> Date: Mon, 6 Sep 2010 14:34:35 +0200
> From: klaus.mailinglists@pernau.at
> To: betergreen@live.com
> CC: sr-users@lists.sip-router.org
> Subject: Re: [SR-Users] please help to register sip phone to kamailio server via tls support.
>
>
>
> Am 06.09.2010 11:19, schrieb peter_green lion:
> > i have the same problem when add user-privkey.pem in SIP client, I use
> > 3CX soft phone.
>
> You have to import the self-signed certificate of the root CA which
> signed the server certificate. Maybe "cakey.pem" ?
>
> Probably you have to read some certificate and openssl howtos to get
> proper backround - SIP over TLS is just like HTTPS.
>
> regards
> Klaus

dear Klaus,
I try to test with all file.pem in ca directory. but i get the same error.
i try to verify cert file and get :

openssl verify calist.pem
calist.pem: /C=vn/ST=hcm/L=htk/O=inc/OU=4/CN=kamailio
error 18 at 0 depth lookup:self signed certificate
OK

openssl verify privkey.pem
unable to load certificate
2904:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:647:Expecting: TRUSTED CERTIFICATE


openssl verify ser1_cert.pem

error 20 at 0 depth lookup:unable to get local issuer certificate

so is this my problem ?
thanks for help .
Peter Green