[Kamailio-Users] Testing of Kamailio TLS with Sipp TLS - sr-users

18 Feb 2010

Hello friendsm,

I am testing TLS feature of both kamailio and Sipp.

I first downloaded kamailio 1.5.x TLS supported version, uncommented TLS=1
from Makefiel and then build the kamailio.
first i test kamailio without TLS with sipp for registration and
everything works file.

Then i follow "http://www.kamailio.org/docs/tls-devel.html" and creates
rootCA, user certificates and all configuration parameters to kamailio.cfg
file

Config paras are as below:

/* uncomment the following lines to enable TLS support  (default off) */
disable_tls = no
listen = tls:172.16.16.218:5091
tls_verify_server = 1
tls_verify_client = 1
tls_require_client_certificate = 1
tls_method = TLSv1
tls_certificate =
"/data/hemanshu/install/kam-tls/etc/kamailio/tls/user/user-cert.pem"
tls_private_key =
"/data/hemanshu/install/kam-tls/etc/kamailio/tls/user/user-privkey.pem"
tls_ca_list     =
"/data/hemanshu/install/kam-tls/etc/kamailio/tls/user/user-calist.pem"

and restart kamailio server

It works and i can see via netstat on port 5091.

but when i starts sipp it gives me following error.

[hemanshu@localhost sipp.3.1]$ ./sipp -sf ./data/rauth.xml -inf
./data/user.csv -r 1 -m 1 -trace_err -trace_stat -nd -fd 1 -i
172.16.16.218 172.16.16.218:5091 -t l1
2010-02-18      13:51:40:244    1266481300.244432: FI_init_ssl_context:
SSL_CTX_use_certificate_file failed.

I know i have built sipp with TLS support, then i can not figure out where
is the problem.
Sipp says user certification file failed ..but client doesnt need any
certification file...or does it?

i even tried with  tls_verify_client = 1 , tls_require_client_certificate
= 1, playing with different combinations...but still same ans.

Can anyone suggest me what could be wrong?
Have i made any mistake in configuring kamailio or theres some problem in
SIPP.

-- 
Regards,

Hemanshu Patel

M: 09601295238