最近在配置配置opensips,想用TLS对信息进行加密，可是却遇到了问题，客户端无法通过TLS方式登录到代理服务器，不过用UDP和TCP方式能成功登录。我的配置过程如下：
我选择在ubuntu上安装sip server。
下载opensips-1.4.3-tls_src.tar.gz源码包。并安装了openssl，openssl-dev，libssl（0.9.8），libssl-dev 。
修改opensips的makefile，用TLS＝1方式编译安装。
之后我的opensips.cgf相关配置如下：
disable_tls = no
listen = tls:192.168.0.9:5061
tls_verify_server = 1
tls_verify_client = 1
tls_require_client_certificate = 0
tls_method = TLSv1
tls_certificate = "/usr/local/opensips/etc/opensips/tls/user/user-cert.pem"
tls_private_key = "/usr/local/opensips/etc/opensips/tls/user/user-privkey.pem"
tls_ca_list = "/usr/local/opensips/etc/opensips/tls/user/user-calist.pem"
……
loadmodule "tlsops.so"
检查过，上面的路径都是对的
在opensipsctlrc文件中
SIP_DOMAIN=192.168.0.9
启动后，用支持TLS的客户端登录，无法登录。
在syslog文件中的相关记录如下：
Apr 15 09:51:21 xuewei opensips/sbin/opensips[6285]: DBG:core:print_ip: tcpconn_new: new tcp connection to: 192.168.0.6
Apr 15 09:51:21 xuewei opensips/sbin/opensips[6285]: DBG:core:tcpconn_new: on port 49957, type 3
Apr 15 09:51:21 xuewei opensips/sbin/opensips[6285]: DBG:core:tls_tcpconn_init: entered: Creating a whole new ssl connection
Apr 15 09:51:21 xuewei opensips/sbin/opensips[6285]: DBG:core:tls_tcpconn_init: looking up socket based TLS server domain [192.168.0.9:5061]
Apr 15 09:51:21 xuewei opensips/sbin/opensips[6285]: DBG:core:tls_find_server_domain: virtual TLS server domain not found, Using default TLS server domain settings
Apr 15 09:51:21 xuewei opensips/sbin/opensips[6285]: DBG:core:tls_tcpconn_init: found socket based TLS server domain [0.0.0.0:0]
Apr 15 09:51:21 xuewei opensips/sbin/opensips[6285]: DBG:core:tls_tcpconn_init: Setting in ACCEPT mode (server)
Apr 15 09:51:21 xuewei opensips/sbin/opensips[6285]: DBG:core:tcpconn_add: hashes: 997, 1
Apr 15 09:51:21 xuewei opensips/sbin/opensips[6285]: DBG:core:handle_new_connect: new connection: 0xb556fc08 49 flags: 0002
Apr 15 09:51:21 xuewei opensips/sbin/opensips[6285]: DBG:core:send2child: to tcp child 0 0(6278), 0xb556fc08
Apr 15 09:51:21 xuewei opensips/sbin/opensips[6278]: DBG:core:handle_io: received n=4 con=0xb556fc08, fd=44
Apr 15 09:51:21 xuewei opensips/sbin/opensips[6278]: DBG:core:io_watch_add: io_watch_add(0x8164fa0, 44, 2, 0xb556fc08), fd_no=1
Apr 15 09:51:23 xuewei opensips/sbin/opensips[6278]: DBG:core:tls_update_fd: New fd is 44
Apr 15 09:51:23 xuewei opensips/sbin/opensips[6278]: DBG:core:tls_update_fd: New fd is 44
Apr 15 09:51:23 xuewei opensips/sbin/opensips[6278]: NOTICE:core:verify_callback: depth = 2
Apr 15 09:51:23 xuewei opensips/sbin/opensips[6278]: NOTICE:core:verify_callback: subject = /C=GB/O=Ascertia/CN=Ascertia Root CA
Apr 15 09:51:23 xuewei opensips/sbin/opensips[6278]: NOTICE:core:verify_callback: verify error:num=19:self signed certificate in certificate chain