<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style>
</head>
<body class='hmmessage'>
> Date: Mon, 6 Sep 2010 14:34:35 +0200<br>> From: klaus.mailinglists@pernau.at<br>> To: betergreen@live.com<br>> CC: sr-users@lists.sip-router.org<br>> Subject: Re: [SR-Users] please help to register sip phone to kamailio server via tls support.<br>> <br>> <br>> <br>> Am 06.09.2010 11:19, schrieb peter_green lion:<br>> > i have the same problem when add user-privkey.pem in SIP client, I use<br>> > 3CX soft phone.<br>> <br>> You have to import the self-signed certificate of the root CA which <br>> signed the server certificate. Maybe "cakey.pem" ?<br>> <br>> Probably you have to read some certificate and openssl howtos to get <br>> proper backround - SIP over TLS is just like HTTPS.<br>> <br>> regards<br>> Klaus<br><br>dear Klaus,<br>
I try to test with all file.pem in ca directory. but i get the same error.<br>
i try to verify cert file and get :<br>
<br>openssl verify calist.pem<br>
calist.pem: /C=vn/ST=hcm/L=htk/O=inc/OU=4/CN=kamailio<br>
error 18 at 0 depth lookup:self signed certificate<br>
OK<br>
<br>
openssl verify privkey.pem<br>
unable to load certificate<br>
2904:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:647:Expecting: TRUSTED CERTIFICATE<br><br><br>
<font style="" color="#0070c0">openssl verify ser1_cert.pem</font><font style="" color="#0070c0"><br>
</font>
<font style="" color="#0070c0"><br>
</font><font style="" color="#0070c0">
error 20 at 0 depth lookup:unable to get local issuer certificate<br><br><font style="" color="#000000">so is this my problem ?<br>thanks for help .<br>Peter Green<br></font></font><br><br> </body>
</html>