I am able to resolve the tls sni issue with this setting finally.
```
[server:default]
method = TLSv1.2+
verify_certificate = yes
require_certificate = yes
private_key = /etc/letsencrypt/live/abcsbc.com/privkey.pem
certificate = /etc/letsencrypt/live/abcsbc.com/fullchain.pem
ca_list = /etc/kamailio/ca_list.pem
#ca_list = /etc/letsencrypt/live/abcsbc.com/cert.pem
[server:172.31.19.8:5061]
method = TLSv1.2+
verify_certificate = yes
require_certificate = yes
private_key = /etc/letsencrypt/live/abcsbc.com/privkey.pem
certificate = /etc/letsencrypt/live/abcsbc.com/fullchain.pem
ca_list = /etc/kamailio/ca_list.pem
server_name = localhost
[client:default]
method = TLSv1.2+
verify_certificate = no
require_certificate = no
server_name = abcsbc.com
[client:172.31.19.8:5061]
method = TLSv1.2+
verify_certificate = yes
require_certificate = yes
private_key = /etc/letsencrypt/live/abcsbc.com/privkey.pem
certificate = /etc/letsencrypt/live/abcsbc.com/fullchain.pem
ca_list = /etc/kamailio/ca_list.pem
server_name = localhost
server_id = localhost
#private_key = /etc/letsencrypt/live/abcsbc.com/privkey.pem
#certificate = /etc/letsencrypt/live/abcsbc.com/fullchain.pem
#ca_list = /etc/kamailio/ca_list.pem
#ca_list = /etc/letsencrypt/live/abcsbc.com/cert.pem
```
But now the thing to worry is my dispatcher flag goes from AX to IP. :(
kamcmd dispatcher.list | egrep "URI|FLAGS"
URI:
sip:sip.pstnhub.microsoft.com:5061;transport=tls
FLAGS: IP
URI:
sip:sip2.pstnhub.microsoft.com:5061;transport=tls
FLAGS: IP
URI:
sip:sip3.pstnhub.microsoft.com:5061;transport=tls
FLAGS: IP
why ?
--
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/3675#issuecomment-1856359647
You are receiving this because you commented.
Message ID: <kamailio/kamailio/issues/3675/[email protected]>_______________________________________________
Kamailio (SER) - Development Mailing List
To unsubscribe send an email to [email protected]
