Uploaded image for project: 'FreePBX'
  1. FreePBX
  2. FREEPBX-22575

PJSIP TLS verification fails

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 16
    • Fix Version/s: None
    • Component/s: Asterisk SIP Settings
    • Labels:
      None
    • ToDo:
    • Asterisk Version:
      16.17.0
    • Distro Version:
      FreePBX 15.0.17.34
    • Distro:
      FreePBX Distro

      Description

      Since the last update of Asterisk PJSIP no longer answers properly to TLS requests with Let's Encrypt certificates. The same certificate works flawlessly within Apache on the same system. It seems the certificate chain is missing and thus verification fails:

      $  openssl s_client -connect voip.XXXX.de:5061

      Certificate chain

       0 s:CN = voip.XXXX.de

         i:C = US, O = Let's Encrypt, CN = R3

      ...

          Verify return code: 21 (unable to verify the first certificate)

      In comparison connection to the web server on the same system:

      $  openssl s_client -connect voip.XXXX.de:443

      Certificate chain

       0 s:CN = voip.egofm.de

         i:C = US, O = Let's Encrypt, CN = R3

       1 s:C = US, O = Let's Encrypt, CN = R3

         i:C = US, O = Internet Security Research Group, CN = ISRG Root X1

       2 s:C = US, O = Internet Security Research Group, CN = ISRG Root X1

         i:O = Digital Signature Trust Co., CN = DST Root CA X3

       3 s:O = Digital Signature Trust Co., CN = DST Root CA X3

         i:O = Digital Signature Trust Co., CN = DST Root CA X3

      ...

            Verify return code: 0 (ok)

      Most probably this is a bug in chan_pjsip.

       

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  Unassigned
                  Reporter:
                  deti egoFM-Technik
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  7 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    NextupJiraPlusStatus

                    Error rendering 'slack.nextup.jira:nextup-jira-plus-status'. Please contact your Jira administrators.