[SR-Users] Kamailio TLS server hello without any client certificate request

[Patrick Murphy]

Hey guys - I'm using the following settings on my Kamailio 5.1.1 (x86_64/linux) config:

modparam("tls", "low_mem_threshold2", 1024)
modparam("tls", "tls_force_run", 1)
modparam("tls", "tls_disable_compression", 1)
modparam("tls", "ssl_max_send_fragment", 4096)
modparam("tls", "renegotiation", 0)
modparam("tls", "low_mem_threshold1", 2048)
modparam("tls", "require_certificate", 1)

When a client attempts to connect to Kamailio, the server hello it receives does *not* contain the client certificate request. And I've noticed that kamailio starts with:

tls [tls_domain.c:694]: set_verification(): TLSs<default>: No client certificate required and no checks performed
tls [tls_domain.c:320]: fill_missing(): TLSs<default>: require_certificate=0



Any hints?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200129/e9813933/attachment.html>