Tony - 2021-05-22

Hi,
I set installed the Certificate Manager module which created a "default" self-signed certificate. Then, under Settings -> Asterix Sip Settings I go to SIP Settings [chan_pjsip] to setup up the TLS. See attached image for settings.

Then, on Linphone, I select TLS as the transport layer for the account. As soon as I select this, I get the following code:

21197[2021-05-22 10:36:33] WARNING[1220] pjproject: SSL SSL_ERROR_SSL (Handshake): Level: 0 err: <336151570> <SSL routines-ssl3_read_bytes-sslv3 alert bad certificate> len: 0 peer: 192.168.0.38:54936
21198[2021-05-22 10:36:33] WARNING[1220] pjproject: SSL SSL_ERROR_SSL (Handshake): Level: 0 err: <336151570> <SSL routines-ssl3_read_bytes-sslv3 alert bad certificate> len: 0 peer: 192.168.0.38:54938

The UDP transport works nicely with Linphone and I can call other softphones on the LAN. I think the above is suggesting that there is a TLS handshake problem. I can't work out what the problem is. I get the exact same type of message when I try connecting to port 5061 on the local machine with curl.

root@raspbx:~# curl -iv 192.168.0.11:5061
* Expire in 0 ms for 6 (transfer 0x1957a0)
*   Trying 192.168.0.11...
* TCP_NODELAY set
* Expire in 200 ms for 4 (transfer 0x1957a0)
* Connected to 192.168.0.11 (192.168.0.11) port 5061 (#0)
> GET / HTTP/1.1
> Host: 192.168.0.11:5061
> User-Agent: curl/7.64.0
> Accept: */*
> 
* Empty reply from server
* Connection #0 to host 192.168.0.11 left intact
curl: (52) Empty reply from server
root@raspbx:~# 

Is there something else I nee to configure to get TLS working properly?