Re: [SR-Users] multiple domains with microsoft team

2020-06-24 Thread Alexey Vasilyev
Hi
Reusing of TLS ok only in the case if you have the wildcard certificate and
all your domains are subdomains.
Otherwise it will not work. MS checks if RR FQDN matches your TLS
certificate.

ср, 24 июн. 2020 г. в 11:14, Daniel-Constantin Mierla :

> Hello,
>
> MS Teams uses the Record-Route header to match the PBX/group domain. In my
> experience testing with MS Teams so far, reusing the TLS connection is ok
> when having multiple domains.
>
> Cheers,
> Daniel
> On 12.06.20 22:28, Leanderson Correia wrote:
>
> I'm testing here to use multiple domains with microsoft teams and I'm
> having trouble making and receiving calls. It seems that when connecting a
> call, kamailio keeps the tls connection active and reuses it, making the
> domain parameters used the wrong ones for new call. Can someone help me, or
> give a tip?
>
> --
> Att,
> Lean
>
>
> ___
> Kamailio (SER) - Users Mailing 
> Listsr-users@lists.kamailio.orghttps://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
> --
> Daniel-Constantin Mierla -- www.asipto.comwww.twitter.com/miconda -- 
> www.linkedin.com/in/miconda
> Funding: https://www.paypal.me/dcmierla
>
> ___
> Kamailio (SER) - Users Mailing List
> sr-users@lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>


-- 
Best regards
Alexey Vasilyev
___
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users


Re: [SR-Users] Kamailiio TLS and Let'sEncrypt certs

2020-03-29 Thread Alexey Vasilyev
Hi Igor,

Because these errors about verification of Microsoft certificate.
/etc/kamailio/tls/issuer.cer should contain certificate authorities list, which 
contains trusted root certificates.
For example, for CentOS7 /etc/ssl/certs/ca-bundle.crt

-
Alexey Vasilyev
alexei.vasil...@gmail.com



> 29 Mar 2020, в 11:36, Igor Olhovskiy  написал(а):
> 
> Hi!
> 
> Actually I’m trying to get Kamailio to work as MS Teams SBC following by 
> perfect article
> https://skalatan.de/en/blog/kamailio-sbc-teams 
> <https://skalatan.de/en/blog/kamailio-sbc-teams>
> It works well, but one thing is bothering me.
> I’m using Let’sEncrypt certs (actually, works well), but with setting in 
> tls.conf
> 
> verify_certificate = yes
> require_certificate = yes
> 
> It’s giving an errors like 
> 
> /usr/sbin/kamailio[4551]: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS 
> write:error:1416F086:SSL routines:tls_process_server_certificate:certificate 
> verify failed
> /usr/sbin/kamailio[4551]: ERROR:  [core/tcp_read.c:1505]: 
> tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7f03e6d23d88 r: 
> 0x7f03e6d23e08 (-1)
> 
> They are resolved with setting these settings (verify/require) to off 
> (actually, as mentioned here - 
> https://www.fredposner.com/1836/kamailio-tls-and-letsencrypt/ 
> <https://www.fredposner.com/1836/kamailio-tls-and-letsencrypt/>), but I’m 
> really curious - why?
> 
> As I got, it’s using openssl verify on a background, but this check locally 
> passed with 
> 
> openssl verify -CAfile issuer.crt myserver.crt
> myserver.crt: OK
> 
> So, is there any tricks to lets encrypt or just some misconfig in tls.cfg?
> 
> Now it looks like one from article
> 
> [server:default]
> method = TLSv1.2+
> verify_certificate = yes
> require_certificate = yes
> private_key = /etc/kamailio/tls/myserver.key
> certificate = /etc/kamailio/tls/myserver.crt
> ca_list = /etc/kamailio/tls/issuer.crt
> 
> [client:default]
> method = TLSv1.2+
> verify_certificate = yes
> require_certificate = yes
> private_key = /etc/kamailio/tls/myserver.key
> certificate = /etc/kamailio/tls/myserver.crt
> ca_list = /etc/kamailio/tls/issuer.crt
> —
> Regards, Igor
> 
> 
> 
> ___
> Kamailio (SER) - Users Mailing List
> sr-users@lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

