<div dir="ltr"><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="background-color:rgb(255,255,255)"><font color="#444444">Hi everyone,</font></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="background-color:rgb(255,255,255)"><font color="#444444"><br></font></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal">I'm trying to start opensips with a certificate generated by opensips-cli, like a tutorial. I have the following results keys after completing the command.<br></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="background-color:rgb(255,255,255)"><font color="#444444"><span style="font-variant-ligatures:no-common-ligatures">INFO</span><span style="font-variant-ligatures:no-common-ligatures">: user certificate created in /etc/opensips/tls/user/wss-cert.pem</span></font></span></p>
<p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="background-color:rgb(255,255,255)"><font color="#444444"><span style="font-variant-ligatures:no-common-ligatures">INFO</span><span style="font-variant-ligatures:no-common-ligatures">: user private key created in /etc/opensips/tls/user/wss-privkey.pem</span></font></span></p>
<p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="background-color:rgb(255,255,255)"><font color="#444444"><span style="font-variant-ligatures:no-common-ligatures">INFO</span><span style="font-variant-ligatures:no-common-ligatures">: user CA list (chain of trust) created in /etc/opensips/tls/user/wss-calist.pem</span></font></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font color="#444444"><br></font></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><font color="#444444"><span style="caret-color: rgb(68, 68, 68);">This is my configuration, in opensips.cfg: </span></font></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><span style="background-color:rgb(255,255,255)"><font color="#444444">modparam("tls_mgm", "server_domain", "wss")<br>modparam("tls_mgm", "match_ip_address","[wss]<a href="http://10.0.0.114:5443">10.0.0.114:5443</a>")<br>modparam("tls_mgm", "ca_dir", "[wss]/etc/opensips/tls/rootCA/certs") <br>modparam("tls_mgm", "ca_list", "[wss]/etc/opensips/tls/user/wss-calist.pem")<br>modparam("tls_mgm", "certificate","[wss]/etc/opensips/tls/user/wss-cert.pem")<br>modparam("tls_mgm", "private_key","[wss]/etc/opensips/tls/user/wss-privkey.pem")<br>modparam("tls_mgm", "verify_cert", "[wss]0")<br>modparam("tls_mgm", "require_cert", "[wss]0")<br>modparam("tls_mgm", "ciphers_list", "[wss]NULL")<br>modparam("tls_mgm", "tls_method", "[wss]TLSv1")</font></span><br></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><span style="background-color:rgb(255,255,255)"><font color="#444444"><br></font></span></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><span style="background-color:rgb(255,255,255)"><font color="#444444">So, when I start opensips, the log shows information saying the private key doesn't match with the public key. Follow the log:</font></span></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures"><span style="background-color:rgb(255,255,255)"><font color="#444444"><br></font></span></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font color="#000000">Mar 15 14:27:14 esbc01 opensips[80845]: Mar 15 14:27:14 [80845] ERROR:tls_openssl:load_private_key: unable to load private key file '/etc/opensips/tls/user/wss-privkey.pem'.</font></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font color="#000000">Mar 15 14:27:14 esbc01 opensips[80845]: Retry (2 left) (check password case)</font></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font color="#000000">Mar 15 14:27:14 esbc01 opensips[80845]: Mar 15 14:27:14 [80845] ERROR:tls_openssl:load_private_key: key '/etc/opensips/tls/user/wss-privkey.pem' does not match the public key of the certificate</font></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font color="#000000">Mar 15 14:27:14 esbc01 opensips[80845]: Mar 15 14:27:14 [80845] ERROR:tls_mgm:init_tls_domains: Failed to init TLS domain 'wss'</font></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font color="#000000">Mar 15 14:27:14 esbc01 opensips[80845]: Mar 15 14:27:14 [80845] ERROR:core:init_mod: failed to initialize module tls_mgm</font></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font color="#000000">Mar 15 14:27:14 esbc01 opensips[80845]: Mar 15 14:27:14 [80845] ERROR:core:main: error while initializing modules</font></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font color="#000000"> </font></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font color="#000000">All procedures to create my own certificate follow the tutorial.  </font></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font color="#000000"><br></font></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font color="#000000">Anyone know what is happening or have any problems like me? </font></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font color="#000000"><br></font></span></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><font color="#000000"><span style="caret-color: rgb(0, 0, 0);">BR</span></font></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><font color="#000000"><span style="caret-color: rgb(0, 0, 0);"><br></span></font></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><font color="#000000"><span style="caret-color: rgb(0, 0, 0);">RP</span></font></p><p style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span style="font-variant-ligatures:no-common-ligatures">





<br class="gmail-Apple-interchange-newline"></span></p></div>