[OpenSIPS-Users] opensips-cli skipping module tls

[Răzvan Crainea]

Can you actually check that the two (private key and certificate) match?
https://www.ibm.com/support/pages/how-verify-if-private-key-matches-certificate

Best regards,

Răzvan Crainea
OpenSIPS Core Developer / SIPhub CTO
http://www.opensips-solutions.com / https://www.siphub.com

On 9/26/23 19:54, L S wrote:
> Thanks Razvan. Installing the cryptography module fixed it - I was able 
> to run both -x tls rootCA and userCERT, and create the certificates.
> 
> However, when I start Opensips, I get the following error:
> ERROR:tls_wolfssl:load_private_key: key 
> '/usr/local/etc/opensips/tls/server/privkey.pem' does not match the 
> public key of the certificate
> 
> I tried creating the certificates both on Centos 7 and Ubuntu Focal, and 
> they both gave the same error.
> The data for the certificates comes from opensips-cli.cfg. I had created 
> certificates with that cfg 3 months ago, and used in Opensips script 
> without any issues.
>   I only changed the domain name this time.
> 
> Any suggestions?
> Thanks,
> Matt
> 
> 
> On Tue, Sep 26, 2023, 9:56 AM Răzvan Crainea <razvan at opensips.org 
> <mailto:razvan at opensips.org>> wrote:
> 
>     Can you double check whether you have the python-openssl or
>     python-cryptography libraries?
> 
>     Best regards,
> 
>     Răzvan Crainea
>     OpenSIPS Core Developer / SIPhub CTO
>     http://www.opensips-solutions.com
>     <http://www.opensips-solutions.com> / https://www.siphub.com
>     <https://www.siphub.com>
> 
>     On 9/26/23 16:38, L S wrote:
>      > I'm trying to create certificates using opensips-cli:
>      >
>      > opensips-cli - f /usr/local/etc/opensips-cli.cfg -d -x tls rootCA
>      > DEBUG: Skipping module 'tls' - excluded on purpose
>      >
>      > ERROR: No module 'tls' loaded
>      >
>      > Trying to find out why I am getting this message now - it used to
>     work
>      > fine. All other modules are loaded.
>      >
>      > Thaks,
>      > Matt
>      >
>      > _______________________________________________
>      > Users mailing list
>      > Users at lists.opensips.org <mailto:Users at lists.opensips.org>
>      > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>     <http://lists.opensips.org/cgi-bin/mailman/listinfo/users>
> 
>     _______________________________________________
>     Users mailing list
>     Users at lists.opensips.org <mailto:Users at lists.opensips.org>
>     http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>     <http://lists.opensips.org/cgi-bin/mailman/listinfo/users>
> 
> 
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users