Date: Mon, 6 Sep 2010 14:34:35 +0200 From: klaus.mailinglists@pernau.at To: betergreen@live.com CC: sr-users@lists.sip-router.org Subject: Re: [SR-Users] please help to register sip phone to kamailio server via tls support.
Am 06.09.2010 11:19, schrieb peter_green lion:
i have the same problem when add user-privkey.pem in SIP client, I use 3CX soft phone.
You have to import the self-signed certificate of the root CA which signed the server certificate. Maybe "cakey.pem" ?
Probably you have to read some certificate and openssl howtos to get proper backround - SIP over TLS is just like HTTPS.
regards Klaus
dear Klaus,
I try to test with all file.pem in ca directory. but i get the same error.
i try to verify cert file and get :
openssl verify calist.pem
calist.pem: /C=vn/ST=hcm/L=htk/O=inc/OU=4/CN=kamailio
error 18 at 0 depth lookup:self signed certificate
OK
openssl verify privkey.pem
unable to load certificate
2904:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:647:Expecting: TRUSTED CERTIFICATE
openssl verify ser1_cert.pem
error 20 at 0 depth lookup:unable to get local issuer certificate
so is this my problem ? thanks for help . Peter Green