{"action":"created","issue":{"url":"https://api.github.com/repos/cgrates/cgrates/issues/1243","repository_url":"https://api.github.com/repos/cgrates/cgrates","labels_url":"https://api.github.com/repos/cgrates/cgrates/issues/1243/labels{/name}","comments_url":"https://api.github.com/repos/cgrates/cgrates/issues/1243/comments","events_url":"https://api.github.com/repos/cgrates/cgrates/issues/1243/events","html_url":"https://github.com/cgrates/cgrates/issues/1243","id":366850478,"node_id":"MDU6SXNzdWUzNjY4NTA0Nzg=","number":1243,"title":"TLS handshake error","user":{"login":"ghenry","id":159608,"node_id":"MDQ6VXNlcjE1OTYwOA==","avatar_url":"https://avatars2.githubusercontent.com/u/159608?v=4","gravatar_id":"","url":"https://api.github.com/users/ghenry","html_url":"https://github.com/ghenry","followers_url":"https://api.github.com/users/ghenry/followers","following_url":"https://api.github.com/users/ghenry/following{/other_user}","gists_url":"https://api.github.com/users/ghenry/gists{/gist_id}","starred_url":"https://api.github.com/users/ghenry/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ghenry/subscriptions","organizations_url":"https://api.github.com/users/ghenry/orgs","repos_url":"https://api.github.com/users/ghenry/repos","events_url":"https://api.github.com/users/ghenry/events{/privacy}","received_events_url":"https://api.github.com/users/ghenry/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":{"login":"TeoV","id":30497669,"node_id":"MDQ6VXNlcjMwNDk3NjY5","avatar_url":"https://avatars2.githubusercontent.com/u/30497669?v=4","gravatar_id":"","url":"https://api.github.com/users/TeoV","html_url":"https://github.com/TeoV","followers_url":"https://api.github.com/users/TeoV/followers","following_url":"https://api.github.com/users/TeoV/following{/other_user}","gists_url":"https://api.github.com/users/TeoV/gists{/gist_id}","starred_url":"https://api.github.com/users/TeoV/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TeoV/subscriptions","organizations_url":"https://api.github.com/users/TeoV/orgs","repos_url":"https://api.github.com/users/TeoV/repos","events_url":"https://api.github.com/users/TeoV/events{/privacy}","received_events_url":"https://api.github.com/users/TeoV/received_events","type":"User","site_admin":false},"assignees":[{"login":"TeoV","id":30497669,"node_id":"MDQ6VXNlcjMwNDk3NjY5","avatar_url":"https://avatars2.githubusercontent.com/u/30497669?v=4","gravatar_id":"","url":"https://api.github.com/users/TeoV","html_url":"https://github.com/TeoV","followers_url":"https://api.github.com/users/TeoV/followers","following_url":"https://api.github.com/users/TeoV/following{/other_user}","gists_url":"https://api.github.com/users/TeoV/gists{/gist_id}","starred_url":"https://api.github.com/users/TeoV/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TeoV/subscriptions","organizations_url":"https://api.github.com/users/TeoV/orgs","repos_url":"https://api.github.com/users/TeoV/repos","events_url":"https://api.github.com/users/TeoV/events{/privacy}","received_events_url":"https://api.github.com/users/TeoV/received_events","type":"User","site_admin":false}],"milestone":null,"comments":27,"created_at":"2018-10-04T15:37:17Z","updated_at":"2018-11-08T13:39:32Z","closed_at":"2018-11-08T13:25:43Z","author_association":"CONTRIBUTOR","body":"Hi all,\r\n\r\nWhen I put in TLS config and validate it's all working:\r\n\r\n```\r\nopenssl s_client -showcerts -connect 127.0.0.1:2280\r\nCONNECTED(00000003)\r\ndepth=2 C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA\r\nverify return:1\r\ndepth=1 C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G2\r\nverify return:1\r\ndepth=0 OU = Domain Control Validated, CN = *.suretec.net\r\nverify return:1\r\n---\r\nCertificate chain\r\n 0 s:/OU=Domain Control Validated/CN=*.suretec.net\r\n   i:/C=BE/O=GlobalSign nv-sa/CN=AlphaSSL CA - SHA256 - G2\r\n-----BEGIN