As i understand from
https://github.com/kamailio/kamailio/blob/master/modules/tls/tls.cfg
# Special settings for the iptel.org public SIP # server. We do not verify the certificate of the # server because it can be expired. The server # implements authentication using SSL client # certificates so configure the client certificate # that was given to use by iptel.org staff here. # #[client:195.37.77.101:5061] #verify_certificate = no #certificate = ./modules/tls/iptel_client.pem #private_key = ./modules/tls/iptel_key.pem #ca_list = ./modules/tls/iptel_ca.pem #crl = ./modules/tls/iptel_crl.pem
this is for match with remote ip and port when kamailio acts as client.