[OpenSIPS-Users] opensips-cli skipping module tls

[L S]

Hi Razvan,
They don't match. Not sure if sth on my end causing this problem. I was
using opensips-cli only to create the certificates.

Anyway I used openssl directly instead to create the CA and server
certificates. They are working fine.

Thanks,
Matt

On Wed, Sep 27, 2023, 9:50 AM Răzvan Crainea <razvan at opensips.org> wrote:

> Can you actually check that the two (private key and certificate) match?
>
> https://www.ibm.com/support/pages/how-verify-if-private-key-matches-certificate
>
> Best regards,
>
> Răzvan Crainea
> OpenSIPS Core Developer / SIPhub CTO
> http://www.opensips-solutions.com / https://www.siphub.com
>
> On 9/26/23 19:54, L S wrote:
> > Thanks Razvan. Installing the cryptography module fixed it - I was able
> > to run both -x tls rootCA and userCERT, and create the certificates.
> >
> > However, when I start Opensips, I get the following error:
> > ERROR:tls_wolfssl:load_private_key: key
> > '/usr/local/etc/opensips/tls/server/privkey.pem' does not match the
> > public key of the certificate
> >
> > I tried creating the certificates both on Centos 7 and Ubuntu Focal, and
> > they both gave the same error.
> > The data for the certificates comes from opensips-cli.cfg. I had created
> > certificates with that cfg 3 months ago, and used in Opensips script
> > without any issues.
> >   I only changed the domain name this time.
> >
> > Any suggestions?
> > Thanks,
> > Matt
> >
> >
> > On Tue, Sep 26, 2023, 9:56 AM Răzvan Crainea <razvan at opensips.org
> > <mailto:razvan at opensips.org>> wrote:
> >
> >     Can you double check whether you have the python-openssl or
> >     python-cryptography libraries?
> >
> >     Best regards,
> >
> >     Răzvan Crainea
> >     OpenSIPS Core Developer / SIPhub CTO
> >     http://www.opensips-solutions.com
> >     <http://www.opensips-solutions.com> / https://www.siphub.com
> >     <https://www.siphub.com>
> >
> >     On 9/26/23 16:38, L S wrote:
> >      > I'm trying to create certificates using opensips-cli:
> >      >
> >      > opensips-cli - f /usr/local/etc/opensips-cli.cfg -d -x tls rootCA
> >      > DEBUG: Skipping module 'tls' - excluded on purpose
> >      >
> >      > ERROR: No module 'tls' loaded
> >      >
> >      > Trying to find out why I am getting this message now - it used to
> >     work
> >      > fine. All other modules are loaded.
> >      >
> >      > Thaks,
> >      > Matt
> >      >
> >      > _______________________________________________
> >      > Users mailing list
> >      > Users at lists.opensips.org <mailto:Users at lists.opensips.org>
> >      > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
> >     <http://lists.opensips.org/cgi-bin/mailman/listinfo/users>
> >
> >     _______________________________________________
> >     Users mailing list
> >     Users at lists.opensips.org <mailto:Users at lists.opensips.org>
> >     http://lists.opensips.org/cgi-bin/mailman/listinfo/users
> >     <http://lists.opensips.org/cgi-bin/mailman/listinfo/users>
> >
> >
> > _______________________________________________
> > Users mailing list
> > Users at lists.opensips.org
> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20230927/6462a133/attachment-0001.html>