[OpenSIPS-Users] TLS Error

[Andrew Colin]

Hi Guys

I am trying to get tls to work but getting some errors.
i am using letsencrypt and opensips 3.1

my config is

loadmodule "proto_tls.so"


loadmodule "tls_mgm.so"


modparam("tls_mgm", "client_sip_domain_avp", "tls_sip_dom")


modparam("tls_mgm", "server_domain", "dom1")

modparam("tls_mgm", "match_ip_address", "[dom1]myip:5061")

modparam("tls_mgm", "match_sip_domain", "[dom1]mydomain.co.uk")



modparam("tls_mgm", "tls_method", "[dom1]TLSv1_2")

modparam("tls_mgm", "verify_cert", "[dom1]1")

modparam("tls_mgm", "require_cert", "[dom1]1")

modparam("tls_mgm", "certificate", "[dom1]/etc/letsencrypt/live/
mydomain.co.uk/cert.pem")

modparam("tls_mgm", "private_key", "[dom1]/etc/letsencrypt/live/
mydomain.co.uk/privkey.pem")

modparam("tls_mgm", "ca_list", "[dom1]/etc/letsencrypt/live/
mydomain.co.uk/cert.pem")

modparam("tls_mgm", "ca_dir", "[dom1]/etc/letsencrypt/live/bmydomain.co.uk")



but i get this error



INFO:tls_mgm:mod_init: disabling compression due ZLIB problems

Sep 17 12:59:41 proxy /usr/sbin/opensips[8155]: INFO:tls_mgm:init_tls_dom:
Processing TLS domain 'dom1'

Sep 17 12:59:41 proxy /usr/sbin/opensips[8155]:
NOTICE:tls_mgm:init_tls_dom: No EC curve defined

Sep 17 12:59:41 proxy /usr/sbin/opensips[8155]:
INFO:tls_mgm:get_ssl_ctx_verify_mode: client verification activated. Client
certificates are mandatory.

Sep 17 12:59:41 proxy /usr/sbin/opensips[8155]:
NOTICE:tls_mgm:init_tls_dom: no crl for tls, using none

Sep 17 12:59:41 proxy /usr/sbin/opensips[8155]:
ERROR:tls_mgm:load_certificate: unable to load certificate file
'/etc/letsencrypt/live/mydomain.co.uk/cert.pem'

Sep 17 12:59:41 proxy /usr/sbin/opensips[8155]:
ERROR:tls_mgm:init_tls_domains: Failed to init TLS domain 'dom1'

Sep 17 12:59:41 proxy /usr/sbin/opensips[8155]: ERROR:core:init_mod: failed
to initialize module tls_mgm

Sep 17 12:59:41 proxy /usr/sbin/opensips[8155]: ERROR:core:main: error
while initializing modules

Sep 17 12:59:41 proxy /usr/sbin/opensips[8155]: INFO:core:cleanup: cleanup

Sep 17 12:59:41 proxy /usr/sbin/opensips[8155]: NOTICE:core:main:
Exiting....
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20200917/2fbb6f67/attachment-0001.html>