<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><font color="#2672EC">It will be a great help if you please help me in configuring TLS. I have followed <a href="http://www.opensips.org/Documentation/Tutorials-TLS-2-1">this</a> to configure TLS but could not able to verify certificates.</font><div><font color="#2672EC"><br></font></div><div><font color="#2672EC">its working if disable following flags</font></div><div><font color="#2672EC"><br></font></div><div><font face="Courier New, sans-serif">modparam("proto_tls","verify_cert", "0")</font></div><div><font face="Courier New, sans-serif">modparam("proto_tls","require_cert", "0")</font></div><div><font color="#2672EC"><br></font></div><div><font color="#2672EC">BUT not verifying certificates. Please see <a href="http://pastebin.com/qmXZjSy2">logs</a> if enabled</font></div><div><font color="#2672EC"><br></font></div><div><font face="Courier New, sans-serif">modparam("proto_tls","verify_cert", "1")</font></div><div><font face="Courier New, sans-serif">modparam("proto_tls","require_cert", "1")</font></div><div><font color="#2672EC"><br></font></div><div><font color="#2672EC">then have following ERROR</font></div><div><font color="#2672EC"><br></font></div><pre style="box-sizing: border-box; overflow: auto; font-family: Consolas, 'Liberation Mono', Menlo, Courier, monospace; font-size: 11.9px; margin-bottom: 16px; font-stretch: normal; line-height: 1.45; padding: 16px; border-radius: 3px; word-wrap: normal; color: rgb(51, 51, 51); margin-top: 0px !important; background-color: rgb(247, 247, 247);"><code style="box-sizing: border-box; font-family: Consolas, 'Liberation Mono', Menlo, Courier, monospace; font-size: 11.9px; padding: 0px; margin: 0px; border-radius: 3px; word-break: normal; border: 0px; display: inline; max-width: initial; overflow: initial; line-height: inherit; word-wrap: normal; background: transparent;">Feb 9 05:57:14 comoyo-dev-ec2-siplb SIPLB[29867]: [udp:keepalive@192.168.26.181:8000]: Receive request OPTIONS from local server [192.168.26.181]
Feb 9 05:57:14 comoyo-dev-ec2-siplb SIPLB[29868]: ERROR:proto_tls:tls_accept: New TLS connection from 115.186.93.1:47015 failed to accept: rejected by client
Feb 9 05:57:14 comoyo-dev-ec2-siplb SIPLB[29868]: ERROR:proto_tls:tls_read_req: failed to do pre-tls reading
Feb 9 05:57:17 comoyo-dev-ec2-siplb SIPLB[29863]: [tcp:siplb@192.168.26.180:6080]: In LOCAL Route sending OPTIONS to 192.168.26.181
Feb 9 05:57:17 comoyo-dev-ec2-siplb SIPLB[29863]: INFO:core:probe_max_sock_buff: using snd buffer of 244 kb
Feb 9 05:57:17 comoyo-dev-ec2-siplb SIPLB[29863]: INFO:core:init_sock_keepalive: TCP keepalive enabled on socket 17 </code><span style="color: rgb(38, 114, 236); font-family: Calibri, sans-serif; font-size: 12pt;"> </span></pre><div>Regards<br><b><font color="#5133ab" face="Times New Roman" size="3"><i>Hamid R. Hashmi</i></font></b><div><br></div></div> </div></body>
</html>