<div dir="ltr">Hi,<div><br></div><div>Yes I did.</div><div><br></div><div>[client:default]</div><div>
<p class=""><span class="">verify_certificate = yes</span></p><p class="">require_certificate = yes</p><p class=""><span class="">Do I have to add anything more?</span></p><p class=""><span class="">Thanks</span></p><p class="">Ahmed</p></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Oct 23, 2015 at 3:12 PM, Daniel-Constantin Mierla <span dir="ltr"><<a href="mailto:miconda@gmail.com" target="_blank">miconda@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div bgcolor="#FFFFFF" text="#000000">
    Hello,<br>
    <br>
    have you configured the client section in tls.cfg. Perhaps kamailio
    is trying to connect to itself (looping) to send the request.<br>
    <br>
    Cheers,<br>
    Daniel<div><div class="h5"><br>
    <br>
    <div>On 21/10/15 13:31, Ahmed Salem wrote:<br>
    </div>
    </div></div><blockquote type="cite"><div><div class="h5">
      <div dir="ltr">
        <div>Hi, </div>
        <div>I have a kamailio tls configuration which is working fine
          for calls & messages</div>
        <div>In the tls configuration i set these parameters to yes for
          the server and client</div>
        <div><br>
        </div>
        <div>verify_certificate = yes</div>
        <div>require_certificate = yes</div>
        <div><br>
        </div>
        <div>But when I use "kamctl fifo t_uac_dlg MESSAGE" to send a
          message I get the following errors, when verify_certificate
          & require_certificate are set to no the message is sent
          correctly.</div>
        <div>Can somebody please help me resolve this issue.</div>
        <div><br>
        </div>
        <div><br>
        </div>
        <div>tls [tls_server.c:1193]: tls_read_f(): TLS
          write:error:14090086:SSL
          routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed</div>
        <div><br>
        </div>
        <div><core> [tcp_read.c:1326]: tcp_read_req(): ERROR:
          tcp_read_req: error reading </div>
        <div><br>
        </div>
        <div>tls [tls_server.c:1193]: tls_read_f(): TLS
          accept:error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert
          unknown ca</div>
        <div><br>
        </div>
        <div><br>
        </div>
        <div><core> [tcp_read.c:1326]: tcp_read_req(): ERROR:
          tcp_read_req: error reading </div>
        <div><br>
        </div>
        <div><br>
        </div>
        <div><br>
        </div>
        <div>Thanks</div>
        <div><br>
        </div>
        <div>Ahmed</div>
      </div>
      <br>
      <fieldset></fieldset>
      <br>
      </div></div><pre>_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
<a href="mailto:sr-users@lists.sip-router.org" target="_blank">sr-users@lists.sip-router.org</a>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><span class="HOEnZb"><font color="#888888">
</font></span></pre><span class="HOEnZb"><font color="#888888">
    </font></span></blockquote><span class="HOEnZb"><font color="#888888">
    <br>
    <pre cols="72">-- 
Daniel-Constantin Mierla
<a href="http://twitter.com/#!/miconda" target="_blank">http://twitter.com/#!/miconda</a> - <a href="http://www.linkedin.com/in/miconda" target="_blank">http://www.linkedin.com/in/miconda</a>
Book: SIP Routing With Kamailio - <a href="http://www.asipto.com" target="_blank">http://www.asipto.com</a></pre>
  </font></span></div>

<br>_______________________________________________<br>
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br>
<a href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a><br>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><br>
<br></blockquote></div><br></div></div>