Re: [OpenSIPS-Users] opensips-cli skipping module tls

[L S]

Hi Razvan,
They don't match. Not sure if sth on my end causing this problem. I was
using opensips-cli only to create the certificates.

Anyway I used openssl directly instead to create the CA and server
certificates. They are working fine.

Thanks,
Matt

On Wed, Sep 27, 2023, 9:50 AM Răzvan Crainea  wrote:

> Can you actually check that the two (private key and certificate) match?
>
> https://www.ibm.com/support/pages/how-verify-if-private-key-matches-certificate
>
> Best regards,
>
> Răzvan Crainea
> OpenSIPS Core Developer / SIPhub CTO
> http://www.opensips-solutions.com / https://www.siphub.com
>
> On 9/26/23 19:54, L S wrote:
> > Thanks Razvan. Installing the cryptography module fixed it - I was able
> > to run both -x tls rootCA and userCERT, and create the certificates.
> >
> > However, when I start Opensips, I get the following error:
> > ERROR:tls_wolfssl:load_private_key: key
> > '/usr/local/etc/opensips/tls/server/privkey.pem' does not match the
> > public key of the certificate
> >
> > I tried creating the certificates both on Centos 7 and Ubuntu Focal, and
> > they both gave the same error.
> > The data for the certificates comes from opensips-cli.cfg. I had created
> > certificates with that cfg 3 months ago, and used in Opensips script
> > without any issues.
> >   I only changed the domain name this time.
> >
> > Any suggestions?
> > Thanks,
> > Matt
> >
> >
> > On Tue, Sep 26, 2023, 9:56 AM Răzvan Crainea  > > wrote:
> >
> > Can you double check whether you have the python-openssl or
> > python-cryptography libraries?
> >
> > Best regards,
> >
> > Răzvan Crainea
> > OpenSIPS Core Developer / SIPhub CTO
> > http://www.opensips-solutions.com
> >  / https://www.siphub.com
> > 
> >
> > On 9/26/23 16:38, L S wrote:
> >  > I'm trying to create certificates using opensips-cli:
> >  >
> >  > opensips-cli - f /usr/local/etc/opensips-cli.cfg -d -x tls rootCA
> >  > DEBUG: Skipping module 'tls' - excluded on purpose
> >  >
> >  > ERROR: No module 'tls' loaded
> >  >
> >  > Trying to find out why I am getting this message now - it used to
> > work
> >  > fine. All other modules are loaded.
> >  >
> >  > Thaks,
> >  > Matt
> >  >
> >  > ___
> >  > Users mailing list
> >  > Users@lists.opensips.org 
> >  > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
> > 
> >
> > ___
> > Users mailing list
> > Users@lists.opensips.org 
> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
> > 
> >
> >
> > ___
> > Users mailing list
> > Users@lists.opensips.org
> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
> ___
> Users mailing list
> Users@lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] opensips-cli skipping module tls

[Răzvan Crainea]

Can you actually check that the two (private key and certificate) match?
https://www.ibm.com/support/pages/how-verify-if-private-key-matches-certificate

Best regards,

Răzvan Crainea
OpenSIPS Core Developer / SIPhub CTO
http://www.opensips-solutions.com / https://www.siphub.com

On 9/26/23 19:54, L S wrote:
Thanks Razvan. Installing the cryptography module fixed it - I was able 
to run both -x tls rootCA and userCERT, and create the certificates.


However, when I start Opensips, I get the following error:
ERROR:tls_wolfssl:load_private_key: key 
'/usr/local/etc/opensips/tls/server/privkey.pem' does not match the 
public key of the certificate


I tried creating the certificates both on Centos 7 and Ubuntu Focal, and 
they both gave the same error.
The data for the certificates comes from opensips-cli.cfg. I had created 
certificates with that cfg 3 months ago, and used in Opensips script 
without any issues.

  I only changed the domain name this time.

Any suggestions?
Thanks,
Matt


On Tue, Sep 26, 2023, 9:56 AM Răzvan Crainea > wrote:


Can you double check whether you have the python-openssl or
python-cryptography libraries?

Best regards,

Răzvan Crainea
OpenSIPS Core Developer / SIPhub CTO
http://www.opensips-solutions.com
 / https://www.siphub.com


On 9/26/23 16:38, L S wrote:
 > I'm trying to create certificates using opensips-cli:
 >
 > opensips-cli - f /usr/local/etc/opensips-cli.cfg -d -x tls rootCA
 > DEBUG: Skipping module 'tls' - excluded on purpose
 >
 > ERROR: No module 'tls' loaded
 >
 > Trying to find out why I am getting this message now - it used to
work
 > fine. All other modules are loaded.
 >
 > Thaks,
 > Matt
 >
 > ___
 > Users mailing list
 > Users@lists.opensips.org 
 > http://lists.opensips.org/cgi-bin/mailman/listinfo/users


___
Users mailing list
Users@lists.opensips.org 
http://lists.opensips.org/cgi-bin/mailman/listinfo/users



___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users


___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] opensips-cli skipping module tls

[L S]

I apologize if this is a duplicate post - ran into some errors while
posting the first time.

