<div dir="ltr">Hi Daniel,<div><br></div><div><div>nope debug=3 doens't give more info. </div><div>I have the same certificate on the web server and on the kamailio (same crt/key on both)</div></div><div>Thanks in advance</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, May 26, 2016 at 5:58 PM, Daniel-Constantin Mierla <span dir="ltr"><<a href="mailto:miconda@gmail.com" target="_blank">miconda@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>Hello,</p>
<p>if you run with debug=3, do you get more hints from the debug
messages?</p>
<p>I guess you require client certificate in your config.</p>
<p>Cheers,<br>
Daniel<br>
</p><div><div class="h5">
<br>
<div>On 26/05/16 15:06, Arsen wrote:<br>
</div>
</div></div><blockquote type="cite"><div><div class="h5">
<div dir="ltr">Hi guys!
<div><br>
</div>
<div>I am trying to configure kamailio with WSS.</div>
<div>We have trusted certificate installed SIP over TCP/TLS
works fine.</div>
<div><br>
</div>
<div>But when I try WSS I got error:</div>
<div><br>
</div>
<div> ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS
read:error:14094419:SSL routines:SSL3_READ_BYTES:tlsv1 alert
access denied</div>
<div><br>
</div>
<div>ERROR: <core> [tcp_read.c:1303]: tcp_read_req():
ERROR: tcp_read_req: error reading</div>
<div><br>
</div>
<div>Before above error it was 'bad certificate', so I have
imported CA in the firefox and now I get these errors.. </div>
<div><br>
</div>
<div>I have tried sipml5 and <a href="http://tryit.jssip.net" target="_blank">tryit.jssip.net</a> same issue
with both clients, also it seems I have these errors only when
I use firefox, when I use chrome it even doesn't show me an
error..</div>
<div><br>
</div>
<div>Any ideas? </div>
<div><br>
</div>
<div>Thanks!<br clear="all">
<div><br>
</div>
-- <br>
<div>Regards,<br>
Arsen.<br>
</div>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
</div></div><pre>_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
<a href="mailto:sr-users@lists.sip-router.org" target="_blank">sr-users@lists.sip-router.org</a>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><span class="HOEnZb"><font color="#888888">
</font></span></pre><span class="HOEnZb"><font color="#888888">
</font></span></blockquote><span class="HOEnZb"><font color="#888888">
<br>
<pre cols="72">--
Daniel-Constantin Mierla
<a href="http://www.asipto.com" target="_blank">http://www.asipto.com</a> - <a href="http://www.kamailio.org" target="_blank">http://www.kamailio.org</a>
<a href="http://twitter.com/#!/miconda" target="_blank">http://twitter.com/#!/miconda</a> - <a href="http://www.linkedin.com/in/miconda" target="_blank">http://www.linkedin.com/in/miconda</a></pre>
</font></span></div>
<br>_______________________________________________<br>
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br>
<a href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a><br>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature">Regards,<br>Arsen.<br></div>
</div>