On Tue, Mar 18, 2014 at 3:12 PM, Rene Montilva renemontilva@gmail.comwrote:
[server:192.168.1.1:5061] method = SSLv23 verify_certificate = no require_certificate = no private_key = /etc/kamailio/key.pem certificate = /etc/kamailio/cert.pem
[client:default] verify_certificate = no require_certificate = no
But when a reload kamailio
i get the follow error:
Mar 18 16:36:50 softswitch /usr/sbin/kamailio[23330]: ERROR: tls [tls_domain.c:906]: load_private_key(): TLSs<default>: Unable to load private key file '/etc/kamailio/cert.pem'
Why try to find '/etc/kamailio/cert.pem' for a private key??
I'm not an expert, but I tested it out and from what I can tell you need a [server:default] section before you can have an IP-specific section. So you can either put your options into default, or at least define a default before creating [server:192.168.1.1:5061].
Also as a side note, I would recommend you support TLSv1. SSLv2 has some significant security issues and should be avoided.
Corey
On Tue, Mar 18, 2014 at 3:12 PM, Rene Montilva renemontilva@gmail.comwrote:
Hi List
i'm trying config sip with tls module, my config for module in kamailio.cfg is this:
#!ifdef WITH_TLS # ----- tls params ----- modparam("tls", "config", "/etc/kamailio/tls.cfg") #!endif
in tls.cfg is this:
[server:192.168.1.1:5061] method = SSLv23 verify_certificate = no require_certificate = no private_key = /etc/kamailio/key.pem certificate = /etc/kamailio/cert.pem
[client:default] verify_certificate = no require_certificate = no
But when a reload kamailio
i get the follow error:
Mar 18 16:36:50 softswitch /usr/sbin/kamailio[23330]: ERROR: tls [tls_domain.c:906]: load_private_key(): TLSs<default>: Unable to load private key file '/etc/kamailio/cert.pem'
Why try to find '/etc/kamailio/cert.pem' for a private key??
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users