[SR-Users] http_async_client problem with tls_ca_path

[Giacomo Vacca]

OK Giovanni,
this is likely to be an issue with the way CURLOPT_CAPATH is set. I'll
submit a fix as soon as possible.

Giacomo

On 3 November 2017 at 09:49, gmele <giovanni.mele at nagra.com> wrote:

> Hello Giacomo,
>
> currently, I don't see these CURL warnings. Here are the logs I get using
> the verbose mode of Curl.
>
> When it works:
>
> Nov  3 08:41:46 d-wn-sipregistrar-003 kamailio-registrar[18948]: INFO:
> http_async_client [http_multi.c:238]: debug_cb(): [cURL] About to connect()
> to pusher-service port 8443 (#1)
> Nov  3 08:41:46 d-wn-sipregistrar-003 kamailio-registrar[18948]: INFO:
> http_async_client [http_multi.c:238]: debug_cb(): [cURL]   Trying
> 192.168.0.50...
> Nov  3 08:41:46 d-wn-sipregistrar-003 kamailio-registrar[18948]: INFO:
> http_async_client [http_multi.c:238]: debug_cb(): [cURL] Connected to
> pusher-service (192.168.0.50) port 8443 (#1)
> *Nov  3 08:41:46 d-wn-sipregistrar-003 kamailio-registrar[18948]: INFO:
> http_async_client [http_multi.c:238]: debug_cb(): [cURL]   CAfile:
> /etc/pki/tls/certs/ca-bundle.crt#012  CApath: /etc/kamailio/ssl/ca/*
> Nov  3 08:41:46 d-wn-sipregistrar-003 kamailio-registrar[18948]: INFO:
> http_async_client [http_multi.c:238]: debug_cb(): [cURL] SSL connection
> using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
>
>
> When it doesn't work:
>
> Nov  3 08:43:44 d-wn-sipregistrar-003 kamailio-registrar[18949]: INFO:
> http_async_client [http_multi.c:238]: debug_cb(): [cURL] About to connect()
> to pusher-service port 8443 (#0)
> Nov  3 08:43:44 d-wn-sipregistrar-003 kamailio-registrar[18949]: INFO:
> http_async_client [http_multi.c:238]: debug_cb(): [cURL]   Trying
> 192.168.0.50...
> Nov  3 08:43:44 d-wn-sipregistrar-003 kamailio-registrar[18949]: INFO:
> http_async_client [http_multi.c:238]: debug_cb(): [cURL] Connected to
> pusher-service (192.168.0.50) port 8443 (#0)
> *Nov  3 08:43:44 d-wn-sipregistrar-003 kamailio-registrar[18949]: INFO:
> http_async_client [http_multi.c:238]: debug_cb(): [cURL] Initializing NSS
> with certpath: sql:/etc/pki/nssdb*
> Nov  3 08:43:44 d-wn-sipregistrar-003 kamailio-registrar[18949]: INFO:
> http_async_client [http_multi.c:238]: debug_cb(): [cURL] Closing connection
> 0
> Nov  3 08:43:44 d-wn-sipregistrar-003 kamailio-registrar[18949]: ERROR:
> http_async_client [http_multi.c:570]: check_multi_info(): handle 0x1cf1b00
> returned error 77:
>
>
> Regards
>
> Giovanni
>
>
>
> --
> Sent from: http://sip-router.1086192.n5.nabble.com/Users-f3.html
>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users at lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20171103/e4c9551f/attachment.html>