Re: [asterisk-users] Asterisk 16.14.0 pjsip transport-tls cert parsing error

2021-02-01 Thread Ruisheng Peng
Thanks Sean for the note. It does look Selinux might have a hand in the pot. I did try with selinux permission set to permissive and it made no difference though. Keeping configuration related stuff under /etc/asterisk seems to help. --Ruisheng On Mon, Feb 1, 2021 at 8:09 AM Sean Bright

Re: [asterisk-users] Asterisk 16.14.0 pjsip transport-tls cert parsing error

2021-02-01 Thread Ruisheng Peng
Michael, There weren't any open or openat actions on the cert files (located under /home/asterisk/certs). The same is true for cert files located under /etc/asterisk/keys: 24138 stat("/etc/asterisk/keys/fullchain.pem", {st_mode=S_IFREG|0640, st_size=34 44, ...}) = 0 24138 geteuid()

Re: [asterisk-users] Asterisk 16.14.0 pjsip transport-tls cert parsing error

2021-02-01 Thread Sean Bright
Hi, On 1/26/2021 3:12 PM, Ruisheng Peng wrote: Transport: transport-tls: cert_file /home/asterisk/certs/asterisk.crt is either missing or not readable This error means that the file either does not exist or that Asterisk is not able to open it for reading. In your case it looks like the file