Hi Daniel,

nope debug=3 doens't give more info. 
I have the same certificate on the web server and on the kamailio (same crt/key on both)
Thanks in advance

On Thu, May 26, 2016 at 5:58 PM, Daniel-Constantin Mierla <miconda@gmail.com> wrote:

Hello,

if you run with debug=3, do you get more hints from the debug messages?

I guess you require client certificate in your config.

Cheers,
Daniel


On 26/05/16 15:06, Arsen wrote:
Hi guys!

I am trying to configure kamailio with WSS.
We have trusted certificate installed SIP over TCP/TLS works fine.

But when I try WSS I got error:

 ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS read:error:14094419:SSL routines:SSL3_READ_BYTES:tlsv1 alert access denied

ERROR: <core> [tcp_read.c:1303]: tcp_read_req(): ERROR: tcp_read_req: error reading

Before above error it was 'bad certificate', so I have imported CA in the firefox and now I get these errors.. 

I have tried sipml5 and tryit.jssip.net same issue with both clients, also it seems I have these errors only when I use firefox, when I use chrome it even doesn't show me an error..

Any ideas? 

Thanks!

--
Regards,
Arsen.


_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla
http://www.asipto.com - http://www.kamailio.org
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda

_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users




--
Regards,
Arsen.