Re: TLS issue
B K via sr-users <[email protected]> Tue, 23 Jun 2026 09:47:33 -0500
| Newsgroups | gmane.comp.voip.ser |
|---|---|
| Message-ID | <CAN9RubQ5supK4asHN_N4E5AFVOBVKUf_0xPm6QP=er-d-m5njA@mail.gmail.com> |
--===============1388955707== Content-Type: multipart/alternative; boundary="0000000000004ed4670654ecd738" --0000000000004ed4670654ecd738 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Odd though. If you're presenting them with this certificate when you receive a request from them (when they send you an INVITE), then your certificate is probably good from their point of view. On Tue, Jun 23, 2026, 9:44=E2=80=AFAM Martin Nystr=C3=B6m via sr-users < [email protected]> wrote: > Works just fine with Voxbone. However, I realised that LE enforced their > new generation =E2=80=9CY=E2=80=9D end of May. And I think that is the re= ason. And that the > Foobar provider is not updated to handle it. > > /M > *From: *Bastian Triller via sr-users <[email protected]> > *Date: *Tuesday, 23 June 2026 at 14:37 > *To: *Kamailio (SER) - Users Mailing List <[email protected]> > *Cc: *Bastian Triller <[email protected]> > *Subject: *[SR-Users] Re: TLS issue > > *CAUTION:* This email originated from outside the organization. Do not > click links or open attachments unless you recognize the sender and know > the content is safe. > > > it looks like Voxbone also includes the root certificate in its chain > > % : | openssl s_client -connect voxout.voxbone.com:5061 2>/dev/null | sed > -n '/Certificate chain/,/^---/p' > Certificate chain > 0 s:C=3DBE, L=3DIxelles, O=3DVoxbone S.A., CN=3D*.voxout.voxbone.com > i:C=3DUS, O=3DDigiCert Inc, CN=3DDigiCert Global G2 TLS RSA SHA256 202= 0 CA1 > a:PKEY: RSA, 4096 (bit); sigalg: sha256WithRSAEncryption > v:NotBefore: May 20 00:00:00 2026 GMT; NotAfter: Nov 25 23:59:59 2026 > GMT > 1 s:C=3DUS, O=3DDigiCert Inc, CN=3DDigiCert Global G2 TLS RSA SHA256 202= 0 CA1 > i:C=3DUS, O=3DDigiCert Inc, OU=3Dwww.digicert.com, CN=3DDigiCert Globa= l Root G2 > a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption > v:NotBefore: Mar 30 00:00:00 2021 GMT; NotAfter: Mar 29 23:59:59 2031 > GMT > 2 s:C=3DUS, O=3DDigiCert Inc, OU=3Dwww.digicert.com, CN=3DDigiCert Globa= l Root G2 > i:C=3DUS, O=3DDigiCert Inc, OU=3Dwww.digicert.com, CN=3DDigiCert Globa= l Root G2 > a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption > v:NotBefore: Aug 1 12:00:00 2013 GMT; NotAfter: Jan 15 12:00:00 2038 > GMT > --- > > IMO it they should only sent the first two certificates. > > Regards, > Bastian > > On Mon, Jun 22, 2026 at 11:47=E2=80=AFPM Martin Nystr=C3=B6m via sr-users= < > [email protected]> wrote: > > Hi, > > I am trying to wrap my head around this error (external IPs has been > scrambled): > > ERROR: tls [tls_server.c:1626]: tls_h_read_mp_f(): protocol level error > ERROR: tls [tls_util.h:56]: tls_err_ret(): TLS connect:error:0A000413:SSL > routines::sslv3 alert unsupported certificate (sni: unknown) > ERROR: tls [tls_server.c:1630]: tls_h_read_mp_f(): src addr: > 195.25.22.11:5061 > ERROR: tls [tls_server.c:1633]: tls_h_read_mp_f(): dst addr: > 10.3.126.39:54808 > > What raises the sni known error? > > This is out tls.cfg, the provider in question is named =E2=80=9Cfoobar=E2= =80=9D which we > are selecting before route relay. > tls_set_connect_server_id(=E2=80=9Cfoobar"); > > > [server:default] > method =3D TLSv1.2+ > verify_certificate =3D no > require_certificate =3D no > private_key =3D /etc/kamailio/certs/domain/privkey.pem > certificate =3D /etc/kamailio/certs/domain/fullchain.pem > > > [client:default] > method =3D TLSv1.2+ > verify_certificate =3D no > require_certificate =3D no > #private_key =3D /etc/kamailio/certs/domain/privkey.pem > #certificate =3D /etc/kamailio/certs/domain/fullchain.pem > ca_list =3D /etc/ssl/certs/ca-certificates.crt > > > [client:any] > server_id =3D foobar > method =3D TLSv1.2+ > verify_certificate =3D no > require_certificate =3D no > private_key =3D /etc/kamailio/certs/domain/privkey.pem > certificate =3D /etc/kamailio/certs/domain/fullchain.pem > ca_list =3D /etc/ssl/certs/ca-certificates.crt > server_name =3D sip.foobar.com > server_name_mode =3D 1 > > > [client:any] > server_id =3D voxbone > method =3D TLSv1.2+ > verify_certificate =3D no > require_certificate =3D no > ca_list =3D /etc/ssl/certs/ca-certificates.crt > server_name =3D voxout.voxbone.com > server_name_mode =3D 1 > > > > I am running with tls_debug 10 but I am at a lost here. Incoming calls > from the provider works just fine, I guess the server:default is used in > that case. Now the server_id voxbone is working with the above > configuration. But I am trying to wrap my head around the error raised fo= r > the foobar provider. > > We are selecting the dispatcher with the destination sip:sip.foobar.com > ;transport=3DTLS > > > /M > __________________________________________________________ > Kamailio - Users Mailing List - Non Commercial Discussions -- > [email protected] > To unsubscribe send an email to [email protected] > Important: keep the mailing list in the recipients, do not reply only to > the sender! > > __________________________________________________________ > Kamailio - Users Mailing List - Non Commercial Discussions -- > [email protected] > To unsubscribe send an email to [email protected] > Important: keep the mailing list in the recipients, do not reply only to > the sender! > --0000000000004ed4670654ecd738 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"auto">Odd though. If you're presenting them with this certi= ficate when you receive a request from them (when they send you an INVITE),= then your certificate is probably good from their point of view.=C2=A0</di= v><br><div class=3D"gmail_quote gmail_quote_container"><div dir=3D"ltr" cla= ss=3D"gmail_attr">On Tue, Jun 23, 2026, 9:44=E2=80=AFAM Martin Nystr=C3=B6m= via sr-users <<a href=3D"mailto:[email protected]">sr-users@l= ists.kamailio.org</a>> wrote:<br></div><blockquote class=3D"gmail_quote"= style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <div> <div style=3D"direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;fo= nt-size:12pt;color:rgb(0,0,0)"> Works just fine with Voxbone. However, I realised that LE enforced their ne= w generation =E2=80=9CY=E2=80=9D end of May. And I think that is the reason= . And that the Foobar provider is not updated to handle it.</div> <div style=3D"direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;fo= nt-size:12pt;color:rgb(0,0,0)"> <br> </div> <div id=3D"m_-5935416566817549ms-outlook-mobile-signature" style=3D"color:i= nherit;background-color:inherit"> <div class=3D"MsoNormal" style=3D"font-size:12pt">/M</div> </div> <div id=3D"m_-5935416566817549mail-editor-reference-message-container" styl= e=3D"color:inherit;background-color:inherit"> <div style=3D"direction:ltr"> </div> <div style=3D"padding:3pt 0in 0in;border-width:1pt medium medium;border-sty= le:solid none none;border-color:rgb(181,196,223) currentcolor currentcolor"= > <div style=3D"text-align:left;font-family:Aptos;font-size:12pt;color:black"= > <b>From: </b>Bastian Triller via sr-users <<a href=3D"mailto:sr-users@li= sts.kamailio.org" target=3D"_blank" rel=3D"noreferrer">[email protected]= lio.org</a>><br> <b>Date: </b>Tuesday, 23 June 2026 at 14:37<br> <b>To: </b>Kamailio (SER) - Users Mailing List <<a href=3D"mailto:sr-use= [email protected]" target=3D"_blank" rel=3D"noreferrer">sr-users@lists.= kamailio.org</a>><br> <b>Cc: </b>Bastian Triller <<a href=3D"mailto:[email protected]"= target=3D"_blank" rel=3D"noreferrer">[email protected]</a>><br> <b>Subject: </b>[SR-Users] Re: TLS issue<br> <br> </div> </div> <table align=3D"left" cellspacing=3D"0" cellpadding=3D"0" border=3D"0"> <tbody> <tr> <td style=3D"background-color:rgb(187,165,85);padding:5.25pt 5.5pt 5.25pt 1= .5pt"> </td> <td style=3D"background-color:rgb(255,229,153);padding:5.25pt 3.75pt 5.25pt= 11.25pt;width:100%"> <p><span style=3D"font-family:Arial,sans-serif;font-size:11pt;color:rgb(33,= 33,33)"><b>CAUTION:</b>=C2=A0This email originated from outside the organiz= ation. Do not click links or open attachments unless you recognize the sender and know the content is safe.</span></p> </td> </tr> </tbody> </table> <div style=3D"direction:ltr"> <br> <br> </div> <div style=3D"direction:ltr"> it looks like Voxbone also includes the root certificate in its chain</div> <div style=3D"direction:ltr"> <br> </div> <div style=3D"direction:ltr"> % : | openssl s_client -connect <a href=3D"http://voxout.voxbone.com:5061" = target=3D"_blank" rel=3D"noreferrer"> voxout.voxbone.com:5061</a>=C2=A02>/dev/null | sed -n '/Certificate = chain/,/^---/p'<br> Certificate chain<br> =C2=A00 s:C=3DBE, L=3DIxelles, O=3DVoxbone S.A., CN=3D*.