
8:07 p.m.
Date: Mon, 6 Sep 2010 14:34:35 +0200
From: klaus.mailinglists(a)pernau.at
To: betergreen(a)live.com
CC: sr-users(a)lists.sip-router.org
Subject: Re: [SR-Users] please help to register sip phone to kamailio server via tls
support.
Am 06.09.2010 11:19, schrieb peter_green lion:
dear Klaus,
I try to test with all file.pem in ca directory. but i get the same error.
i try to verify cert file and get :
openssl verify calist.pem
calist.pem: /C=vn/ST=hcm/L=htk/O=inc/OU=4/CN=kamailio
error 18 at 0 depth lookup:self signed certificate
OK
openssl verify privkey.pem
unable to load certificate
2904:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:647:Expecting:
TRUSTED CERTIFICATE
openssl verify ser1_cert.pem
error 20 at 0 depth lookup:unable to get local issuer certificate
so is this my problem ?
thanks for help .
Peter Green
i have the same problem when add user-privkey.pem
in SIP client, I use
3CX soft phone.
You have to import the self-signed certificate of the root CA which
signed the server certificate. Maybe "cakey.pem" ?
Probably you have to read some certificate and openssl howtos to get
proper backround - SIP over TLS is just like HTTPS.
regards
Klaus