<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style>
</head>
<body class='hmmessage'>
<br><br>> Date: Mon, 13 Sep 2010 17:00:16 +0200<br>> From: klaus.mailinglists@pernau.at<br>> To: betergreen@live.com<br>> CC: sr-users@lists.sip-router.org<br>> Subject: Re: [SR-Users] help with tls error :sslv3 alert bad certificate<br>> <br>> <br>> <br>> Am 13.09.2010 12:44, schrieb peter_green lion:<br>> ><br>> > hi Klaus and all,<br>> > i thing this is bug in openssl, becau i have just install kamailio with<br>> > tls support in ubuntu server which OS have openssl version 0.9.8k,<br>> > and i have result as:<br>> ><br>> > sip client can register with server via tls support(sometime it work and<br>> > some time it cannot work, or it can register when i restart kamail io)<br>> ><br>> > if it can register, i can make call but when callee answer, caller<br>> > change to connect , but callee continue ringring.<br>> > if callee reject call, caller change to destination busy.<br>> ><br>> > i can recognize what problem, please suggest ?<br>> <br>> I think this are normal NAT/TCP problems.<br>> <br>> First you should try with TCP. Unless TCP works fine you SHOULD NOT test <br>> with TLS as TLS will not work too.<br>> <br>> Make sure SIP over TCP works fine - e.g call fix_nated_contact() in your <br>> config just as you would do NAT traversal (even if you do not have NATs)<br>> <br>> regards<br>> klaus<br><br>Dear Klaus,<br>i have do that first, i try with TCP and it works very good, my server and client in the same net work. But i change it to TLS, the problem was found.<br>so i wonder why it is. and i mail to you who have more experience to fix it.<br>and when caller call callee, i use ngrep to catch package through port 5060/5061 I see the TLS package, it is not a sip message. so I thing the problem is futher.and only 3CX phone can register with my server.<br><br>thanks for help me.<br>best regards.<br>Peter Green.<br><br> </body>
</html>