Alexandru Covalschi writes:
Can you please specify how to include multiple certs into ca list?
on debian:
cat /etc/ss/certs/* ca_list
-- juha
___
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@lists.sip-router.org
Alexandru Covalschi writes:
Any way of specifiying all popular certification centers it default calist?
Shouldn't it use those which already exist in the system?
(/etc/ssl/...)
I once tried to include all that are in /etc/ssl/certs/. If I remember
correctly, Kamailio used lots of memory
When your server contacts the public server, your server acts as a tls client.
So you may need to copy the server section settings (at least the calist) into
the client section of tls.cfg.
Sent from my iPhone
On Aug 28, 2015, at 12:01 PM, Alexandru Covalschi 568...@gmail.com wrote:
Hello!
Hello!
I'm having problems with Kamailio configuration with TLS. Or, maybe, that's
my misunderstanding about how it should work.
So, the issue - inbound TLS works just great, I can call everyone in my
domain. I have PositiveSSL certificate, so I have such files:
calist.crt
Forgot to add
cat /etc/issue
Debian GNU/Linux 8 \n \l
kamailio -V
version: kamailio 4.3.1 (x86_64/linux)
flags: STATS: Off, USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS,
DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MEM, SHM_MMAP, PKG_MALLOC,
F_MALLOC, DBG_F_MALLOC, USE_FUTEX,
And server is under Amazon EC2, but that shouldn't really make any sense
2015-08-29 0:11 GMT+03:00 Alexandru Covalschi 568...@gmail.com:
Forgot to add
cat /etc/issue
Debian GNU/Linux 8 \n \l
kamailio -V
version: kamailio 4.3.1 (x86_64/linux)
flags: STATS: Off, USE_TCP, USE_TLS, USE_SCTP,