<div dir="ltr">Hi,<div><br></div><div>Yes I did.</div><div><br></div><div>[client:default]</div><div>
<p class=""><span class="">verify_certificate = yes</span></p><p class="">require_certificate = yes</p><p class=""><span class="">Do I have to add anything more?</span></p><p class=""><span class="">Thanks</span></p><p class="">Ahmed</p></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Oct 23, 2015 at 3:12 PM, Daniel-Constantin Mierla <span dir="ltr"><<a href="mailto:miconda@gmail.com" target="_blank">miconda@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
Hello,<br>
<br>
have you configured the client section in tls.cfg. Perhaps kamailio
is trying to connect to itself (looping) to send the request.<br>
<br>
Cheers,<br>
Daniel<div><div class="h5"><br>
<br>
<div>On 21/10/15 13:31, Ahmed Salem wrote:<br>
</div>
</div></div><blockquote type="cite"><div><div class="h5">
<div dir="ltr">
<div>Hi, </div>
<div>I have a kamailio tls configuration which is working fine
for calls & messages</div>
<div>In the tls configuration i set these parameters to yes for
the server and client</div>
<div><br>
</div>
<div>verify_certificate = yes</div>
<div>require_certificate = yes</div>
<div><br>
</div>
<div>But when I use "kamctl fifo t_uac_dlg MESSAGE" to send a
message I get the following errors, when verify_certificate
& require_certificate are set to no the message is sent
correctly.</div>
<div>Can somebody please help me resolve this issue.</div>
<div><br>
</div>
<div><br>
</div>
<div>tls [tls_server.c:1193]: tls_read_f(): TLS
write:error:14090086:SSL
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed</div>
<div><br>
</div>
<div><core> [tcp_read.c:1326]: tcp_read_req(): ERROR:
tcp_read_req: error reading </div>
<div><br>
</div>
<div>tls [tls_server.c:1193]: tls_read_f(): TLS
accept:error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert
unknown ca</div>
<div><br>
</div>
<div><br>
</div>
<div><core> [tcp_read.c:1326]: tcp_read_req(): ERROR:
tcp_read_req: error reading </div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Thanks</div>
<div><br>
</div>
<div>Ahmed</div>
</div>
<br>
<fieldset></fieldset>
<br>
</div></div><pre>_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
<a href="mailto:sr-users@lists.sip-router.org" target="_blank">sr-users@lists.sip-router.org</a>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><span class="HOEnZb"><font color="#888888">
</font></span></pre><span class="HOEnZb"><font color="#888888">
</font></span></blockquote><span class="HOEnZb"><font color="#888888">
<br>
<pre cols="72">--
Daniel-Constantin Mierla
<a href="http://twitter.com/#!/miconda" target="_blank">http://twitter.com/#!/miconda</a> - <a href="http://www.linkedin.com/in/miconda" target="_blank">http://www.linkedin.com/in/miconda</a>
Book: SIP Routing With Kamailio - <a href="http://www.asipto.com" target="_blank">http://www.asipto.com</a></pre>
</font></span></div>
<br>_______________________________________________<br>
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br>
<a href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a><br>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><br>
<br></blockquote></div><br></div></div>