<div dir="ltr">Looks like the domain name you are using is not matching with the certificate name. <div>I have also noticed you are using tlsv1, better to generate the certificate with tlsv1.2 or tlsv1.3</div><div><br></div><div><br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div>Regards,</div>
<div>Jehanzaib</div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Nov 23, 2021 at 1:58 AM Devang Dhandhalya <<a href="mailto:devang.dhandhalya@ecosmob.com">devang.dhandhalya@ecosmob.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hello vlad<br><br>Thanks for your response ,I used this command to check connection :openssl s_client -showcerts -debug -connect <a href="http://192.168.0.105:5071" target="_blank">192.168.0.105:5071</a> -bugs .<br>Please let me know if there are any other commands to check .<br><br>CONNECTED(00000005)<br>write to 0x561a52aa46b0 [0x561a52ab4eb0] (517 bytes => 517 (0x205))<br>140663188505024:error:14094458:SSL routines:ssl3_read_bytes:tlsv1 unrecognized name:../ssl/record/rec_layer_s3.c:1528:SSL alert number 112<br>---<br>no peer certificate available<br>---<br>No client certificate CA names sent<br>---<br>SSL handshake has read 7 bytes and written 517 bytes<br>Verification: OK<br>---<br>New, (NONE), Cipher is (NONE)<br>Secure Renegotiation IS NOT supported<br>Compression: NONE<br>Expansion: NONE<br>No ALPN negotiated<br>Early data was not sent<br>Verify return code: 0 (ok)<br>---<br><br>In this TLS connection i am getting one error :<br>140663188505024:error:14094458:SSL routines:ssl3_read_bytes:tlsv1 unrecognized name:../ssl/record/rec_layer_s3.c:1528:SSL alert number 112<br><br>Can you please give some suggestions on this .<br><br>OpenSIPS starts successfully without errors and the following command shows listening on the correct port:<br>netstat -tapen | grep 5071<br>tcp 0 0 <a href="http://192.168.0.105:5071" target="_blank">192.168.0.105:5071</a> 0.0.0.0:* LISTEN 0 87130 9179/opensips<br><br>I made some changes in the tls configuration . other than this same as before .<br><br>socket=udp:<a href="http://192.168.0.105:5060" target="_blank">192.168.0.105:5060</a> as <a href="http://devang.com:5060" target="_blank">devang.com:5060</a><br>socket=tcp:<a href="http://192.168.0.105:5060" target="_blank">192.168.0.105:5060</a> as <a href="http://devang.com:5060" target="_blank">devang.com:5060</a><br>socket=tls:<a href="http://192.168.0.105:5071" target="_blank">192.168.0.105:5071</a> as <a href="http://devang.com:5071" target="_blank">devang.com:5071</a><br><br>modparam("tls_mgm", "match_ip_address", "[dom1]<a href="http://1.2.3.4:5071" target="_blank">1.2.3.4:5071</a>")<br><br><br>At the time of calling, I get this error .<br><br>ERROR:tls_openssl:openssl_tls_async_connect: New TLS connection to <a href="http://192.168.0.105:44853" target="_blank">192.168.0.105:44853</a> failed<br>ERROR:tls_openssl:openssl_tls_async_connect: TLS error: 1 (ret=-1) err=Success(0)<br>ERROR:tls_openssl:tls_print_errstack: TLS errstack: error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure<br>ERROR:proto_tls:tls_read_req: failed to do pre-tls handshake!<br><br>I tried setting all the tls version methods as 'tls_method' in opensips config but the same error occurred. Please advise how to resolve this SSL23 handshake failure.<br><br>Regards <br>Devang Dhandhalya<br></div>
<br>
<div><font face="Arial" size="2" style="background-color:white" color="#808080"><b>Disclaimer</b></font></div><div><div><span style="background-color:white;color:rgb(128,128,128);font-family:Arial;font-size:small">In addition to generic Disclaimer which you have agreed on our website, any views or opinions presented in this email are solely those of the originator and do not necessarily represent those of the Company or its sister concerns. Any liability (in negligence, contract or otherwise) arising from any third party taking any action, or refraining from taking any action on the basis of any of the information contained in this email is hereby excluded.</span></div></div><div><span style="background-color:white;color:rgb(128,128,128);font-family:Arial;font-size:small"><br></span></div><div><font face="Arial" size="2" style="background-color:white" color="#808080"><b>Confidentiality</b></font></div><div><font face="Arial" size="2" style="background-color:white" color="#808080">This communication (including any attachment/s) is intended only for the use of the addressee(s) and contains information that is PRIVILEGED AND CONFIDENTIAL. Unauthorized reading, dissemination, distribution, or copying of this communication is prohibited. Please inform originator if you have received it in error.</font></div><div><font face="Arial" size="2" style="background-color:white" color="#808080"><br></font></div><div><span style="background-color:white;color:rgb(128,128,128);font-family:Arial;font-size:small"><b>Caution for viruses, malware etc.</b></span></div><div><font face="Arial" size="2" style="background-color:white" color="#808080">This communication, including any attachments, may not be free of viruses, trojans, similar or new contaminants/malware, interceptions or interference, and may not be compatible with your systems. You shall carry out virus/malware scanning on your own before opening any attachment to this e-mail. The sender of this e-mail and Company including its sister concerns shall not be liable for any damage that may incur to you as a result of viruses, incompleteness of this message, a delay in receipt of this message or any other computer problems. </font></div>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opensips.org" target="_blank">Users@lists.opensips.org</a><br>
<a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
</blockquote></div>