[asterisk-users] TLS problem

[hw]

Jonathan H schrieb:
> Well, what immediately stands out is:
> "FILE * open failed!"

Yes, and it doesn´t say which file cannot be opened.  I even looked at
the source and found that at that point, you can´t simply add some
debugging output to find out.

> Have you triple checked that the full filepath is correct and that the
> user that Asterisk is running as has full permissions to access your
> valid certificate file?

It says 'SSL certificate ok' when I 'reload sip'.  When it can´t read one
of the files involved with the certificate, it says which one.

> I have it working with microsip and a free TLS cert from LetsEncrypt.
> When I get to the PC with that on, I can write up what settings I've
> got if that helps?

I´m using a self signed certificate, but that shouldn´t behave any
differently than an externally sigend one as long as it checks out,
which it apparently does.

So yes, it would be nice if you could send me the settings you´re using,
thanks :)


>
>
> On 26 August 2016 at 10:47, hw <hw at gc-24.de> wrote:
>> hw schrieb:
>>>
>>>
>>> Hi,
>>>
>>> I´m trying to get TLS to work with asterisk and client phones,
>>> and all I´m getting from asterisk is
>>>
>>>
>>> [Aug 23 11:46:42] WARNING[1170]: tcptls.c:673 handle_tcptls_connection:
>>> FILE * open failed!
>>>     == Problem setting up ssl connection:
>>> error:00000000:lib(0):func(0):reason(0)
>>> [Aug 23 11:46:44] WARNING[1171]: tcptls.c:673 handle_tcptls_connection:
>>> FILE * open failed!
>>>
>>>
>>> when clients try to connect.  No client is able to register using TLS.
>>>
>>> How can I use encrypted connections?
>>>
>>
>> Nobody having an idea?  Nobody using encryption?
>>
>>
>>
>> --
>> _____________________________________________________________________
>> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>>
>> Join the Asterisk Community at the 13th AstriCon, September 27-29, 2016
>>       http://www.asterisk.org/community/astricon-user-conference
>>
>> New to Asterisk? Start here:
>>       https://wiki.asterisk.org/wiki/display/AST/Getting+Started
>>
>> asterisk-users mailing list
>> To UNSUBSCRIBE or update options visit:
>>    http://lists.digium.com/mailman/listinfo/asterisk-users
>