[SR-Users] please help to configure tls in kamailio for webrtc client like simpl5

[ThanhTruong]

Dear,

I am trying to make a test to see how can webrtc work in kamailio and tls.

I was try some link :
	1 <https://github.com/havfo/WEBRTC-to-SIP>. https://github.com/havfo/WEBRTC-to-SIP <https://github.com/havfo/WEBRTC-to-SIP>
	2. https://telecom.altanai.com/2018/09/04/kamailio-webrtc-sip-server/ <https://telecom.altanai.com/2018/09/04/kamailio-webrtc-sip-server/>

And Generate CA from the link:

https://www.kamailio.org/dokuwiki/doku.php/tls:create-certificates <https://www.kamailio.org/dokuwiki/doku.php/tls:create-certificates>

Then, I tried to login with simpl5 and i got the message back 
Disconnected: Failed to connet to the server

I do not know how can i fix that issue, look like TLS configure has issue with that. the log is showing something like

Jul 14 17:56:16 ip-172-31-44-170 sbin/kamailio[13813]: ERROR: tls [tls_server.c:1283]: tls_h_read_f(): protocol level error
Jul 14 17:56:16 ip-172-31-44-170 sbin/kamailio[13813]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown
Jul 14 17:56:16 ip-172-31-44-170 sbin/kamailio[13813]: ERROR: tls [tls_server.c:1287]: tls_h_read_f(): source IP: 27.65.214.194
Jul 14 17:56:16 ip-172-31-44-170 sbin/kamailio[13813]: ERROR: tls [tls_server.c:1290]: tls_h_read_f(): destination IP: 172.31.44.170
Jul 14 17:56:16 ip-172-31-44-170 sbin/kamailio[13813]: ERROR: <core> [core/tcp_read.c:1493]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f4233c60fc0 r: 0x7f4233c610e8 (-1)


My tls.cfg is :

[server:default]
method = SSLv23
verify_certificate = yes
require_certificate = yes
private_key = /etc/certs/my.domain/key.pem
certificate = /etc/certs/my.domain/cert.pem
ca_list = /etc/certs/demoCA/cert.pem

[client:default]
verify_certificate = yes
require_certificate = yes

Please help me to register sipml5 or how can i create CA for TLS in kamailio to use with webrtc.

Thank all.








-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20210715/3c1dc7f0/attachment.htm>