<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
</style>
</head>
<body class='hmmessage'>
THanks for the tip. I did not cut and paste the private key properly. It is now loading how ever the connection is failing with the following error<BR>
<BR><SPAN lang=BE>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: DBG:core:tls_find_server_domain: virtual TLS server domain not found, Using default TLS server domain settings <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: DBG:core:tls_tcpconn_init: found socket based TLS server domain [0.0.0.0:0] <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: DBG:core:tls_tcpconn_init: Setting in ACCEPT mode (server) <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: DBG:core:tcpconn_add: hashes: 594, 1 <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: DBG:core:handle_new_connect: new connection: 0xb3ebdf50 24 flags: 0002 <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: DBG:core:send2child: to tcp child 0 0(16980), 0xb3ebdf50 <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16980]: DBG:core:handle_io: received n=4 con=0xb3ebdf50, fd=19 <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16980]: DBG:core:io_watch_add: io_watch_add(0x826ab20, 19, 2, 0xb3ebdf50), fd_no=1 <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16980]: DBG:core:tls_update_fd: New fd is 19 <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16980]: ERROR:core:tls_accept: some error in SSL: <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16980]: ERROR:core:tls_print_errstack: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16980]: DBG:core:io_watch_del: io_watch_del (0x826ab20, 19, -1, 0x10) fd_no=2 called <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16980]: DBG:core:release_tcpconn: releasing con 0xb3ebdf50, state -2, fd=19, id=1 <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16980]: DBG:core:release_tcpconn: extra_data 0xb3ece068 <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: DBG:core:handle_tcp_child: reader response= b3ebdf50, -2 from 0 <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: DBG:core:tcpconn_destroy: destroying connection 0xb3ebdf50, flags 0002 <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: DBG:core:tls_close: closing SSL connection <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: DBG:core:tls_update_fd: New fd is 24 <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: DBG:core:tls_shutdown: shutdown successful <BR>
Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: DBG:core:tls_tcpconn_clean: entered <BR>
</SPAN> <BR>
<BR>
Regards<BR>
<BR>
Anil<BR>
<BR>
<BR> <BR>> Date: Thu, 23 Apr 2009 23:24:44 +0300<BR>> From: bogdan@voice-system.ro<BR>> To: anilpannikode@hotmail.com<BR>> CC: users@lists.opensips.org<BR>> Subject: Re: [OpenSIPS-Users] Trying to get TLS working with OpenSips 1.5<BR>> <BR>> Hi Anil,<BR>> <BR>> Typical error cases:<BR>> - the private key file does not exist or you do not have permission <BR>> to read that file<BR>> - the private key file is not in PEM (base64 encoded) format.<BR>> - if the private key file is encrypted, the password is not correct <BR>> or no password was provided<BR>> - if you loaded a certificate file before issuing this function, the <BR>> public key in that certificate does not match the corresponding private <BR>> key in the private key file.<BR>> <BR>> Regards,<BR>> Bogdan<BR>> <BR>> Anil M Pannikode (hotmail) wrote:<BR>> ><BR>> > I am getting the following error in the log files<BR>> ><BR>> > <BR>> ><BR>> > Apr 23 12:43:55 pc10-10-10-193 opensips: DBG:core:load_certificate: <BR>> > entered<BR>> ><BR>> > Apr 23 12:43:55 pc10-10-10-193 opensips: DBG:core:load_certificate: <BR>> > '//etc/opensips/tls/user/certonly.pem' successfuly loaded<BR>> ><BR>> > Apr 23 12:43:55 pc10-10-10-193 opensips: DBG:core:load_ca: Entered<BR>> ><BR>> > Apr 23 12:43:55 pc10-10-10-193 opensips: DBG:core:load_ca: CA <BR>> > '//etc/opensips/tls/user/user-calist.pem' successfuly loaded<BR>> ><BR>> > Apr 23 12:43:55 pc10-10-10-193 opensips: DBG:core:load_private_key: <BR>> > entered<BR>> ><BR>> > Apr 23 12:43:55 pc10-10-10-193 opensips: ERROR:core:load_private_key: <BR>> > unable to load private key file <BR>> > '//etc/opensips/tls/user/privatekey.pem'. Retry (2 left) (check <BR>> > password case)<BR>> ><BR>> > Apr 23 12:43:55 pc10-10-10-193 opensips: ERROR:core:load_private_key: <BR>> > unable to load private key file <BR>> > '//etc/opensips/tls/user/privatekey.pem'. Retry (1 left) (check <BR>> > password case)<BR>> ><BR>> > Apr 23 12:43:55 pc10-10-10-193 opensips: ERROR:core:load_private_key: <BR>> > unable to load private key file <BR>> > '//etc/opensips/tls/user/privatekey.pem'. Retry (0 left) (check <BR>> > password case)<BR>> ><BR>> > Apr 23 12:43:55 pc10-10-10-193 opensips: ERROR:core:load_private_key: <BR>> > unable to load private key file '//etc/opensips/tls/user/privatekey.pem'<BR>> ><BR>> > Apr 23 12:43:55 pc10-10-10-193 opensips: CRITICAL:core:main: could not <BR>> > initialize tls, exiting...<BR>> ><BR>> > Apr 23 12:43:55 pc10-10-10-193 opensips: DBG:dispatcher:destroy: <BR>> > destroying module ...<BR>> ><BR>> > <BR>> ><BR>> > Anybody know what the issues or where to set the password ?<BR>> ><BR>> > <BR>> ><BR>> > Anil<BR>> ><BR>> > <BR>> ><BR>> > ------------------------------------------------------------------------<BR>> ><BR>> > _______________________________________________<BR>> > Users mailing list<BR>> > Users@lists.opensips.org<BR>> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users<BR>> > <BR>> <BR><br /><hr />Create a cool, new character for your Windows Live™ Messenger. <a href='http://go.microsoft.com/?linkid=9656621' target='_new'>Check it out</a></body>
</html>