9 Sep
2010
9 Sep
'10
5:13 a.m.
Am 09.09.2010 10:17, schrieb peter_green lion:
hi all,
i have configure tls support as this link:
http://www.kamailio.org/docs/tls-devel.html#id2451496
and i add certificate to 3CX sip phone is "cacert.pem" but when i
register sip phone, the log file in kamailio server is :
Sep 9 15:13:36 appliance /usr/local/sbin/kamailio[2146]: ERROR: tls
[tls_server.c:392]: SSL error:error:14094412:SSL
routines:SSL3_READ_BYTES:sslv3 alert bad certificate
I think the means that the SIP phone sends the ALERT because the it does
not accept the certificate of the server. So you have to debug why the
SIP phone does not accept the certificate.
You really should test with another SIP client first.
regards
Klaus
my configure in kamailio.cfg as :
modparam("tls", "tls_method", "TLSv1")
modparam("tls", "tls_method", "SSLv23")
modparam("tls", "certificate",
"/usr/local/etc/kamailio//tls/user/user-cert.pem")
modparam("tls", "private_key",
"/usr/local/etc/kamailio//tls/user/user-privkey.pem")
modparam("tls", "ca_list",
"/usr/local/etc/kamailio//tls/user/user-calist.pem")
modparam("tls", "verify_certificate",0 )
modparam("tls", "require_certificate",0 )
please suggest to fix this error.
thanks and regards.
Peter Green.
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users(a)lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users