[OpenSIPS-Users] TLS errstack: error:1409441B:SSL makes impossible to make a call

[Jan Skórczyński]

Hello,

I'm using opensips 2.4.2 and a custom client application based on the pjsip
library.

Certificate verification is disabled, clients do not have their
certificates (only the server has a certificate).

Calls work, however, every now and then (sometimes once a day, sometimes
once a week or less often) gets information that no connection can be made.
After checking the logs I see something like:

Mar 14 20:14:59   /usr/sbin/opensips[8760]: ERROR:proto_tls:tls_read_req:
failed to read
Mar 14 20:15:14   /usr/sbin/opensips[8760]: ERROR:proto_tls:tls_accept: New
TLS connection from  189.34.234.43:61674 failed to accept
Mar 14 20:15:14   /usr/sbin/opensips[8760]:
ERROR:proto_tls:tls_print_errstack: TLS errstack: error:1409441B:SSL
routines:ssl3_read_bytes:tlsv1 alert decrypt error
Mar 14 20:15:14   /usr/sbin/opensips[8760]: ERROR:proto_tls:tls_read_req:
failed to do pre-tls reading
Mar 14 20:15:14   /usr/sbin/opensips[8756]: ERROR:proto_tls:tls_accept: New
TLS connection from  238.37.134.67:48436 failed to accept
Mar 14 20:15:14   /usr/sbin/opensips[8756]:
ERROR:proto_tls:tls_print_errstack: TLS errstack: error:1409441B:SSL
routines:ssl3_read_bytes:tlsv1 alert decrypt error
Mar 14 20:15:14   /usr/sbin/opensips[8756]: ERROR:proto_tls:tls_read_req:
failed to do pre-tls reading
Mar 14 20:15:15   /usr/sbin/opensips[8756]: ERROR:proto_tls:tls_accept: New
TLS connection from  189.34.234.43:44188 failed to accept
Mar 14 20:15:15   /usr/sbin/opensips[8756]:
ERROR:proto_tls:tls_print_errstack: TLS errstack: error:1409441B:SSL
routines:ssl3_read_bytes:tlsv1 alert decrypt error
Mar 14 20:15:15   /usr/sbin/opensips[8756]: ERROR:proto_tls:tls_read_req:
failed to do pre-tls reading
Mar 14 20:15:15   /usr/sbin/opensips[8760]: ERROR:proto_tls:tls_accept: New
TLS connection from  238.37.134.67:61301 failed to accept
Mar 14 20:15:15   /usr/sbin/opensips[8760]:
ERROR:proto_tls:tls_print_errstack: TLS errstack: error:1409441B:SSL
routines:ssl3_read_bytes:tlsv1 alert decrypt error
Mar 14 20:15:15   /usr/sbin/opensips[8760]: ERROR:proto_tls:tls_read_req:
failed to do pre-tls reading
Mar 14 20:15:15   /usr/sbin/opensips[8756]: ERROR:proto_tls:tls_accept: New
TLS connection from  189.34.234.43:61856 failed to accept
Mar 14 20:15:15   /usr/sbin/opensips[8756]:
ERROR:proto_tls:tls_print_errstack: TLS errstack: error:1409441B:SSL
routines:ssl3_read_bytes:tlsv1 alert decrypt error
Mar 14 20:15:15   /usr/sbin/opensips[8756]: ERROR:proto_tls:tls_read_req:
failed to do pre-tls reading
Mar 14 20:15:15   /usr/sbin/opensips[8760]: ERROR:proto_tls:tls_accept: New
TLS connection from  238.37.134.67:29004 failed to accept
Mar 14 20:15:15   /usr/sbin/opensips[8760]:
ERROR:proto_tls:tls_print_errstack: TLS errstack: error:1409441B:SSL
routines:ssl3_read_bytes:tlsv1 alert decrypt error
Mar 14 20:15:15   /usr/sbin/opensips[8760]: ERROR:proto_tls:tls_read_req:
failed to do pre-tls reading
Mar 14 20:15:16   /usr/sbin/opensips[8756]: ERROR:proto_tls:tls_accept: New
TLS connection from  189.34.234.43:63274 failed to accept
Mar 14 20:15:16   /usr/sbin/opensips[8756]:
ERROR:proto_tls:tls_print_errstack: TLS errstack: error:1409441B:SSL
routines:ssl3_read_bytes:tlsv1 alert decrypt error
Mar 14 20:15:16   /usr/sbin/opensips[8756]: ERROR:proto_tls:tls_read_req:
failed to do pre-tls reading
Mar 14 20:15:16   /usr/sbin/opensips[8760]: ERROR:proto_tls:tls_accept: New
TLS connection from  238.37.134.67:27101 failed to accept
Mar 14 20:15:16   /usr/sbin/opensips[8760]:
ERROR:proto_tls:tls_print_errstack: TLS errstack: error:1409441B:SSL
routines:ssl3_read_bytes:tlsv1 alert decrypt error
Mar 14 20:15:16   /usr/sbin/opensips[8760]: ERROR:proto_tls:tls_read_req:
failed to do pre-tls reading
Mar 14 20:15:16   /usr/sbin/opensips[8756]: ERROR:proto_tls:tls_accept: New
TLS connection from  189.34.234.43:60537 failed to accept
Mar 14 20:15:16   /usr/sbin/opensips[8756]:
ERROR:proto_tls:tls_print_errstack: TLS errstack: error:1409441B:SSL
routines:ssl3_read_bytes:tlsv1 alert decrypt error
Mar 14 20:15:16   /usr/sbin/opensips[8756]: ERROR:proto_tls:tls_read_req:
failed to do pre-tls reading
Mar 14 20:15:16   /usr/sbin/opensips[8760]: ERROR:proto_tls:tls_accept: New
TLS connection from  238.37.134.67:32759 failed to accept
Mar 14 20:15:16   /usr/sbin/opensips[8760]:
ERROR:proto_tls:tls_print_errstack: TLS errstack: error:1409441B:SSL
routines:ssl3_read_bytes:tlsv1 alert decrypt error

Being honest, I can not find any information about this error. Could
someone indicate where to look, what to check to fix this error?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20190315/c8161f99/attachment.html>