Re: [OpenSIPS-Users] Error
Hi Philip, Which version do you have? Regards, Jazzi On Tue, Oct 25, 2022 at 11:30 AM Saint Michael wrote: > any idea what may cause this? > > [519171] ERROR:core:io_wait_loop_epoll: failed to remove from epoll > Bad file descriptor(9) > Oct 24 22:23:00 proxy opensips[519171]: Oct 24 22:23:00 [519171] > ERROR:core:io_wait_loop_epoll: [UDP_worker] unset/bogus map (idx=367) > triggered for 1 by epoll (fd=-1,type=0,flags=0,data=(nil)) -> removing > from epoll > > > Philip > > ___ > Users mailing list > Users@lists.opensips.org > http://lists.opensips.org/cgi-bin/mailman/listinfo/users > ___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users
Re: [OpenSIPS-Users] SIP user statuses to websocket
Hi Bogdan, Thank you so much for the guidance. I have gone through the link and added some custom events. I am able to subscribe and send them to an interface. The document for jsonrpc event is broken. If you go to Transport Protocols and click on event_jsonrpc <http://www.opensips.org/html/docs/modules/3.2.x/event_jsonrpc> it says Not Found. can someone fix this link, please? I just want to look at the json rpc events. Thank you. Regards, Jazzi On Fri, Oct 21, 2022 at 1:47 AM Bogdan-Andrei Iancu wrote: > Hi Anonymous, > > Check the events interface in OpenSIPS [1]. Different modules (see their > documentation) may raise different events, like when a user is registered, > when a call is placed, etc. > > [1] https://www.opensips.org/Documentation/Interface-Events-3-2 > > Regards, > > Bogdan-Andrei Iancu > > OpenSIPS Founder and Developer > https://www.opensips-solutions.com > OpenSIPS Bootcamp 5-16 Dec 2022, online > https://www.opensips.org/training/OpenSIPS_eBootcamp_2022/ > > On 10/19/22 9:32 AM, ideanet help wrote: > > Hi all, > > I am looking for a way to use WebSocket with opensips. Basically, I want > to show my all sip users statuses/activity on a web page. I am currently > using an API, which is called after a few seconds so this is a bit slow. I > am looking for a way that opensips sends event to the socket and on the > other hand, my webpage will be connected to a WebSocket server. This way I > can show all the events instantly. > For example, If a user receives a call I will have it on the web page > straight away. if a user gets unregistered i will see on my page that users > sent Expiry 0 something like that. > > Will it be possible with the proto_wss module. any pointers will help. I > saw what proto_wss can do but I did not understand it properly. it will > send traces to a server i don't need. I just need it if a user is busy or > idle. or he gets unregistered that's all. > > Thanks > > ___ > Users mailing > listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users > > > ___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users
[OpenSIPS-Users] SIP user statuses to websocket
Hi all, I am looking for a way to use WebSocket with opensips. Basically, I want to show my all sip users statuses/activity on a web page. I am currently using an API, which is called after a few seconds so this is a bit slow. I am looking for a way that opensips sends event to the socket and on the other hand, my webpage will be connected to a WebSocket server. This way I can show all the events instantly. For example, If a user receives a call I will have it on the web page straight away. if a user gets unregistered i will see on my page that users sent Expiry 0 something like that. Will it be possible with the proto_wss module. any pointers will help. I saw what proto_wss can do but I did not understand it properly. it will send traces to a server i don't need. I just need it if a user is busy or idle. or he gets unregistered that's all. Thanks ___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users
[OpenSIPS-Users] Push notification for zoiper ios app