CERTIFICATE-----\r\n<snip>\r\n-----END CERTIFICATE-----\r\n 1 s:/C=BE/O=GlobalSign nv-sa/CN=AlphaSSL CA - SHA256 - G2\r\n   i:/C=BE/O=GlobalSign nv-sa/OU=Root CA/CN=GlobalSign Root CA\r\n-----BEGIN CERTIFICATE-----\r\n<snip>\r\n-----END CERTIFICATE-----\r\n---\r\nServer certificate\r\nsubject=/OU=Domain Control Validated/CN=*.suretec.net\r\nissuer=/C=BE/O=GlobalSign nv-sa/CN=AlphaSSL CA - SHA256 - G2\r\n---\r\nNo client certificate CA names sent\r\n---\r\nSSL handshake has read 3466 bytes and written 415 bytes\r\n---\r\nNew, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256\r\nServer public key is 2048 bit\r\nSecure Renegotiation IS supported\r\nCompression: NONE\r\nExpansion: NONE\r\nSSL-Session:\r\n    Protocol  : TLSv1.2\r\n    Cipher    : ECDHE-RSA-AES128-GCM-SHA256\r\n    Session-ID: AC434E0230D52A6E65D73A90DD9473383C96D785FCBBABD4BD95FA96F752204F\r\n    Session-ID-ctx: \r\n    Master-Key: E4B1F94066212DEAFB956A27CFBB520369338B9315EFF7277975981912D4CF456E404208D24EAD7E3F34AA01C72CC5EA\r\n    Key-Arg   : None\r\n    PSK identity: None\r\n    PSK identity hint: None\r\n    SRP username: None\r\n    TLS session ticket:\r\n    0000 - ba 4a cc 8f 53 a2 84 e1-c4 37 1b 55 e3 6c 56 52   .J..S....7.U.lVR\r\n    0010 - b2 78 45 77 cb cb b8 71-45 7b 35 13 bd 1b 38 28   .xEw...qE{5...8(\r\n    0020 - df c8 8d 96 ef 08 c4 77-36 19 09 0e 70 a4 ca 5a   .......w6...p..Z\r\n    0030 - 9b 25 df eb 1d 1b 87 3a-dc c4 31 ab 52 ae e2 a2   .%.....:..1.R...\r\n    0040 - 81 97 d2 48 0f 09 c2 c2-52 b5 a1 6e 74 1e e4 bd   ...H....R..nt...\r\n    0050 - 89 74 32 94 83 e9 9f 03-a5 3c 48 78 df 23 00 39   .t2......<Hx.#.9\r\n    0060 - 7f b0 70 ce 73 d2 7f a3-fe a2 fc 85 02 bd 56 29   ..p.s.........V)\r\n    0070 - 18 eb 72 75 1e f7 93 f5-                          ..ru....\r\n\r\n    Start Time: 1538664582\r\n    Timeout   : 300 (sec)\r\n    Verify return code: 0 (ok)\r\n---\r\n```\r\nWhen a 3rd party remote client connects I see this:\r\n\r\n`2018/10/04 16:01:36 http: TLS handshake error from public_ip:25590: EOF`\r\n\r\nSee this for more:\r\n\r\nhttps://groups.google.com/forum/#!topic/cgrates/dlbQ0V7vsVo\r\n\r\nMy config:\r\n\r\n```\r\n  \"listen\": {\r\n    \"rpc_json\": \"0.0.0.0:2012\",\r\n    \"rpc_gob\": \"0.0.0.0:2013\",\r\n    \"http\": \"0.0.0.0:2080\",\r\n    \"http_tls\": \"0.0.0.0:2280\",\r\n    \"tls_server_certificate\": \"/etc/cgrates/wildcard.suretec.net.with-intermediate.crt\",\r\n    \"tls_server_key\":\"/etc/cgrates/wildcard.suretec.net.key\"\r\n  },\r\n```\r\n\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/cgrates/cgrates/issues/comments/436996650","html_url":"https://github.com/cgrates/cgrates/issues/1243#issuecomment-436996650","issue_url":"https://api.github.com/repos/cgrates/cgrates/issues/1243","id":436996650,"node_id":"MDEyOklzc3VlQ29tbWVudDQzNjk5NjY1MA==","user":{"login":"ghenry","id":159608,"node_id":"MDQ6VXNlcjE1OTYwOA==","avatar_url":"https://avatars2.githubusercontent.com/u/159608?v=4","gravatar_id":"","url":"https://api.github.com/users/ghenry","html_url":"https://github.com/ghenry","followers_url":"https://api.github.com/users/ghenry/followers","following_url":"https://api.github.com/users/ghenry/following{/other_user}","gists_url":"https://api.github.com/users/ghenry/gists{/gist_id}","starred_url":"https://api.github.com/users/ghenry/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ghenry/subscriptions","organizations_url":"https://api.github.com/users/ghenry/orgs","repos_url":"https://api.github.com/users/ghenry/repos","events_url":"https://api.github.com/users/ghenry/events{/privacy}","received_events_url":"https://api.github.com/users/ghenry/received_events","type":"User","site_admin":false},"created_at":"2018-11-08T13:39:32Z","updated_at":"2018-11-08T13:39:32Z","author_association":"CONTRIBUTOR","body":"Yep, tested with host cert and all good!!! Thanks."}}
{"actor":{"display_login":"ghenry"}}