Wrong TLS encryption lookup in latest versions

[christiance3]

Hi SipWise team!

In advance, I apologize if this is not the right way to open an issue. I am having problems in mr12.2.1 and mr.11.5.1 LTS versions when sending TLS messages in outbound. The problem is related to the TLS handshake and occurs since the last kamailio updates.

lb[139414]: ERROR: tls [tls_server.c:1332]: tls_h_read_f(): protocol level error.
lb[139414]: ERROR: tls [tls_util.h:49]: tls_err_ret(): TLS accept:error:0A0000C1:SSL routines::no shared cipher (sni: unknown)
lb[139414]: ERROR: tls [tls_server.c:1336]: tls_h_read_f(): src addr: x.x.x.x.x.x:port
lb[139414]: ERROR: tls [tls_server.c:1339]: tls_h_read_f(): dst addr: x.x.x.x.x:port

It seems that kamailio had the problem a few weeks ago in his 5.7.x and it was solved in this commit.

kamailio/kamailio@73d0a6a

This issue explains perfectly what happens kamailio/kamailio#3765

We can also reproduce the same problem in sipwise by adding a peer enabling the probe trying to send OPTIONS in TLS

I have been testing with different types of certificates (which work perfectly in previous versions).

In the last updates of these versions I see that the parameter is added in the kamailio-lb of static, which will make use tls or tlsa module. I have tried both and the result is the same.

Is it likely that we have to make this adaptation in this repo sipwise/kamailio?

Thank you in advance for your support. For my part I continue investigating in search of solutions.

[linuxmaniac]

5.7 kamailio/kamailio@73b19da

[Voipdevel]

Hi @christiance3 @linuxmaniac ,

How are you ?

I have installed kamailio 5.7.6 and trying to integrate kamailio with MS-teams and when processing with option packet then getting below error.

---

11(1988177) ERROR: tls [tls_server.c:1312]: tls_h_read_f(): protocol level error
tls [tls_util.h:49]: tls_err_ret(): TLS read:error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown (sni: unknown)

tls [tls_server.c:1316]: tls_h_read_f(): src addr: 52.114.76.76:5061

[core/tcp_read.c:1523]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f9bc9aa11a0 r: 0x7f9bc9aa12c8 (-1)

---

I have tried kamailio using source and package installation but getting same error so can you please guide how to fix that issues.

Thanks in advance.