Not able to connect Asterisk while trying with WSS connection

Asterisk Asterisk Support
1

I am able to use asterisk while using with ws://myip.com:8088/ws frequently. But unable to connect to asterisk server using wss.

I have a certificate authorized from GeoTrust which is working fine when I am using that with tomcat but unable to make it work with Asterisk.

I am getting below error in google chrome console when I am trying to use
conn = new WebSocket(“wss://myip:8088/ws”,“sip”);

net::ERR_SSL_PROTOCOL_ERROR

can anyone help me to replace the self signed certificates with the GeoTrust certified certificates.

2

for wss check the option tlsbindaddr=0.0.0.0:8089 ; address and port to bind to - default is bindaddr and port 8089.

3

You can also use openssl itself to connect and examine what could be going on with it:

openssl s_client -connect :

Example:

openssl s_client -connect 127.0.0.1:8089

4

I have tried with below and it doesn’t work. Please let me know if I am doing something wrong.

tlsenable=yes
tlsbindaddr=myip:8088

OR

tlsbindaddr=0.0.0.0:8089

5

openssl s_client -connect 10.0.10.68:8088

After giving the above command got below result. Looks like there is a issue related to certificates. Can you please help me to install certificates to make wss work.

CONNECTED(00000003)
140199630690120:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:769:

no peer certificate available

No client certificate CA names sent

SSL handshake has read 7 bytes and written 249 bytes

New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE

6

Google suggests https://wiki.asterisk.org/wiki/display/AST/SIP+TLS+Transport