Thanks Razvan. Installing cryptography fixed that issue. I was able to run
-x tls rootCA and userCERT, and create the certificates.

However, when running Opensips I get this error now:

ERROR:tls_wolfssl:load_private_key: key
'/usr/local/etc/opensips/tls/server/privkey.pem' does not match the public
key of the certificate

I had created and used certificates with opensips-cli before without any
issues. Opensips-cli.cfg is the same except for a small change to CN. All
the paths are the same as before and correct.

I compared the modulus of the server private key to the public key using
openssl, and they are different. Btw I created certificates both in Centos
7 and Ubuntu Focal just to see if it matters; got the same error for both.

Any ideas why this is happening?

Thanks,
Matt

On Tue, Sep 26, 2023, 9:56 AM Răzvan Crainea  wrote:

> Can you double check whether you have the python-openssl or
> python-cryptography libraries?
>
> Best regards,
>
> Răzvan Crainea
> OpenSIPS Core Developer / SIPhub CTO
> http://www.opensips-solutions.com / https://www.siphub.com
>
> On 9/26/23 16:38, L S wrote:
> > I'm trying to create certificates using opensips-cli:
> >
> > opensips-cli - f /usr/local/etc/opensips-cli.cfg -d -x tls rootCA
> > DEBUG: Skipping module 'tls' - excluded on purpose
> >
> > ERROR: No module 'tls' loaded
> >
> > Trying to find out why I am getting this message now - it used to work
> > fine. All other modules are loaded.
> >
> > Thaks,
> > Matt
> >
> > ___
> > Users mailing list
> > Users@lists.opensips.org
> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
> ___
> Users mailing list
> Users@lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] opensips-cli skipping module tls

[L S]

Thanks Razvan. Installing the cryptography module fixed it - I was able to
run both -x tls rootCA and userCERT, and create the certificates.

However, when I start Opensips, I get the following error:
ERROR:tls_wolfssl:load_private_key: key
'/usr/local/etc/opensips/tls/server/privkey.pem' does not match the public
key of the certificate

I tried creating the certificates both on Centos 7 and Ubuntu Focal, and
they both gave the same error.
The data for the certificates comes from opensips-cli.cfg. I had created
certificates with that cfg 3 months ago, and used in Opensips script
without any issues.
 I only changed the domain name this time.

Any suggestions?
Thanks,
Matt


On Tue, Sep 26, 2023, 9:56 AM Răzvan Crainea  wrote:

> Can you double check whether you have the python-openssl or
> python-cryptography libraries?
>
> Best regards,
>
> Răzvan Crainea
> OpenSIPS Core Developer / SIPhub CTO
> http://www.opensips-solutions.com / https://www.siphub.com
>
> On 9/26/23 16:38, L S wrote:
> > I'm trying to create certificates using opensips-cli:
> >
> > opensips-cli - f /usr/local/etc/opensips-cli.cfg -d -x tls rootCA
> > DEBUG: Skipping module 'tls' - excluded on purpose
> >
> > ERROR: No module 'tls' loaded
> >
> > Trying to find out why I am getting this message now - it used to work
> > fine. All other modules are loaded.
> >
> > Thaks,
> > Matt
> >
> > ___
> > Users mailing list
> > Users@lists.opensips.org
> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
> ___
> Users mailing list
> Users@lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] opensips-cli skipping module tls

[Răzvan Crainea]

Can you double check whether you have the python-openssl or 
python-cryptography libraries?


Best regards,

Răzvan Crainea
OpenSIPS Core Developer / SIPhub CTO
http://www.opensips-solutions.com / https://www.siphub.com

On 9/26/23 16:38, L S wrote:

I'm trying to create certificates using opensips-cli:

opensips-cli - f /usr/local/etc/opensips-cli.cfg -d -x tls rootCA
DEBUG: Skipping module 'tls' - excluded on purpose

ERROR: No module 'tls' loaded

Trying to find out why I am getting this message now - it used to work 
fine. All other modules are loaded.


Thaks,
Matt

___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users


___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

[OpenSIPS-Users] opensips-cli skipping module tls

[L S]

I'm trying to create certificates using opensips-cli:

opensips-cli - f /usr/local/etc/opensips-cli.cfg -d -x tls rootCA
DEBUG: Skipping module 'tls' - excluded on purpose

ERROR: No module 'tls' loaded

Trying to find out why I am getting this message now - it used to work
fine. All other modules are loaded.

Thaks,
Matt
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users