<div dir="ltr"><div>To me that sounds like a bug ... <br></div><div>you should be able to put certificates where you want, not only in  the opensips etc subdirectory. <br></div><div><br></div><div>BR, <br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Op ma 29 apr. 2019 om 21:16 schreef Mikhail <<a href="mailto:forfx@yandex.ru">forfx@yandex.ru</a>>:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">John, thanks a lot!<br>
<br>
really the are two nuances:<br>
<br>
1. certificates must be in any subdir of /etc/opensips/tls/<br>
<br>
2. it should be a real files, not symlinks.<br>
<br>
<br>
I already thought about subdir, but put symlinks in it  :)<br>
<br>
<br>
I wonder why in the tutorial <br>
<a href="https://www.opensips.org/Documentation/Tutorials-WebSocket-2-2" rel="noreferrer" target="_blank">https://www.opensips.org/Documentation/Tutorials-WebSocket-2-2</a> there is <br>
a wrong example:<br>
<br>
# modparam our certificate information<br>
modparam("tls_mgm", "certificate","/etc/letsencrypt/live/<a href="http://acme.com/cert.pem" rel="noreferrer" target="_blank">acme.com/cert.pem</a>")<br>
modparam("tls_mgm", "private_key","/etc/letsencrypt/live/<a href="http://acme.com/privkey.pem" rel="noreferrer" target="_blank">acme.com/privkey.pem</a>")<br>
<br>
may be that was right for the previous opensips versions?<br>
<br>
<br>
Laba Mikhail<br>
<br>
29.04.2019 20:51, John Kiniston пишет:<br>
><br>
><br>
> On Mon, Apr 29, 2019 at 4:28 AM Mikhail <<a href="mailto:forfx@yandex.ru" target="_blank">forfx@yandex.ru</a> <br>
> <mailto:<a href="mailto:forfx@yandex.ru" target="_blank">forfx@yandex.ru</a>>> wrote:<br>
><br>
><br>
>     modparam("tls_mgm",<br>
>     "certificate","/etc/letsencrypt/live/<a href="http://ws.mysite.com/fullchain.pem" rel="noreferrer" target="_blank">ws.mysite.com/fullchain.pem</a><br>
>     <<a href="http://ws.mysite.com/fullchain.pem" rel="noreferrer" target="_blank">http://ws.mysite.com/fullchain.pem</a>>")<br>
>     modparam("tls_mgm",<br>
>     "private_key","/etc/letsencrypt/live/<a href="http://ws.mysite.com/privkey.pem" rel="noreferrer" target="_blank">ws.mysite.com/privkey.pem</a><br>
>     <<a href="http://ws.mysite.com/privkey.pem" rel="noreferrer" target="_blank">http://ws.mysite.com/privkey.pem</a>>")<br>
><br>
><br>
><br>
> Try copying the fullchain.pem and privkey.pem to /etc/opensips/tls and <br>
> changing the path to find them there.<br>
><br>
> I believe I had issues trying to use letsencrypt certificates, I think <br>
> it had to do with the symlinks in /etc/letsencrypt causing problems.<br>
><br>
><br>
> _______________________________________________<br>
> Users mailing list<br>
> <a href="mailto:Users@lists.opensips.org" target="_blank">Users@lists.opensips.org</a><br>
> <a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
<br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opensips.org" target="_blank">Users@lists.opensips.org</a><br>
<a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
</blockquote></div>