This is my tls.cfg for server
[server:default] method = TLSv1 verify_certificate = no require_certificate = no private_key = /etc/asterisk/certs/proxy.key certificate = /etc/asterisk/certs/proxy.crt As far as I understand (verify_certificate = no), and (require_certificate = no) should allow a client connecting without certicates. Can anyone understand what this debug indicates What is causes this error tls_read_f(): TLS read:error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca 7(14841) DEBUG: tls [tls_server.c:178]: tls_complete_init(): Using TLS domain TLSs<default> 7(14841) DEBUG: tls [tls_domain.c:609]: sr_ssl_ctx_info_callback(): SSL handshake started 7(14841) DEBUG: <core> [tcp_main.c:2556]: tcpconn_do_send(): tcp_send: sending... 7(14841) DEBUG: <core> [tcp_main.c:2590]: tcpconn_do_send(): tcp_send: after real write: c= 0x7eff24e41260 n=940 fd=5 7(14841) DEBUG: <core> [tcp_main.c:2591]: tcpconn_do_send(): tcp_send: buf= 7(14841) DEBUG: <core> [io_wait.h:390]: io_watch_add(): DBG: io_watch_add(0x8df1e0, 5, 2, 0x7eff24e41260), fd_no=1 7(14841) DEBUG: tls [tls_domain.c:621]: sr_ssl_ctx_info_callback(): SSL handshake done 7(14841) DEBUG: tls [tls_domain.c:624]: sr_ssl_ctx_info_callback(): SSL disable renegotiation 7(14841) DEBUG: tls [tls_server.c:348]: tls_accept(): TLS accept successful 7(14841) DEBUG: tls [tls_server.c:355]: tls_accept(): tls_accept: new connection from 10.1.2.3:35573 using TLSv1/SSLv3 AES256-SHA 256 7(14841) DEBUG: tls [tls_server.c:358]: tls_accept(): tls_accept: local socket: 10.1.2.4:6443 7(14841) DEBUG: tls [tls_server.c:369]: tls_accept(): tls_accept: client did not present a certificate 7(14841) DEBUG: <core> [tcp_main.c:2556]: tcpconn_do_send(): tcp_send: sending... 7(14841) DEBUG: <core> [tcp_main.c:2590]: tcpconn_do_send(): tcp_send: after real write: c= 0x7eff24e41260 n=250 fd=5 7(14841) DEBUG: <core> [tcp_main.c:2591]: tcpconn_do_send(): tcp_send: buf= 7(14841) DEBUG: <core> [tcp_read.c:296]: tcp_read_data(): EOF on 0x7eff24e41260, FD 5 7(14841) ERROR: tls [tls_server.c:1186]: tls_read_f(): TLS read:error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca 7(14841) ERROR: <core> [tcp_read.c:1281]: tcp_read_req(): ERROR: tcp_read_req: error reading 7(14841) DEBUG: <core> [io_wait.h:617]: io_watch_del(): DBG: io_watch_del (0x8df1e0, 5, -1, 0x10) fd_no=2 called 7(14841) DEBUG: <core> [tcp_read.c:1437]: release_tcpconn(): releasing con 0x7eff24e41260, state -2, fd=5, id=2 7(14841) DEBUG: <core> [tcp_read.c:1438]: release_tcpconn(): extra_data 0x7eff24e3c200 10(14844) DEBUG: <core> [tcp_main.c:3385]: handle_tcp_child(): handle_tcp_child: reader response= 7eff24e41260, -2 from 1 10(14844) DEBUG: tls [tls_server.c:597]: tls_h_close(): Closing SSL connection 0x7eff24e3c200 _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