<a href=3D"http://v= oxout.voxbone.com" target=3D"_blank" rel=3D"noreferrer">voxout.voxbone.com<= /a><br> =C2=A0 =C2=A0i:C=3DUS, O=3DDigiCert Inc, CN=3DDigiCert Global G2 TLS RSA SH= A256 2020 CA1<br> =C2=A0 =C2=A0a:PKEY: RSA, 4096 (bit); sigalg: sha256WithRSAEncryption<br> =C2=A0 =C2=A0v:NotBefore: May 20 00:00:00 2026 GMT; NotAfter: Nov 25 23:59:= 59 2026 GMT<br> =C2=A01 s:C=3DUS, O=3DDigiCert Inc, CN=3DDigiCert Global G2 TLS RSA SHA256 = 2020 CA1<br> =C2=A0 =C2=A0i:C=3DUS, O=3DDigiCert Inc, OU=3D<a href=3D"http://www.digicer= t.com" target=3D"_blank" rel=3D"noreferrer">www.digicert.com</a>, CN=3DDigi= Cert Global Root G2<br> =C2=A0 =C2=A0a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption<br> =C2=A0 =C2=A0v:NotBefore: Mar 30 00:00:00 2021 GMT; NotAfter: Mar 29 23:59:= 59 2031 GMT<br> =C2=A02 s:C=3DUS, O=3DDigiCert Inc, OU=3D<a href=3D"http://www.digicert.com= " target=3D"_blank" rel=3D"noreferrer">www.digicert.com</a>, CN=3DDigiCert = Global Root G2<br> =C2=A0 =C2=A0i:C=3DUS, O=3DDigiCert Inc, OU=3D<a href=3D"http://www.digicer= t.com" target=3D"_blank" rel=3D"noreferrer">www.digicert.com</a>, CN=3DDigi= Cert Global Root G2<br> =C2=A0 =C2=A0a:PKEY: RSA, 2048 (bit); sigalg: sha256WithRSAEncryption<br> =C2=A0 =C2=A0v:NotBefore: Aug =C2=A01 12:00:00 2013 GMT; NotAfter: Jan 15 1= 2:00:00 2038 GMT<br> ---</div> <div style=3D"direction:ltr"> <br> </div> <div style=3D"direction:ltr"> IMO it they should only sent the first two certificates.</div> <div style=3D"direction:ltr"> <br> </div> <div style=3D"direction:ltr"> Regards,</div> <div style=3D"direction:ltr"> Bastian</div> <div style=3D"direction:ltr"> <br> </div> <div class=3D"gmail_attr" style=3D"direction:ltr">On Mon, Jun 22, 2026 at 1= 1:47=E2=80=AFPM Martin Nystr=C3=B6m via sr-users <<a href=3D"mailto:sr-u= [email protected]" target=3D"_blank" rel=3D"noreferrer">sr-users@list= s.kamailio.org</a>> wrote:</div> <blockquote style=3D"margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left:= 1px solid rgb(204,204,204)"> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> Hi,</div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> I am trying to wrap my head around this error (external IPs has been scramb= led):</div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> ERROR: tls [tls_server.c:1626]: tls_h_read_mp_f(): protocol level error</di= v> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> ERROR: tls [tls_util.h:56]: tls_err_ret(): TLS connect:error:0A000413:SSL r= outines::sslv3 alert unsupported certificate (sni: unknown)</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> ERROR: tls [tls_server.c:1630]: tls_h_read_mp_f(): src addr: <a href=3D"htt= p://195.25.22.11:5061" target=3D"_blank" rel=3D"noreferrer"> 195.25.22.11:5061</a></div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> ERROR: tls [tls_server.c:1633]: tls_h_read_mp_f(): dst addr: <a href=3D"htt= p://10.3.126.39:54808" target=3D"_blank" rel=3D"noreferrer"> 10.3.126.39:54808</a></div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> What raises the sni known error?</div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> This is out tls.cfg, the provider in question is named =E2=80=9Cfoobar=E2= =80=9D which we are selecting before route relay.</div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> tls_set_connect_server_id(=E2=80=9Cfoobar");</div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> [server:default]</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> method =3D TLSv1.2+</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> verify_certificate =3D no</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> require_certificate =3D no</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> private_key =3D /etc/kamailio/certs/domain/privkey.pem</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> certificate =3D /etc/kamailio/certs/domain/fullchain.pem</div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> [client:default]</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> method =3D TLSv1.2+</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> verify_certificate =3D no</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> require_certificate =3D no</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> #private_key =3D /etc/kamailio/certs/domain/privkey.pem</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> #certificate =3D /etc/kamailio/certs/domain/fullchain.pem</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> ca_list =3D /etc/ssl/certs/ca-certificates.crt</div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> [client:any]</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> server_id =3D foobar</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> method =3D TLSv1.2+</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> verify_certificate =3D no</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> require_certificate =3D no</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> private_key =3D /etc/kamailio/certs/domain/privkey.pem</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> certificate =3D /etc/kamailio/certs/domain/fullchain.pem</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> ca_list =3D /etc/ssl/certs/ca-certificates.crt</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> server_name =3D <a href=3D"http://sip.foobar.com" target=3D"_blank" rel=3D"= noreferrer"> sip.foobar.com</a></div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> server_name_mode =3D 1</div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> [client:any]</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> server_id =3D voxbone</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> method =3D TLSv1.2+</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> verify_certificate =3D no</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> require_certificate =3D no</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> ca_list =3D /etc/ssl/certs/ca-certificates.crt</div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> server_name =3D <a href=3D"http://voxout.voxbone.com" target=3D"_blank" rel= =3D"noreferrer"> voxout.voxbone.com</a></div> <div class=3D"gmail_quote" style=3D"font-family:Aptos,Arial,Helvetica,sans-= serif;font-size:12pt;color:rgb(0,0,0)"> server_name_mode =3D 1</div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> I am running with tls_debug 10 but I am at a lost here. Incoming calls from= the provider works just fine, I guess the server:default is used in that c= ase. Now the server_id voxbone is working with the above configuration. But= I am trying to wrap my head around the error raised for the foobar provider.</div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> We are selecting the dispatcher with the destination sip:<a href=3D"http://= sip.foobar.com" target=3D"_blank" rel=3D"noreferrer">sip.foobar.com</a>;tra= nsport=3DTLS</div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div class=3D"gmail_quote" style=3D"direction:ltr;font-family:Aptos,Arial,H= elvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"> <br> </div> <div id=3D"m_-5935416566817549m_-7330967669405062268ms-outlook-mobile-signa= ture" style=3D"color:inherit;background-color:inherit"> <div class=3D"MsoNormal" style=3D"font-size:12pt">/M</div> </div> <div class=3D"gmail_quote">________________________________________________= __________<br> Kamailio - Users Mailing List - Non Commercial Discussions -- <a href=3D"ma= ilto:[email protected]" target=3D"_blank" rel=3D"noreferrer"> [email protected]</a><br> To unsubscribe send an email to <a href=3D"mailto:[email protected]= ilio.org" target=3D"_blank" rel=3D"noreferrer"> [email protected]</a><br> Important: keep the mailing list in the recipients, do not reply only to th= e sender!</div> </blockquote> </div> </div> __________________________________________________________<br> Kamailio - Users Mailing List - Non Commercial Discussions -- <a href=3D"ma= ilto:[email protected]" target=3D"_blank" rel=3D"noreferrer">sr-u= [email protected]</a><br> To unsubscribe send an email to <a href=3D"mailto:[email protected]= ilio.org" target=3D"_blank" rel=3D"noreferrer">[email protected]= o.org</a><br> Important: keep the mailing list in the recipients, do not reply only to th= e sender!<br> </blockquote></div> --0000000000004ed4670654ecd738-- --===============1388955707== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions -- [email protected] To unsubscribe send an email to [email protected] Important: keep the mailing list in the recipients, do not reply only to the sender! --===============1388955707==--