Dear all,
wen a sip client(minisip) tries to connect with OpenSER with TLS enabled on both sides, I get the following error
ipMessageTransport: sendMessage: creating new socket Creating new SSL_CTX SSL connect: Error in system call. Could not get server certificate SipMessageTransport: sendMessage: exception thrown! SipMessageTransport: sendMessage: exception thrown! SipMessageTransport: sendMessage: exception thrown! SipMessageTransport: sendMessage: exception thrown! SipMessageTransport: sendMessage: exception thrown! SipMessageTransport: sendMessage: exception thrown! SipMessageTransport: sendMessage: exception thrown!
regarding the certificates, using the scripts given in OpenSER, I created a rootCA and with the same rootCA I created the following for server and client
Server: server-cert server-privkey server-calist
Client: client-cert client-privkey client-calist
and loaded the sever certs in the server config file and the client certs in the client config file.....
wat am I missing here, why is it not able to get the server certificate ? I am posting the openser.cfg here. kindly guide me thanks and regards, Pjothi
____________________________________________________________
openser.cfg
# $Id: openser.cfg,v 1.5 2005/10/28 19:45:33 bogdan_iancu Exp $ # # simple quick-start config script #
# ----------- global configuration parameters ------------------------
debug=3 # debug level (cmd line: -dddddddddd) fork=yes log_stderror=no # (cmd line: -E)
/* Uncomment these lines to enter debugging mode
fork=no log_stderror=yes
*/
check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) port=5060 children=4 fifo="/tmp/openser_fifo"
# # uncomment the following lines for TLS support disable_tls = 0 listen = tls: 192.168.0.4:5061 tls_verify = 1 tls_require_certificate = 0 tls_method = SSLv23 tls_certificate = "/usr/local/etc/openser/user/user- cert.pem" tls_private_key = "/usr/local/etc/openser/user/user- privkey.pem" tls_ca_list = "/usr/local/etc/openser/user/user- calist.pem" --------------------------------------------------------------------------------------------------------------
-
Pjothi