Hi,
can you please explain your system a bit more?
Kamailio Version, openssl Version and your Linux Distribution would be a
good starting point.
Kind regards
Karsten Horsmann
nutxase <nutxase(a)proton.me> schrieb am Mi., 14. Juni 2023, 22:26:
Hey All
I have been setting up TLS and websocket for kamailio but i keep getting
these errors in the log please can someone help me
Jun 14 20:51:57 so-sbc-02 /usr/sbin/kamailio[25490]: ERROR: tls
[tls_util.h:51]: tls_err_ret(): TLS accept:error:1408A0C1:SSL
routines:ssl3_get_client_hello:no shared cipher (sni:
sip.domain.com
<http://sip.sipalto.com>)
Jun 14 20:51:57 so-sbc-02 /usr/sbin/kamailio[25490]: ERROR: tls
[tls_server.c:1333]: tls_h_read_f(): src addr: 1.2.3.4.5:57265
Jun 14 20:51:57 so-sbc-02 /usr/sbin/kamailio[25490]: ERROR: tls
[tls_server.c:1336]: tls_h_read_f(): dst addr: 5.4.3.2.1:8089
Jun 14 20:51:57 so-sbc-02 /usr/sbin/kamailio[25490]: ERROR: <core>
[core/tcp_read.c:1478]: tcp_read_req(): ERROR: tcp_read_req: error reading
- c: 0x7f3c8fc16720 r: 0x7f3c8fc16848 (-1)
my config is pretty standard so i am not sure what i am missing
using letsencrypt certs
#!ifdef WITH_TLS
# ----- tls params -----
modparam("tls", "tls_method", "TLSv1.2+")
modparam("tls", "certificate",
"/etc/kamailio/tls/cert.pem")
modparam("tls", "private_key",
"/etc/kamailio/tls/ckey.pem")
modparam("tls", "ca_list",
"/etc/kamailio/tls/fullchain.pem")
#!endif
Sent with Proton Mail <https://proton.me/> secure email.
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
To unsubscribe send an email to sr-users-leave(a)lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to
the sender!
Edit mailing list options or unsubscribe: