I'm sure everyone here loves my one sided conversations with myself :) It was definitely the fact that the component below doesn't know how to find my windows certificate authority, or isn't asking the way it needs to be asked, etc. I don't expect this group to help me with that. Can you point me in the correct direction though? Is this an Apache question, openssl question, or something else?
Thanks, Matthew On 1/18/2010 4:56 PM, mkitchin.pub...@gmail.com wrote: > Sorry for spreading this across multiple emails. It seems it may > definitely be the SSL certificate. I'm far from an expert in this, but > it looks like it can't figure out where to go to verify the the SSL > cert. I may have to abort and go back to the internal certificate I > guess. I don't have a clue what the correct (assuming it is possible) > way to fix this would be. > > "2010-01-18T22:49:30.483308Z":1:KERNEL:ERR:nshpbx1.sipx.voip:pid-32405:739B5C30:mediaservercgi:"OsSSL::verifyCallback > > invalid certificate at depth 0\n error='unable to get local > issuer certificate'\n > issuer='/DC=net/DC=dsi-corp/CN=nshsubject='/C=US/ST=TN/L=Davidson/O=DSI/OU=VoIP > > Services/CN=nshpbx1.sipx.voip/emailaddress=matt...@munged.com'" > "2010-01-18T22:49:30.483508Z":2:KERNEL:ERR:nshpbx1.sipx.voip:pid-32405:739B5C30:mediaservercgi:"OsSSLConnectionSocket > > SSL_connect failed: :\n SSL error: 1 > 'error:00000001:lib(0):func(0):reason(1)'" > "2010-01-18T22:49:30.483555Z":3:HTTP:ERR:nshpbx1.sipx.voip:pid-32405:739B5C30:mediaservercgi:"HttpMessage::get[4] > > socket to 10.87.20.5:8443 not connected, retry 1 after 20ms" > "2010-01-18T22:49:30.510936Z":4:KERNEL:ERR:nshpbx1.sipx.voip:pid-32405:739B5C30:mediaservercgi:"OsSSL::verifyCallback > > invalid certificate at depth 0\n error='unable to get local > issuer certificate'\n > issuer='/DC=net/DC=dsi-corp/CN=nshsubject='/C=US/ST=TN/L=Davidson/O=DSI/OU=VoIP > > Services/CN=nshpbx1.sipx.voip/emailaddress=matt...@munged.com'" > "2010-01-18T22:49:30.511007Z":5:KERNEL:ERR:nshpbx1.sipx.voip:pid-32405:739B5C30:mediaservercgi:"OsSSLConnectionSocket > > SSL_connect failed: :\n SSL error: 1 > 'error:00000001:lib(0):func(0):reason(1)'" > "2010-01-18T22:49:30.511042Z":6:HTTP:ERR:nshpbx1.sipx.voip:pid-32405:739B5C30:mediaservercgi:"HttpMessage::get[4] > > socket to 10.87.20.5:8443 not connected, retry 2 after 40ms" > "2010-01-18T22:49:30.552454Z":7:HTTP:ERR:nshpbx1.sipx.voip:pid-32405:739B5C30:mediaservercgi:"HttpMessage::get[4] > > socket connection to 10.87.20.5:8443 failed, give up..." > > > On 1/18/2010 4:37 PM, mkitchin.pub...@gmail.com wrote: >> A little more info: I looked for active logfiles when I was >> attempting to make a change. httpd_access_log seems to have some >> relevent info. I'm at extension/user 0142. This is me trying to >> change my pin from 1000 to 2222 and it failing. >> >> [18/Jan/2010:16:34:22 -0600] nshpbx1.sipx.voip TLSv1 >> DHE-RSA-AES256-SHA "GET >> /cgi-bin/voicemail/mediaserver.cgi?action=retrieve&lang=en&from=%22Matthew%2BKitchin%22%3Csip%3A0142%40sipx.voip%3E%3Btag%253D9C5A6426-922D8AF7 >> >> HTTP/1.0" 450 >> 127.0.0.1 - - [18/Jan/2010:16:34:22 -0600] "GET /vm_vxml/login >> HTTP/1.0" 200 9564 >> 127.0.0.1 - - [18/Jan/2010:16:34:22 -0600] "GET /vm_vxml/root >> HTTP/1.0" 200 3287 >> 127.0.0.1 - - [18/Jan/2010:16:34:26 -0600] "GET >> /cgi-bin/voicemail/mediaserver.cgi?action=login&extension=0142%40sipx.voip&pin=1000 >> >> HTTP/1.0" 200 511 >> [18/Jan/2010:16:34:26 -0600] 127.0.0.1 TLSv1 DHE-RSA-AES256-SHA "GET >> /cgi-bin/voicemail/mediaserver.cgi?action=login&extension=0142%40sipx.voip&pin=1000 >> >> HTTP/1.0" 511 >> 127.0.0.1 - - [18/Jan/2010:16:34:26 -0600] "GET /vm_vxml/mainmenu >> HTTP/1.0" 200 13651 >> 127.0.0.1 - - [18/Jan/2010:16:34:26 -0600] "GET /vm_vxml/root >> HTTP/1.0" 200 3287 >> 127.0.0.1 - - [18/Jan/2010:16:34:29 -0600] "GET /vm_vxml/changepin >> HTTP/1.0" 200 4334 >> 127.0.0.1 - - [18/Jan/2010:16:34:29 -0600] "GET /vm_vxml/root >> HTTP/1.0" 200 3287 >> 127.0.0.1 - - [18/Jan/2010:16:34:37 -0600] "GET >> /cgi-bin/voicemail/mediaserver.cgi?action=changepin&extension=0142%40sipx.voip&newpin=2222&pin=1000 >> >> HTTP/1.0" 200 149 >> [18/Jan/2010:16:34:37 -0600] 127.0.0.1 TLSv1 DHE-RSA-AES256-SHA "GET >> /cgi-bin/voicemail/mediaserver.cgi?action=changepin&extension=0142%40sipx.voip&newpin=2222&pin=1000 >> >> HTTP/1.0" 149 >> >> >> >> On 1/18/2010 4:12 PM, mkitchin.pub...@gmail.com wrote: >>> I'm not sure when this started, so I don't even want to guess as to >>> what might have caused it. >>> When an user tries to change their PIN from the voice mail menu, it >>> fails and they hear this: >>> "An error occurred while processing your request. Your personal >>> identification number is not changed. " >>> I have not done anything out of the ordinary I can think of that >>> would cause this. Only recent change is moving to a different SSL cert. >>> I found this: >>> http://www.mail-archive.com/sipx-users@list.sipfoundry.org/msg06867.html >>> >>> but I don;t think it applies to me in any way. >>> [r...@nshpbx1 ~]# ll /var/sipxdata/mediaserver/ >>> total 8 >>> drwxr-xr-x 6 sipxchange sipxchange 4096 Jan 14 10:17 data >>> >>> Any ideas? >>> >>> Thanks as always, >>> Matthew >>> >>> Sipx 4.0.4, sixbridge, Verizon VOIP, No firewall (not needed, >>> private connection), Polycom 450s and 550s - bootrom 4.2.1, firmware >>> 3.1.3C split. >> > _______________________________________________ sipx-users mailing list sipx-users@list.sipfoundry.org List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/