___
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users


Re: [SR-Users] [ot] lightweight sip app for auto-answering with play file and echo mode

2020-03-26 Thread Alexey Vasilyev
I’m using pjsua in test suite. It is lightweight, it can be controlled by 
telnet.
It is easily can be built for Alpine and run in the docker. Docker image size 
is 19 MB.
It can play file when calling, it can answer and play file, it can record call.
And fully supports IPv4, IPv6, TLS/TCP/UDP, SRTP so we can simulate a lot of 
cases.
  
-
Alexey Vasilyev
alexei.vasil...@gmail.com



> 26 Mar 2020, в 08:43, Daniel-Constantin Mierla  написал(а):
> 
> Hello,
> 
> wondering if anyone here is aware of a lightweight sip app that can
> answer a call, play some file and/or do echo mode, mainly targeted at
> using it for basic sip routing and call testing. Of course I know that
> Asterisk and FreeSwitch (or even SEMS) can do that, but they have many
> dependencies, requiring quite some resources to run them, so I thought
> maybe someone here figured out different solutions, eventually cli based
> apps like pjsua or baresip. GUI apps for Linux are also fine if they can
> be configured for such behaviour.
> 
> Cheers,
> Daniel
> 
> -- 
> Daniel-Constantin Mierla -- www.asipto.com
> www.twitter.com/miconda -- www.linkedin.com/in/miconda
> 
> 
> ___
> Kamailio (SER) - Users Mailing List
> sr-users@lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users


___
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users


Re: [SR-Users] Installing rtpengine from RPM on CentOS

2018-11-02 Thread Alexey Vasilyev
Hello.
Rtpengine has spec file here
https://github.com/sipwise/rtpengine/tree/master/el/rtpengine.spec

It is perfectly builds with this spec on Centos 7.
In spec file I added variable
%global with_transcoding 1
If you don't need transcoding change it to 0. So you don't need any special
dependencies to build it.
If you need transcoding, leave it 1. Then you'll need to find or to build
some ffmpeg libs.
-- 
Best regards
Alexey Vasilyev

чт, 1 нояб. 2018 г. в 15:01, Pan Christensen :

> That’s the kamailio module to control rtpengine, not the rtpengine itself.
>
>
>
>
>
> *Pan B. Christensen *
> Developer
>
> Phonect AS
>
> Mail: pan.christen...@phonect.no
> + 47 41 88 88 00
>
>  [image: mail_footer]
>
>
>
> *From:* sr-users  * On Behalf Of *Sergey
> Safarov
> *Sent:* torsdag 1. november 2018 13:37
> *To:* Kamailio (SER) - Users Mailing List 
> *Subject:* Re: [SR-Users] Installing rtpengine from RPM on CentOS
>
>
>
> This is packaged in main kamailio rpm package
>
> https://github.com/kamailio/kamailio/blob/master/pkg/kamailio/obs/kamailio.spec#L1453-L1454
>
>
>
> чт, 1 нояб. 2018 г. в 14:33, Pan Christensen :
>
> Hello!
>
>
>
> According to
> https://github.com/sipwise/rtpengine/blob/master/el/README.el.md , we
> should be able to install rtpengine from a CentOS repository using yum.
> We’re unable to find the packages. Any suggestions?
>
>
>
>
>
> *Pan B. Christensen *
> Developer
>
> Phonect AS
>
> Mail: pan.christen...@phonect.no
> + 47 41 88 88 00
>
>  [image: mail_footer]
>
>
>
> ___
> Kamailio (SER) - Users Mailing List
> sr-users@lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
> ___
> Kamailio (SER) - Users Mailing List
> sr-users@lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
___
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users