Hello,


On 26/05/16 18:36, Arsen wrote:
Hi Daniel,

nope debug=3 doens't give more info.
does this mean that you don't see other log messages from tls or that those messages don't give any useful detail?

I have the same certificate on the web server and on the kamailio (same crt/key on both)

Here is not about server having a certificate, but the client being requested to present its own certificate, have I understood right?

What's your tls config option for kamailio regarding the require_certificate attribute?

Cheers,
Daniel

Thanks in advance

On Thu, May 26, 2016 at 5:58 PM, Daniel-Constantin Mierla <miconda@gmail.com> wrote:

Hello,

if you run with debug=3, do you get more hints from the debug messages?

I guess you require client certificate in your config.

Cheers,
Daniel


On 26/05/16 15:06, Arsen wrote:
Hi guys!

I am trying to configure kamailio with WSS.
We have trusted certificate installed SIP over TCP/TLS works fine.

But when I try WSS I got error:

 ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS read:error:14094419:SSL routines:SSL3_READ_BYTES:tlsv1 alert access denied

ERROR: <core> [tcp_read.c:1303]: tcp_read_req(): ERROR: tcp_read_req: error reading

Before above error it was 'bad certificate', so I have imported CA in the firefox and now I get these errors.. 

I have tried sipml5 and tryit.jssip.net same issue with both clients, also it seems I have these errors only when I use firefox, when I use chrome it even doesn't show me an error..

Any ideas? 

Thanks!

--
Regards,
Arsen.


_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla
http://www.asipto.com - http://www.kamailio.org
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda

_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users




--
Regards,
Arsen.

-- 
Daniel-Constantin Mierla
http://www.asipto.com - http://www.kamailio.org
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda