Re: [SR-Users] tls.options RPC reporting default settings

Hi Henning,

It did reboot Kam, lol.

You didn't post parts of your custom tls.cfg settings to match with what rpc tls.options reports?

Cheers.

On Mon, Mar 16, 2020 at 1:34 PM Henning Westerholt hw@skalatan.de wrote:

Hi Sergio,

strange, for me it looks ok:

kamcmd> root@dc-sbc:~# kamcmd |grep kamailio

root@dc-sbc:~# kamcmd tls.options |grep kamailio

    private_key: /etc/kamailio/cert.pem

    certificate: /etc/kamailio/cert.pem

    session_id: kamailio-tls-5.x.y

    config: /etc/kamailio/tls.cfg

root@dc-sbc:~# kamcmd core.version

kamailio 5.3.2 (x86_64/linux)

Probably stupid question, maybe the server needs a restart, if you changed something etc..?

Cheers,

Henning

--

Henning Westerholt – https://skalatan.de/blog/

Kamailio services – https://gilawa.com

*From:* sr-users sr-users-bounces@lists.kamailio.org *On Behalf Of *Sergiu Pojoga *Sent:* Saturday, March 14, 2020 6:49 PM *To:* Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org *Subject:* [SR-Users] tls.options RPC reporting default settings

Hi there,

Having custom TLS config in tls.cfg, RPC `tls.options` seems to report default settings. Bug or intended?

root@kam:/# kamcmd version kamailio 5.3.2 (x86_64/linux) 0bed10

root@kam:/# kamcmd tls.options { force_run: 0 method: TLSv1 verify_certificate: 0 verify_depth: 9 require_certificate: 0 private_key: /usr/local/etc/kamailio/cert.pem ca_list: certificate: /usr/local/etc/kamailio/cert.pem cipher_list: session_cache: 0 session_id: kamailio-tls-5.x.y config: /usr/local/etc/kamailio/tls.cfg ... }

modparam("tls", "config", "/usr/local/etc/kamailio/tls.cfg")

root@kam:/usr/local/etc/kamailio# cat tls.cfg [server:default] method = TLSv1.2+ verify_certificate = yes require_certificate = yes private_key = /tmp/privkey.pem certificate = /tmp/fullchain.pem ca_list = /etc/ssl/certs/ca-certificates.crt

[client:default] method = TLSv1.2+ verify_certificate = yes require_certificate = yes private_key = /tmp/privkey.pem certificate = /tmp/fullchain.pem ca_list = /etc/ssl/certs/ca-certificates.crt

Cheers.