TLS issue

Hi,

I am trying to wrap my head around this error (external IPs has been scrambled):

ERROR: tls [tls_server.c:1626]: tls_h_read_mp_f(): protocol level error
ERROR: tls [tls_util.h:56]: tls_err_ret(): TLS connect:error:0A000413:SSL routines::sslv3 alert unsupported certificate (sni: unknown)
ERROR: tls [tls_server.c:1630]: tls_h_read_mp_f(): src addr: 195.25.22.11:5061
ERROR: tls [tls_server.c:1633]: tls_h_read_mp_f(): dst addr: 10.3.126.39:54808

What raises the sni known error?

This is out tls.cfg, the provider in question is named “foobar” which we are selecting before route relay.
tls_set_connect_server_id(“foobar");


[server:default]
method = TLSv1.2+
verify_certificate = no
require_certificate = no
private_key = /etc/kamailio/certs/domain/privkey.pem
certificate = /etc/kamailio/certs/domain/fullchain.pem


[client:default]
method = TLSv1.2+
verify_certificate = no
require_certificate = no
#private_key = /etc/kamailio/certs/domain/privkey.pem
#certificate = /etc/kamailio/certs/domain/fullchain.pem
ca_list = /etc/ssl/certs/ca-certificates.crt


[client:any]
server_id = foobar
method = TLSv1.2+
verify_certificate = no
require_certificate = no
private_key = /etc/kamailio/certs/domain/privkey.pem
certificate = /etc/kamailio/certs/domain/fullchain.pem
ca_list = /etc/ssl/certs/ca-certificates.crt
server_name = sip.foobar.com
server_name_mode = 1


[client:any]
server_id = voxbone
method = TLSv1.2+
verify_certificate = no
require_certificate = no
ca_list = /etc/ssl/certs/ca-certificates.crt
server_name = voxout.voxbone.com
server_name_mode = 1



I am running with tls_debug 10 but I am at a lost here. Incoming calls from the provider works just fine, I guess the server:default is used in that case. Now the server_id voxbone is working with the above configuration. But I am trying to wrap my head around the error raised for the foobar provider.

We are selecting the dispatcher with the destination sip:sip.foobar.com;transport=TLS


/M

__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions -- [email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the sender!