<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hello,<br>
<br>
<div class="moz-cite-prefix">On 25/06/15 15:06, Austin Einter wrote:<br>
</div>
<blockquote
cite="mid:CANXt1k-NAOHMmMQG8vQPfUS8fk+0iF6FGTwGGBoEx7Lf0W178w@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>Hi All<br>
</div>
I am having a sip client, I am using GNU tls
for transport layer security.<br>
<br>
</div>
<div>I am using Kamailio (TLS enabled) to test
all the functionalities.<br>
<br>
</div>
I did registration over TLS. It was fine.<br>
<br>
</div>
I tried to make call. <br>
</div>
I was able to send INVITE.<br>
</div>
Kamaiio trying to connect to called party (which is
again my sip endpoint).<br>
</div>
That time certificate verification failed.<br>
<br>
<br>
</div>
<div><u><b>Error log</b></u><br>
</div>
<div><i><b> 8(14180) ERROR: tls [tls_server.c:1193]:
tls_read_f(): TLS write:error:14090086:SSL
routines:ssl3_get_server_certificate:certificate
verify failed<br>
8(14180) ERROR: <core> [tcp_read.c:1326]:
tcp_read_req(): ERROR: tcp_read_req: error reading <br>
8(14180) DEBUG: <core> [tcp_read.c:1481]:
release_tcpconn(): releasing con 0x7f962f6b6db8,
state -2, fd=5, id=3</b></i><br>
<br>
</div>
How do I debug and fix this issue.<br>
<br>
</div>
Can somebody help me out.<br>
</div>
</div>
</div>
</blockquote>
you can disable certificate verification in the tls.cfg inside the
[client:default] section.<br>
<br>
Otherwise, the CA list must include the certificate of the CA that
signed the certificate of the client.<br>
<br>
Cheers,<br>
Daniel<br>
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla
<a class="moz-txt-link-freetext" href="http://twitter.com/#!/miconda">http://twitter.com/#!/miconda</a> - <a class="moz-txt-link-freetext" href="http://www.linkedin.com/in/miconda">http://www.linkedin.com/in/miconda</a>
Book: SIP Routing With Kamailio - <a class="moz-txt-link-freetext" href="http://www.asipto.com">http://www.asipto.com</a></pre>
</body>
</html>