Re: Unable to start Kamailio with TLS configuration

Hello Richard,

Thank you for your reply. If you noticed the steps that I used to generate
certificates, I had already given 700 permission to the "certs" directory.


   1. mkdir -p /usr/local/etc/kamailio/certs
   2. cd /usr/local/etc/kamailio/certs
   3. chmod 700 /usr/local/etc/kamailio/certs


[root@rtpengine kamailio]# pwd

/usr/local/etc/kamailio

[root@rtpengine kamailio]#

[root@rtpengine kamailio]# ls -ll

drwx------ 2 root root   150 Oct 22 17:48 certs


[root@rtpengine kamailio]# ls -ll certs/

-rw-r--r-- 1 root root 1992 Oct 22 17:48 ca-cert.pem

-rw-r--r-- 1 root root   41 Oct 22 17:48 ca-cert.srl

-rw------- 1 root root 3243 Oct 22 17:48 ca-key.pem

-rw-r--r-- 1 root root    0 Oct 22 17:48 crl.pem

-rw-r--r-- 1 root root 1870 Oct 22 17:48 kamailio-cert.pem

-rw------- 1 root root 3243 Oct 22 17:48 kamailio-key.pem

-rw-r--r-- 1 root root 1675 Oct 22 17:48 kamailio-req.pem


Please advise me, is there any other part that I missed? Thank you
in advance.

Best Regards,
Chandramouli.

On Wed, Oct 22, 2025 at 8:02 PM Richard Robson via sr-users <
[email protected]> wrote:

> from the error it looks like a permissions problem probably the 700 on the
> directory
>
> Oct 22 18:23:54 rtpengine /usr/local/sbin/kamailio[34391]: ERROR: tls
> [tls_domain.c:609]: load_cert(): TLSs<default>: Unable to load certificate
> file '/usr/local/etc/kamailio/certs/kamailio-cert.pem'
> Oct 22 18:23:54 rtpengine /usr/local/sbin/kamailio[34391]: ERROR: tls
> [tls_util.h:50]: tls_err_ret(): load_cert:error:0200100D:system
> library:fopen:Permission denied (sni: unknown)
>
>
> regards,
>
> Richard
>
>
> On 22/10/2025 14:14, Chandramouli P via sr-users wrote:
>
> Hello,
>
> Please find my server environment below:
>
> Operating System: RockyLinux 8.x and RHEL 8.x
> Kamailio version: 6.0.2
> IP address: 10.122.0.4
>
> I have generated SSL certificates using OpenSSL. After configuring
> Kamailio, I am unable to start Kamailio. Please find the steps that I used
> to generate certificates along with configuration at the below link:
>
> *https://pastebin.com/Veu8z9Pr <https://pastebin.com/Veu8z9Pr>*
>
> Any help would be appreciated and thanks in advance.
>
> Best Regards,
> Chandramouli.
>
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussions -- [email protected]
> To unsubscribe send an email to [email protected]
> Important: keep the mailing list in the recipients, do not reply only to the sender!
>
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussions --
> [email protected]
> To unsubscribe send an email to [email protected]
> Important: keep the mailing list in the recipients, do not reply only to
> the sender!
>

__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions -- [email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the sender!