Hi Karsten and list

I am running

Centos 7.9

openssl v1.0.2k

kamailio 5.7.0

Sent with Proton Mail secure email.

------- Original Message -------
On Wednesday, June 14th, 2023 at 8:55 PM, nutxase <nutxase@proton.me> wrote:

Hey All

I have been setting up TLS and websocket for kamailio but i keep getting these errors in the log please can someone help me

Jun 14 20:51:57 so-sbc-02 /usr/sbin/kamailio[25490]: ERROR: tls [tls_util.h:51]: tls_err_ret(): TLS accept:error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher (sni: sip.domain.com)

Jun 14 20:51:57 so-sbc-02 /usr/sbin/kamailio[25490]: ERROR: tls [tls_server.c:1333]: tls_h_read_f(): src addr: 1.2.3.4.5:57265

Jun 14 20:51:57 so-sbc-02 /usr/sbin/kamailio[25490]: ERROR: tls [tls_server.c:1336]: tls_h_read_f(): dst addr: 5.4.3.2.1:8089

Jun 14 20:51:57 so-sbc-02 /usr/sbin/kamailio[25490]: ERROR: <core> [core/tcp_read.c:1478]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f3c8fc16720 r: 0x7f3c8fc16848 (-1)

my config is pretty standard so i am not sure what i am missing

using letsencrypt certs

#!ifdef WITH_TLS

# ----- tls params -----

modparam("tls", "tls_method", "TLSv1.2+")

modparam("tls", "certificate", "/etc/kamailio/tls/cert.pem")

modparam("tls", "private_key", "/etc/kamailio/tls/ckey.pem")

modparam("tls", "ca_list", "/etc/kamailio/tls/fullchain.pem")

#!endif

Sent with Proton Mail secure email.