<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><font face="Helvetica, Arial, sans-serif">Hello James</font></p>
<p><font face="Helvetica, Arial, sans-serif">I am running asterisk
as root, just to 'disable' all issues related to file rights. So
this should not be the problem.</font></p>
<p><font face="Helvetica, Arial, sans-serif"><br>
</font></p>
<p><font face="Helvetica, Arial, sans-serif">Kind regards.</font><br>
</p>
<br>
<div class="moz-cite-prefix">Op 03-06-17 om 08:09 schreef James
Cloos:<br>
</div>
<blockquote type="cite" cite="mid:m3h8zxd2li.fsf@carbon.jhcloos.org">
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite">
<pre wrap="">"JK" == Jonas Kellens <a class="moz-txt-link-rfc2396E" href="mailto:jonas.kellens@telenet.be"><jonas.kellens@telenet.be></a> writes:
</pre>
</blockquote>
</blockquote>
</blockquote>
</blockquote>
</blockquote>
<pre wrap="">
JK> [Jun 2 14:29:28] ERROR[27360][C-00000ae5]: res_rtp_asterisk.c:1441
JK> ast_rtp_dtls_set_configuration: Specified certificate file
JK> '/etc/letsencrypt/live/ws.mydomain.tld/privkey.pem' for RTP instance
JK> '0x7f920c538a78' could not be used
That error means that openssl's SSL_CTX_use_certificate_file() returned
an error.
The later error is just a result of that one.
Does the uid/gid used for asterisk have access to the key?
If the uid you use for asterisk is called asterisk, run this as root:
su -c 'cat /etc/letsencrypt/live/ws.mydomain.tld/privkey.pem' - asterisk
If it fails, then the problem is permissions.
You may need to alter the permissions on /etc/letsencrypt to allow
non-root uids to access the symlinks and their targets.
-JimC
</pre>
</blockquote>
<br>
</body>
</html>