Hi, I upgraded kamailio 4.4.2 to kamailio5.1.3 and i am getting this error *"Unable to load certificate file '/etc/kamailio/kamailio-selfsigned.pem",* kamilio 4.4.2 does not need the ssl file, but kamailio 5.1.3 need ssl file, what changes required in kamailio 5.1.3 to run with tls.
Please help me in resolving this issue.
Thank you vinod.M.N
Am Dienstag, 29. Mai 2018, 10:13:56 CEST schrieb Narasimhaiah, Vinod Maralenahalli:
I upgraded kamailio 4.4.2 to kamailio5.1.3 and i am getting this error *"Unable to load certificate file '/etc/kamailio/kamailio-selfsigned.pem",* kamilio 4.4.2 does not need the ssl file, but kamailio 5.1.3 need ssl file, what changes required in kamailio 5.1.3 to run with tls.
Please help me in resolving this issue.
Hello Vinod,
have you already tried to just supply the certificate file? You'll find in the module README some documentation in section 8. a certificate how-to.
Best regards,
Henning
Hi thanks for the reply , the certificate is having some issue and the issue resolved. after creating new certificate file..
Thank you
On Thu, May 31, 2018 at 7:40 PM, Henning Westerholt hw@kamailio.org wrote:
Am Dienstag, 29. Mai 2018, 10:13:56 CEST schrieb Narasimhaiah, Vinod Maralenahalli:
I upgraded kamailio 4.4.2 to kamailio5.1.3 and i am getting this error
*"Unable to load certificate file '/etc/kamailio/kamailio-
selfsigned.pem",*
kamilio 4.4.2 does not need the ssl file, but kamailio 5.1.3 need ssl
file,
what changes required in kamailio 5.1.3 to run with tls.
Please help me in resolving this issue.
Hello Vinod,
have you already tried to just supply the certificate file? You'll find in the module README some documentation in section 8. a certificate how-to.
Best regards,
Henning
Hello,
older versions of kamailio packages included self signed certificates, but, afaik, the newer do not include as Debian imposed reproducible builds. The certificate being generated at build time, was always different.
So you have to generate the certificates yourself. One option is to get a clone of the source tree of kamailio and go to src/modules/tls and run:
./sip-router_cert.sh -d /etc/kamailio/
Cheers, Daniel
On 31.05.18 16:10, Henning Westerholt wrote:
Am Dienstag, 29. Mai 2018, 10:13:56 CEST schrieb Narasimhaiah, Vinod Maralenahalli:
I upgraded kamailio 4.4.2 to kamailio5.1.3 and i am getting this error
*"Unable to load certificate file
'/etc/kamailio/kamailio-selfsigned.pem",*
kamilio 4.4.2 does not need the ssl file, but kamailio 5.1.3 need
ssl file,
what changes required in kamailio 5.1.3 to run with tls.
Please help me in resolving this issue.
Hello Vinod,
have you already tried to just supply the certificate file? You'll find in the module README some documentation in section 8. a certificate how-to.
Best regards,
Henning
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
On Thursday 31 May 2018 at 21:49:15, Daniel-Constantin Mierla wrote:
Hello,
older versions of kamailio packages included self signed certificates, but, afaik, the newer do not include as Debian imposed reproducible builds. The certificate being generated at build time, was always different.
Indeed - Debian does not like packages which turn out differently each time they are created on a buildserver.
So you have to generate the certificates yourself. One option is to get a clone of the source tree of kamailio and go to src/modules/tls and run:
./sip-router_cert.sh -d /etc/kamailio/
It's perfectly acceptable (for Debian, I mean) if a package generates its own certificates at install time (rather than at package creation time). Sendmail does this, for example.
It might be helpful to look into adding the above command to the post-install scripts for kamailio so that Debian gets what they want and end users get what they expect.
Regards,
Antony.
-
Antony Stone -
Daniel-Constantin Mierla -
Henning Westerholt -
Narasimhaiah, Vinod Maralenahalli