Hello,
I have installed kamailio server. Now I am trying to use SSL for my server - client connections. I have made certificates succesfully. Now when my client connects, I get the following error.
[tcp_read.c:882] : ERROR : TLS accept : error : 1408F10B : SSL routines:SSL3_GET_RECORD:wrong version number
I have tried finding solution online. I am asked to change the version number. Can some one please tell me where I have to change the version number ?? And change it to what ?? Thanks.
Cheers, Owais
AMMENDMENT
From: owaisulhaq@hotmail.com To: sr-users@lists.sip-router.org Subject: SSL connection issue Date: Fri, 14 Feb 2014 09:52:35 +0500
Hello,
I have installed kamailio server. Now I am trying to use SSL for my server - client connections. I have made certificates succesfully. Now when my client connects, I get the following error.
[tcp_server.c:1174] : ERROR : TLS accept : error : 1408F10B : SSL routines:SSL3_GET_RECORD:wrong version number
AND CODE OF FILE tcp_server LINE 1173 to LINE 1175 is mentioned below
case SSL_ERROR_SSL: TLS ERR(err_src); goto error;
I have tried finding solution online. I am asked to change the version number. Can some one please help me out in resolving the issue. What ammendments are required. Thanks
Cheers, Owais
On Thu, Feb 13, 2014 at 9:52 PM, Owais ul Haq owaisulhaq@hotmail.comwrote:
Hello,
I have installed kamailio server. Now I am trying to use SSL for my server - client connections. I have made certificates succesfully. Now when my client connects, I get the following error.
[tcp_read.c:882] : ERROR : TLS accept : error : 1408F10B : SSL routines:SSL3_GET_RECORD:wrong version number
I have tried finding solution online. I am asked to change the version number. Can some one please tell me where I have to change the version number ?? And change it to what ?? Thanks.
The error means that the client and server could not agree on which version of SSL to use.
In your tls.cfg, check which version you are using:
[server:default] method = TLSv1
You can use openssl to confirm.
$ openssl s_client -connect 192.0.2.1:5061 ... SSL-Session: Protocol : TLSv1 Cipher : AES256-SHA
If your client only supports SSL3, you could set "method = SSL3", although TLS would be preferred if you can do it.
Corey