Hi Liviu , Yesterday we tried the same thing . I have added ca_list in the opensips config which resolved the tls error . Corresponding to ca_list I have added /etc/ssl/certs/ca_certificates.crt (This file is present in the linux server . I have not created this one . )
Before 5year I have tried the same kind of TLS connection with opensips 2.4 and that was working fine without adding the ca_list in the config file . Hence I was expecting the same here with 3.2 as well . But that didn't work here . What can be the reason for this ? You are right , with basic openssl commands also I am able to establish a TLS connection which I was not verified earlier . Thank you once again . *Thanks & Regards* *Sasmita Panda* *Senior Network Testing and Software Engineer* *3CLogic , ph:07827611765* On Thu, Sep 5, 2024 at 1:20 PM Liviu Chircu <[email protected]> wrote: > On 30.08.2024 14:57, Sasmita Panda wrote: > > > With this configuration when I place an outbound call I am > getting below error in the logs . I don't have the certificate and key of > the next party . How can I authorized this certificate the > provide on opensips end ? > > Hi Sasmita, > > Try also setting the ca_list > <https://opensips.org/docs/modules/3.6.x/tls_mgm.html#param_ca_list> and > ca_dir <https://opensips.org/docs/modules/3.6.x/tls_mgm.html#param_ca_dir> > modparams and see if the CA is finally located, because that seems to be > the error here. > > Moreover, if you are still stuck on this, why not start with the *basics*? > Forget about OpenSIPS and its TLS wrappers until you are 100% sure you have > the right configuration files and try to establish the TLS connection / > exchange a few packets *manually*, from command-line, using a tutorial such > as this one > <https://djangocas.dev/blog/test-tls-connectivity-with-openssl/>. > > Hope this helps, > > -- > Liviu Chircuwww.twitter.com/liviuchircu | www.opensips-solutions.com > >
_______________________________________________ Users mailing list [email protected] http://lists.opensips.org/cgi-bin/mailman/listinfo/users