Hi, I am running opensips 3.2.6 and trying to test push notifications for my zoiper IOS app. I have enabled pn_enable and added pn_providers "apns, fcm, webpush, acme". I am not sure how to add the contact header with the pn stuff ? Is there any specific parameter with save() to enable it ? I don't have anything in the middle, just a zoiper ios client that is sending REGISTER requests to my opensips. I only want to send PN to specific devices. I did not find any example of how to handle the PN overall. Thank you ___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users
Re: [OpenSIPS-Users] Configuration
Hi Phil, Easy thing, if your user is registered and he makes a call that will become an outgoing call. Just send it to PSTN. You can simply use t_relay or use the dispatcher module. You only need uac_auth if your PSTN network somehow sends calls to your opensips using SIP and trying to authenticate. is this the case? On Thu, Oct 13, 2022 at 10:42 AM White, Phil wrote: > Hi Team, > > May I ask for some help please? > I am trying to configure Opensips to proxy calls to & from the PSTN. > Being a complete novice, I'm flying somewhat blind, and things are not > working as I expect. > > Currently, Opensips is working with all of my local sip phones, so I think > I now need to configure (a) incoming calls, and (b) outgoing calls to my > PSTN/SIP provider. > I have included uac_auth in my configuration, together with the appropriate > modparam("uac_auth","credential","username:domain:password") details. > However,currently I am not seeing anything in the debug log to suggest > that this has any effect. > > Can anyone help with pointers on what I need to include in the > configuration file for each direction of call? > > Thanks for your help, > Phil. > ___ > Users mailing list > Users@lists.opensips.org > http://lists.opensips.org/cgi-bin/mailman/listinfo/users > ___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users
Re: [OpenSIPS-Users] phone not getting regsitered using TLS
Hi Karsten, Interesting, i am using centos 7 and /etc/pki/tls/openssl.cnf file does not have any settings forCipherString On Sat, Jul 16, 2022 at 3:20 AM Karsten Wemheuer wrote: > Hi, > > looking at some search result shows, that TLS_RSA_WITH_RC4_128_SHA is > insecure and should not be used. Maybe the setting of CipherString in > openssl.cnf is causing the issue. On current Debian it is set like > this DEFAULT@SECLEVEL=2. > > Karsten > > Am Samstag, dem 16.07.2022 um 03:02 +1200 schrieb ideanet help: > > Hi Karsten, > > I thought the same initially but then looks like logs are saying: > > Client used ciphers are: > > TLS_RSA_WITH_RC4_128_MD5 > > TLS_RSA_WITH_RC4_128_SHA > > and servers response is cipherSuite TLS_RSA_WITH_RC4_128_SHA > > > > isn't it? > > > > > > > > On Sat, Jul 16, 2022 at 1:53 AM Karsten Wemheuer wrote: > > > Hi, > > > > > > the snom M9 is pretty old (End of Life 12/2016). Maybe the used > > > ciphers > > > are not secure enough for current TLS. > > > > > > HTH > > > > > > Have a nice day and weekend > > > > > > Karsten > > > > > > Am Samstag, dem 16.07.2022 um 01:20 +1200 schrieb ideanet help: > > > > Hi experts, > > > > > > > > One of my phones (SNOM M9) is not able to register using TLS. > > > > > > > > Here are the logs from opensips and ssldump. Maybe someone can > > > > pinpoint the issue? > > > > > > > > > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10604] > > > > DBG:core:handle_new_connect: new connection: 0x7f16d2ba3bd8 80 > > > flags: > > > > 001c > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10604] > > > > DBG:core:send2worker: to tcp worker 0 (0), 0x7f16d2ba3bd8 rw 1 > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > > > DBG:proto_tls:proto_tls_conn_init: looking up TLS server domain > > > > [xx.xx.xx.xx:5061] > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > > > DBG:tls_mgm:tls_find_server_domain: found TLS server domain: > > > > sip.tls.mysipdomain.com > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > > > DBG:tls_openssl:openssl_tls_conn_init: Creating a whole new ssl > > > > connection > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > > > DBG:tls_openssl:openssl_tls_conn_init: Setting in ACCEPT mode > > > > (server) > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > > DBG:core:handle_io: > > > > We have received conn 0x7f16d2ba3bd8 with rw 1 on fd 4 > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > > > DBG:core:io_watch_add: [TCP_worker] io_watch_add op (4 on 74) > > > > (0x8f91e0, 4, 19, 0x7f16d2ba3bd8,1), fd_no=4/83886 > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > > > DBG:proto_tls:tls_read_req: Using the global ( per process ) buff > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > > > DBG:tls_openssl:openssl_tls_update_fd: New fd is 4 > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > > > DBG:proto_tls:tls_read_req: SSL accept/connect still pending! > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > > > DBG:proto_tls:tls_read_req: Using the global ( per process ) buff > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > > > DBG:tls_openssl:openssl_tls_update_fd: New fd is 4 > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > > > ERROR:tls_openssl:openssl_tls_accept: SSL_ERROR_SYSCALL > > > > err=Success(0) > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > > > ERROR:tls_openssl:openssl_tls_accept: New TLS connection from > > > > myphoneIP.xx.xx:2987 failed to accept > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > > > ERROR:proto_tls:tls_read_req: failed to do pre-tls handshake! > > > > > > > > _ > > > > > > > > ssldump logs: > > > > > > > > > > > > New TCP connection #3: myphoneIP.xx.xx(2082) <-> > > > > sip.tls.mysipdomain.com(5061) > > > > 3 1 0.0280 (0.0280) C>S Handshake > > > > ClientHello > > > > Version 3.1 > > > > cipher suites > > > > TLS_RSA_
Re: [OpenSIPS-Users] phone not getting regsitered using TLS
Hi Karsten, I thought the same initially but then looks like logs are saying: Client used ciphers are: TLS_RSA_WITH_RC4_128_MD5 TLS_RSA_WITH_RC4_128_SHA and servers response is cipherSuite TLS_RSA_WITH_RC4_128_SHA isn't it? On Sat, Jul 16, 2022 at 1:53 AM Karsten Wemheuer wrote: > Hi, > > the snom M9 is pretty old (End of Life 12/2016). Maybe the used ciphers > are not secure enough for current TLS. > > HTH > > Have a nice day and weekend > > Karsten > > Am Samstag, dem 16.07.2022 um 01:20 +1200 schrieb ideanet help: > > Hi experts, > > > > One of my phones (SNOM M9) is not able to register using TLS. > > > > Here are the logs from opensips and ssldump. Maybe someone can > > pinpoint the issue? > > > > > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10604] > > DBG:core:handle_new_connect: new connection: 0x7f16d2ba3bd8 80 flags: > > 001c > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10604] > > DBG:core:send2worker: to tcp worker 0 (0), 0x7f16d2ba3bd8 rw 1 > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > DBG:proto_tls:proto_tls_conn_init: looking up TLS server domain > > [xx.xx.xx.xx:5061] > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > DBG:tls_mgm:tls_find_server_domain: found TLS server domain: > > sip.tls.mysipdomain.com > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > DBG:tls_openssl:openssl_tls_conn_init: Creating a whole new ssl > > connection > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > DBG:tls_openssl:openssl_tls_conn_init: Setting in ACCEPT mode > > (server) > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] DBG:core:handle_io: > > We have received conn 0x7f16d2ba3bd8 with rw 1 on fd 4 > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > DBG:core:io_watch_add: [TCP_worker] io_watch_add op (4 on 74) > > (0x8f91e0, 4, 19, 0x7f16d2ba3bd8,1), fd_no=4/83886 > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > DBG:proto_tls:tls_read_req: Using the global ( per process ) buff > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > DBG:tls_openssl:openssl_tls_update_fd: New fd is 4 > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > DBG:proto_tls:tls_read_req: SSL accept/connect still pending! > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > DBG:proto_tls:tls_read_req: Using the global ( per process ) buff > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > DBG:tls_openssl:openssl_tls_update_fd: New fd is 4 > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > ERROR:tls_openssl:openssl_tls_accept: SSL_ERROR_SYSCALL > > err=Success(0) > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > ERROR:tls_openssl:openssl_tls_accept: New TLS connection from > > myphoneIP.xx.xx:2987 failed to accept > > Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] > > ERROR:proto_tls:tls_read_req: failed to do pre-tls handshake! > > > > _ > > > > ssldump logs: > > > > > > New TCP connection #3: myphoneIP.xx.xx(2082) <-> > > sip.tls.mysipdomain.com(5061) > > 3 1 0.0280 (0.0280) C>S Handshake > > ClientHello > > Version 3.1 > > cipher suites > > TLS_RSA_WITH_RC4_128_MD5 > > TLS_RSA_WITH_RC4_128_SHA > > compression methods > > NULL > > extensions > > server_name > > host_name: sip.tls.mysipdomain.com > > ja3 string: 769,4-5,0,, > > ja3 fingerprint: 8305e724a7c9f16b323465d289bc54a1 > > 3 2 0.0353 (0.0072) S>C Handshake > > ServerHello > > Version 3.1 > > session_id[0]= > > > > cipherSuite TLS_RSA_WITH_RC4_128_SHA > > compressionMethod NULL > > extensions > > server_name > > ja3s string: 769,5,0 > > ja3s fingerprint: 99f916287a3ac1de732520956ab94b77 > > 3 3 0.0353 (0.) S>C Handshake > > Certificate > > 3 4 0.0353 (0.) S>C Handshake > > ServerHelloDone > > 30.0653 (0.0299) C>S TCP FIN > > 30.0656 (0.0003) S>C TCP FIN > > ___ > > Users mailing list > > Users@lists.opensips.org > > http://lists.opensips.org/cgi-bin/mailman/listinfo/users > > > ___ > Users mailing list > Users@lists.opensips.org > http://lists.opensips.org/cgi-bin/mailman/listinfo/users > ___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users
[OpenSIPS-Users] phone not getting regsitered using TLS
Hi experts, One of my phones (SNOM M9) is not able to register using TLS. Here are the logs from opensips and ssldump. Maybe someone can pinpoint the issue? Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10604] DBG:core:handle_new_connect: new connection: 0x7f16d2ba3bd8 80 flags: 001c Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10604] DBG:core:send2worker: to tcp worker 0 (0), 0x7f16d2ba3bd8 rw 1 Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] DBG:proto_tls:proto_tls_conn_init: looking up TLS server domain [xx.xx.xx.xx:5061] Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] DBG:tls_mgm:tls_find_server_domain: found TLS server domain: sip.tls.mysipdomain.com Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] DBG:tls_openssl:openssl_tls_conn_init: Creating a whole new ssl connection Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] DBG:tls_openssl:openssl_tls_conn_init: Setting in ACCEPT mode (server) Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] DBG:core:handle_io: We have received conn 0x7f16d2ba3bd8 with rw 1 on fd 4 Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] DBG:core:io_watch_add: [TCP_worker] io_watch_add op (4 on 74) (0x8f91e0, 4, 19, 0x7f16d2ba3bd8,1), fd_no=4/83886 Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] DBG:proto_tls:tls_read_req: Using the global ( per process ) buff Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] DBG:tls_openssl:openssl_tls_update_fd: New fd is 4 Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] DBG:proto_tls:tls_read_req: SSL accept/connect still pending! Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] DBG:proto_tls:tls_read_req: Using the global ( per process ) buff Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] DBG:tls_openssl:openssl_tls_update_fd: New fd is 4 Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] ERROR:tls_openssl:openssl_tls_accept: SSL_ERROR_SYSCALL err=Success(0) Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] ERROR:tls_openssl:openssl_tls_accept: New TLS connection from myphoneIP.xx.xx:2987 failed to accept Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] ERROR:proto_tls:tls_read_req: failed to do pre-tls handshake! _ ssldump logs: New TCP connection #3: myphoneIP.xx.xx(2082) <-> sip.tls.mysipdomain.com (5061) 3 1 0.0280 (0.0280) C>S Handshake ClientHello Version 3.1 cipher suites TLS_RSA_WITH_RC4_128_MD5 TLS_RSA_WITH_RC4_128_SHA compression methods NULL extensions server_name host_name: sip.tls.mysipdomain.com ja3 string: 769,4-5,0,, ja3 fingerprint: 8305e724a7c9f16b323465d289bc54a1 3 2 0.0353 (0.0072) S>C Handshake ServerHello Version 3.1 session_id[0]= cipherSuite TLS_RSA_WITH_RC4_128_SHA compressionMethod NULL extensions server_name ja3s string: 769,5,0 ja3s fingerprint: 99f916287a3ac1de732520956ab94b77 3 3 0.0353 (0.) S>C Handshake Certificate 3 4 0.0353 (0.) S>C Handshake ServerHelloDone 30.0653 (0.0299) C>S TCP FIN 30.0656 (0.0003) S>C TCP FIN ___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users
Re: [OpenSIPS-Users] TLS Error
Hi Wang, Can you check the user rights of that directory? ls -lrth /etc/opensips/tls/user On Mon, May 23, 2022 at 3:10 AM Wang Wilson wrote: > Hello, > > I am sending this to follow the issue that was reported on *Sep 17 > 13:13:06 EST 2020.* > > > > My problem is that I get the same error message, but the path to > /etc/opensips/tls/user/user-cert.pem is correct and it is not symlink file. > > > > I just start to explore the TLS method for us to support SIP service. What > could be the reason for this? > > > > Thanks in advance. > > > > Regards > > Wilson > > > -- > > INFO:core:mod_init: initializing TCP-plain protocol > > May 22 22:32:45 wilson-VirtualBox /usr/local/opensips/sbin/opensips[7437]: > INFO:tls_mgm:mod_init: initializing TLS management > > May 22 22:32:45 wilson-VirtualBox /usr/local/opensips/sbin/opensips[7437]: > INFO:tls_mgm:mod_init: disabling compression due ZLIB problems > > May 22 22:32:45 wilson-VirtualBox /usr/local/opensips/sbin/opensips[7437]: > INFO:tls_mgm:init_tls_dom: Processing TLS domain 'default' > > May 22 22:32:45 wilson-VirtualBox /usr/local/opensips/sbin/opensips[7437]: > NOTICE:tls_mgm:init_tls_dom: No EC curve defined > > May 22 22:32:45 wilson-VirtualBox /usr/local/opensips/sbin/opensips[7437]: > INFO:tls_mgm:get_ssl_ctx_verify_mode: client verification activated. Client > certificates are NOT mandatory. > > May 22 22:32:45 wilson-VirtualBox /usr/local/opensips/sbin/opensips[7437]: > NOTICE:tls_mgm:init_tls_dom: no CA dir for tls 'default' defined, using > default '/etc/pki/CA/' > > May 22 22:32:45 wilson-VirtualBox /usr/local/opensips/sbin/opensips[7437]: > NOTICE:tls_mgm:init_tls_dom: no crl for tls, using none > > May 22 22:32:45 wilson-VirtualBox /usr/local/opensips/sbin/opensips[7437]: > ERROR:tls_mgm:tls_print_errstack: TLS errstack: error:140AB18E:SSL > routines:SSL_CTX_use_certificate:ca md too weak > > May 22 22:32:45 wilson-VirtualBox /usr/local/opensips/sbin/opensips[7437]: > ERROR:tls_mgm:load_certificate: unable to load certificate file > '/etc/opensips/tls/user/user-cert.pem' > > May 22 22:32:45 wilson-VirtualBox /usr/local/opensips/sbin/opensips[7437]: > ERROR:tls_mgm:init_tls_domains: Failed to init TLS domain 'default' > > May 22 22:32:45 wilson-VirtualBox /usr/local/opensips/sbin/opensips[7437]: > ERROR:core:init_mod: failed to initialize module tls_mgm > > May 22 22:32:45 wilson-VirtualBox /usr/local/opensips/sbin/opensips[7437]: > ERROR:core:main: error while initializing modules > > May 22 22:32:45 wilson-VirtualBox /usr/local/opensips/sbin/opensips[7437]: > INFO:core:cleanup: cleanup > > May 22 22:32:45 wilson-VirtualBox /usr/local/opensips/sbin/opensips[7437]: > NOTICE:core:main: Exiting > > > > > ___ > Users mailing list > Users@lists.opensips.org > http://lists.opensips.org/cgi-bin/mailman/listinfo/users > ___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users
[OpenSIPS-Users] Wildcard domain certificate for tls
Hi Dear community members, I have a few client domains for TLS. Is there any way I can use a wildcard domain like *.mytestdomain.com and use that in the certificate? This way I do not have to create a certificate for each domain. My config works fine with single domain which i am using like this: modparam("tls_mgm", "certificate", "[sip.tls.xx.xx]/etc/letsencrypt/live/sip.tls.xx.xx/cert.pem") I am using wolfssl as tls_library. Opensips version is 3.3 Thank you. ___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users