[SR-Users] webrtc tlsv1 alert access denied

[Daniel-Constantin Mierla]

Hello,


On 26/05/16 18:36, Arsen wrote:
> Hi Daniel,
>
> nope debug=3 doens't give more info.
does this mean that you don't see other log messages from tls or that
those messages don't give any useful detail?

> I have the same certificate on the web server and on the kamailio
> (same crt/key on both)

Here is not about server having a certificate, but the client being
requested to present its own certificate, have I understood right?

What's your tls config option for kamailio regarding the
require_certificate attribute?

Cheers,
Daniel

> Thanks in advance
>
> On Thu, May 26, 2016 at 5:58 PM, Daniel-Constantin Mierla
> <miconda at gmail.com <mailto:miconda at gmail.com>> wrote:
>
>     Hello,
>
>     if you run with debug=3, do you get more hints from the debug
>     messages?
>
>     I guess you require client certificate in your config.
>
>     Cheers,
>     Daniel
>
>
>     On 26/05/16 15:06, Arsen wrote:
>>     Hi guys!
>>
>>     I am trying to configure kamailio with WSS.
>>     We have trusted certificate installed SIP over TCP/TLS works fine.
>>
>>     But when I try WSS I got error:
>>
>>      ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS
>>     read:error:14094419:SSL routines:SSL3_READ_BYTES:tlsv1 alert
>>     access denied
>>
>>     ERROR: <core> [tcp_read.c:1303]: tcp_read_req(): ERROR:
>>     tcp_read_req: error reading
>>
>>     Before above error it was 'bad certificate', so I have imported
>>     CA in the firefox and now I get these errors.. 
>>
>>     I have tried sipml5 and tryit.jssip.net <http://tryit.jssip.net>
>>     same issue with both clients, also it seems I have these errors
>>     only when I use firefox, when I use chrome it even doesn't show
>>     me an error..
>>
>>     Any ideas? 
>>
>>     Thanks!
>>
>>     -- 
>>     Regards,
>>     Arsen.
>>
>>
>>     _______________________________________________
>>     SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
>>     sr-users at lists.sip-router.org <mailto:sr-users at lists.sip-router.org>
>>     http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>
>     -- 
>     Daniel-Constantin Mierla
>     http://www.asipto.com - http://www.kamailio.org
>     http://twitter.com/#!/miconda <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda
>
>
>     _______________________________________________
>     SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing
>     list
>     sr-users at lists.sip-router.org <mailto:sr-users at lists.sip-router.org>
>     http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>
>
>
>
> -- 
> Regards,
> Arsen.

-- 
Daniel-Constantin Mierla
http://www.asipto.com - http://www.kamailio.org
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20160526/b37b4f5d/attachment.html>