Dear All<br>I have modified kamailio,cfg and compiled all the modules with TLS enabled, and able to bring up the kamailio proxy properly.<br><br>Kamailio proxy will receive the REGISTER message from endpoints in UDP , and want to send this REGISTER message to another intermediate proxy in TLS. For this purpose, I have added few lines in kamailio.cfg file as below.<br>
<br>I have created the certificates, private keys as explained by README file in kamailio-3.1.5/modules/tls/ path.<br><br> if(is_method("REGISTER"))<br> {<br> t_relay_to("tls:<a href="http://115.114.48.75:443">115.114.48.75:443</a>");<br>
exit();<br> }<br><br>Looks like this is taking effect. When Kamailio receives REGISTER message it is trying to do handshake with intermediate proxy.<br>I used wireshark to see the handshake messages.<br>
<br>1. From Kamailio proxy, a TCP SYNC message is going to intermediate proxy.<br>2. intermediate proxy sends SYNC + ACK<br>3. Kamailio sends CLIENT HELLO<br>4. intermediate proxy sends SERVER HELLO, CERTIFICATE and SERVER HELLO DONE<br>
5. The Kamailio sends ALERT (Level: Fatal, Description: Unknown CA) ---> IS something going wrong here..............<br>6. Then Kamailio sends FIN + ACK <br><br>Can somebody please let me know why the certificate verification fails (I get this log in console).<br>
How can I put a work around to avoid certification verification failure.<br><br>Best Regards<br>kamal<br><br><br>