Hello, I'm using Freeswitch 1.4.6 on CentOS 6 . I'ved configured Freeswitch to work with webrtc, and created certification based on http://wiki.freeswitch.org/wiki/SIP_TLS. I have also enabled the ws-binding and wss-binding at internal.xml. When doing netstat, I can see both 5066 and 7433 binded: netstat -lnpt | grep freeswitch tcp 0 0 37.139.XXX.XXX:7443 0.0.0.0:* LISTEN 27937/./freeswitch When I try to access the insecure ws (5066), I have a connection: tport.c:2749 tport_wakeup_pri() tport_wakeup_pri(0x7f095c00b530): events IN tport.c:862 tport_alloc_secondary() tport_alloc_secondary(0x7f095c00b530): new secondary tport 0x7f095c09b6a0 tport.c:2620 tport_accept() tport_accept(0x7f095c00b530): incoming secondary on ws/37.139.XXX.XXX:5066/sip failed. reason = WS_INIT But when I try to use the wss connection, I'm getting connection refused. I'm testing it on the same machine with the following command: openssl s_client -connect 37.139.XXX.XXX:7433 My cert folder has the following certifications: drwxr-x--- 2 root root 4096 Jun 23 08:42 CA -rw-r----- 1 root root 1270 Jun 23 08:42 agent.pem -rw-r----- 1 root root 729 Jun 23 08:42 cafile.pem -rw-r--r-- 1 root root 1270 Jun 23 08:46 dtls-srtp.pem -rw-r--r-- 1 root root 1270 Jun 23 08:46 wss.pem When using wireshark, I can see that the ACK packet get a reset flag after sending a SYN request. What am I missing here or doing wrong ? Thanks, Ido