I am able to resolve the tls sni issue with this setting finally.
[server:default]
method = TLSv1.2+
verify_certificate = yes
require_certificate = yes
private_key = /etc/letsencrypt/live/abcsbc.com/privkey.pem
certificate = /etc/letsencrypt/live/abcsbc.com/fullchain.pem
ca_list = /etc/kamailio/ca_list.pem
#ca_list = /etc/letsencrypt/live/abcsbc.com/cert.pem
[server:172.31.19.8:5061]
method = TLSv1.2+
verify_certificate = yes
require_certificate = yes
private_key = /etc/letsencrypt/live/abcsbc.com/privkey.pem
certificate = /etc/letsencrypt/live/abcsbc.com/fullchain.pem
ca_list = /etc/kamailio/ca_list.pem
server_name = localhost
[client:default]
method = TLSv1.2+
verify_certificate = no
require_certificate = no
server_name = abcsbc.com
[client:172.31.19.8:5061]
method = TLSv1.2+
verify_certificate = yes
require_certificate = yes
private_key = /etc/letsencrypt/live/abcsbc.com/privkey.pem
certificate = /etc/letsencrypt/live/abcsbc.com/fullchain.pem
ca_list = /etc/kamailio/ca_list.pem
server_name = localhost
server_id = localhost
#private_key = /etc/letsencrypt/live/abcsbc.com/privkey.pem
#certificate = /etc/letsencrypt/live/abcsbc.com/fullchain.pem
#ca_list = /etc/kamailio/ca_list.pem
#ca_list = /etc/letsencrypt/live/abcsbc.com/cert.pem
But now the thing to worry is my dispatcher flag goes from AX to IP. :(
kamcmd dispatcher.list | egrep "URI|FLAGS"
URI: sip:sip.pstnhub.microsoft.com:5061;transport=tls
FLAGS: IP
URI: sip:sip2.pstnhub.microsoft.com:5061;transport=tls
FLAGS: IP
URI: sip:sip3.pstnhub.microsoft.com:5061;transport=tls
FLAGS: IP
why ?
—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you commented.