<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:11.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hello Team, sorry to bother you again, opensips ssl certificate are not working on port 5061. I check with an SSL Checker and returns
<b>No SSL certificates were found on [server:5061]<o:p></o:p></b></p>
<p class="MsoNormal"><o:p></o:p></p>
<p class="MsoNormal">I’m using version 3.2.18 (it was the same issue with 3.4.5) certificate are generated with letsencrypt<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This is the modparam<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">modparam("tls_mgm","tls_library", "openssl")<o:p></o:p></p>
<p class="MsoNormal">modparam("tls_mgm","server_domain", "dom")<o:p></o:p></p>
<p class="MsoNormal">modparam("tls_mgm","match_ip_address", "[dom]*")<o:p></o:p></p>
<p class="MsoNormal">modparam("tls_mgm","verify_cert", "[dom]1")<o:p></o:p></p>
<p class="MsoNormal">modparam("tls_mgm","require_cert", "[dom]1")<o:p></o:p></p>
<p class="MsoNormal">modparam("tls_mgm","tls_method", "[dom]-TLSv1_2")<o:p></o:p></p>
<p class="MsoNormal">modparam("tls_mgm","certificate", "[dom]/etc/opensips/tls/user/user-cert.pem")<o:p></o:p></p>
<p class="MsoNormal">modparam("tls_mgm","private_key", "[dom]/etc/opensips/tls/user/user-privkey.pem")<o:p></o:p></p>
<p class="MsoNormal">modparam("tls_mgm","ca_list", "[dom]/etc/opensips/tls/user/user-calist.pem")<o:p></o:p></p>
<p class="MsoNormal">modparam("tls_mgm", "require_cert", "1")<o:p></o:p></p>
<p class="MsoNormal">modparam("tls_mgm", "verify_cert", "1")<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I tried this <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">modparam("tls_mgm","certificate", "[dom]/etc/letsencrypt/live/domain/fullchain.pem")<o:p></o:p></p>
<p class="MsoNormal">modparam("tls_mgm","private_key", "[dom]/etc/letsencrypt/live/domain/privkey.pem")<o:p></o:p></p>
<p class="MsoNormal">modparam("tls_mgm","ca_list", "[dom]/etc/letsencrypt/live/domain/chain.pem")<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">but returns permission error message and couldn’t start opensips (even if I set the permission of all files in etc/letsencryt to opensips user and group as well.)<br>
<br>
Thank you. P.K<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>