<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<font face="monospace">Hi,<br>
<br>
I see the root problem is OpenSIPS failing to load the private key
file - I see some log about password case. So, when you generated
the key, have you set a password for it?<br>
<br>
Regards<br>
</font>
<pre class="moz-signature" cols="72">Bogdan-Andrei Iancu
OpenSIPS Founder and Developer
<a class="moz-txt-link-freetext" href="https://www.opensips-solutions.com">https://www.opensips-solutions.com</a>
<a class="moz-txt-link-freetext" href="https://www.siphub.com">https://www.siphub.com</a></pre>
<div class="moz-cite-prefix">On 15.03.2024 19:35, Rodrigo R Passos
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAF9oA8=paVY5gszDNiBomwUvFY1kJsBUa+i6zaB=je37o_9S=A@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="background-color:rgb(255,255,255)"><font
color="#444444">Hi everyone,</font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="background-color:rgb(255,255,255)"><font
color="#444444"><br>
</font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal">I'm
trying to start opensips with a certificate generated by
opensips-cli, like a tutorial. I have the following results
keys after completing the command.<br>
</p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="background-color:rgb(255,255,255)"><font
color="#444444"><span
style="font-variant-ligatures:no-common-ligatures">INFO</span><span
style="font-variant-ligatures:no-common-ligatures">:
user certificate created in
/etc/opensips/tls/user/wss-cert.pem</span></font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="background-color:rgb(255,255,255)"><font
color="#444444"><span
style="font-variant-ligatures:no-common-ligatures">INFO</span><span
style="font-variant-ligatures:no-common-ligatures">:
user private key created in
/etc/opensips/tls/user/wss-privkey.pem</span></font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="background-color:rgb(255,255,255)"><font
color="#444444"><span
style="font-variant-ligatures:no-common-ligatures">INFO</span><span
style="font-variant-ligatures:no-common-ligatures">:
user CA list (chain of trust) created in
/etc/opensips/tls/user/wss-calist.pem</span></font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font
color="#444444"><br>
</font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><font
color="#444444"><span style="caret-color: rgb(68, 68, 68);">This
is my configuration, in opensips.cfg: </span></font></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures"><span
style="background-color:rgb(255,255,255)"><font
color="#444444">modparam("tls_mgm", "server_domain",
"wss")<br>
modparam("tls_mgm", "match_ip_address","[wss]<a
href="http://10.0.0.114:5443" moz-do-not-send="true">10.0.0.114:5443</a>")<br>
modparam("tls_mgm", "ca_dir",
"[wss]/etc/opensips/tls/rootCA/certs") <br>
modparam("tls_mgm", "ca_list",
"[wss]/etc/opensips/tls/user/wss-calist.pem")<br>
modparam("tls_mgm",
"certificate","[wss]/etc/opensips/tls/user/wss-cert.pem")<br>
modparam("tls_mgm",
"private_key","[wss]/etc/opensips/tls/user/wss-privkey.pem")<br>
modparam("tls_mgm", "verify_cert", "[wss]0")<br>
modparam("tls_mgm", "require_cert", "[wss]0")<br>
modparam("tls_mgm", "ciphers_list", "[wss]NULL")<br>
modparam("tls_mgm", "tls_method", "[wss]TLSv1")</font></span><br>
</span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures"><span
style="background-color:rgb(255,255,255)"><font
color="#444444"><br>
</font></span></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures"><span
style="background-color:rgb(255,255,255)"><font
color="#444444">So, when I start opensips, the log shows
information saying the private key doesn't match with
the public key. Follow the log:</font></span></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures"><span
style="background-color:rgb(255,255,255)"><font
color="#444444"><br>
</font></span></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font
color="#000000">Mar 15 14:27:14 esbc01 opensips[80845]:
Mar 15 14:27:14 [80845]
ERROR:tls_openssl:load_private_key: unable to load private
key file '/etc/opensips/tls/user/wss-privkey.pem'.</font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font
color="#000000">Mar 15 14:27:14 esbc01 opensips[80845]:
Retry (2 left) (check password case)</font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font
color="#000000">Mar 15 14:27:14 esbc01 opensips[80845]:
Mar 15 14:27:14 [80845]
ERROR:tls_openssl:load_private_key: key
'/etc/opensips/tls/user/wss-privkey.pem' does not match
the public key of the certificate</font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font
color="#000000">Mar 15 14:27:14 esbc01 opensips[80845]:
Mar 15 14:27:14 [80845] ERROR:tls_mgm:init_tls_domains:
Failed to init TLS domain 'wss'</font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font
color="#000000">Mar 15 14:27:14 esbc01 opensips[80845]:
Mar 15 14:27:14 [80845] ERROR:core:init_mod: failed to
initialize module tls_mgm</font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font
color="#000000">Mar 15 14:27:14 esbc01 opensips[80845]:
Mar 15 14:27:14 [80845] ERROR:core:main: error while
initializing modules</font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font
color="#000000"> </font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font
color="#000000">All procedures to create my own
certificate follow the tutorial. </font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font
color="#000000"><br>
</font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font
color="#000000">Anyone know what is happening or have any
problems like me? </font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures;background-color:rgb(255,255,255)"><font
color="#000000"><br>
</font></span></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><font
color="#000000"><span style="caret-color: rgb(0, 0, 0);">BR</span></font></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><font
color="#000000"><span style="caret-color: rgb(0, 0, 0);"><br>
</span></font></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><font
color="#000000"><span style="caret-color: rgb(0, 0, 0);">RP</span></font></p>
<p
style="margin:0px;font-stretch:normal;font-size:10px;line-height:normal;font-family:Monaco;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-settings:normal"><span
style="font-variant-ligatures:no-common-ligatures">
<br class="gmail-Apple-interchange-newline">
</span></p>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a>
<a class="moz-txt-link-freetext" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a>
</pre>
</blockquote>
<br>
</body>
</html>