[asterisk-users] unsolved: Re: solved: how to create a working certificate for using TLS?

[hw]

On 7/5/19 9:32 PM, John Runyon wrote:
> On Fri, 5 Jul 2019 at 14:28, hw <hw at gc-24.de <mailto:hw at gc-24.de>> wrote:
> 
>     I thought about that and checked the configuration I've been using to
>     create the certificate, and I can't see anywhere that it would expire
>     earlier than after 3650 days.  Is there another way to check this?
> 
> openssl verify -CAfile ca.crt server.crt
> 
>     Which certificate is the one that can not be verified: the one I
>     created or the one used by the SIP provider?  How can I find out
>     which certificate the error message is referring to?
> 
> What is the error message?
> 

tcptls.c:173 handle_tcptls_connection: Certificate did not verify: 
unable to get local issuer certificate


So the local issuer certificate must have somehow vanished after a few 
hours.