Re: [SR-Users] Kamailio when acting as client doesnt send SNI in client hello handshake message

Hi , I further went thru the logs of kamailio, and i see the below happening. tls [tls_server.c:169]: tls_get_connect_server_name[]: xavp with outbound server name not found tls [tls_server.c:152]: tls_get_connect_server_id[]: found xavp with outbound server id: btip.176.com Its strange

Re: [SR-Users] how to detect "failure to add branches"?

So, what is the conclusion on this? It is not good if information about failed branch route gets lost. Would it be possible to return some internal error reply and make t_relay() always succeed? -- Juha ___ Kamailio (SER) - Users Mailing List sr-users

Re: [SR-Users] TLS testing (with sipp)

Hi Julien, Thanks for this hint. A bit off topic the cert part but security should be forced :) Many ways to get an letsencryt certificate, I prefer the go-lang lego tool docker run -v $(pwd)/.lego:/.lego goacme/lego -d fqdn --email your@email -a --tls --pem run Saved stuff in dot lego folder.

Re: [SR-Users] TLS testing (with sipp)

Hi, I guess I was the one stretching it :) If you need to generate a cert, check EFF let's encrypt, here is one example to get a cert with HTTP validation #!/bin/bash iptables -I INPUT -p tcp --dport 80 -j ACCEPT sudo docker run -it --rm --name certbot \ --net=host \ -v "/etc/le

Re: [SR-Users] TLS testing (with sipp)

Hi Sebastian, well end to end tests are quite useful. Personally I used scripting with freeswitch and python to call endpoints and check if billing seconds are in an correct range that I assume before. That script can be run from monitoring like icinga or whatever. I also used Asterisk for test

Re: [SR-Users] Kamailio SIP TLS Troubleshooting

Kamailio provides: 1. Access to the (unencrypted) SIP message and its various attributes; https://www.kamailio.org/wiki/cookbooks/5.3.x/pseudovariables 2. Ways of changing the transport of a SIP message before forwarding it, e.g. remove ;transport=TLS; 3. Ways of constructing arbitrary synthet

Re: [SR-Users] TLS testing (with sipp)

Hi Julien, I had been thinking quite a while before posting it here, and maybe I shouldn't have mentioned the sipp SSL error. But I thought, end2end testing of kamailio setups could be of general interest from a Kamailio user point of view. And I hoped to get suggestions on how to do it. Thanks f

[SR-Users] Kamailio when acting as client doesnt send SNI in client hello handshake message

Hi, Am using Kamailio 5.1.9 version My Setup : client1 -> kamailio server 1 ( IP : 10.211.160.172) > kamailio server 2( IP : 10.211.160.176) -> client2 I have a scenario where kamailio server 1 has to initiate an outgoing tls connection to kamailio server 2, i have set the server_name and s

Re: [SR-Users] KSR.sdpops.remove_media is not working as expected

Hello, from the logs it looks ok, no error etc..: 3(237) DEBUG: app_lua [app_lua_sr.c:1651]: sr_kemi_lua_exec_func_ex(): param[0] for: remove_media is str: image 3(237) DEBUG: sdpops [sdpops_mod.c:1037]: sdp_remove_media(): attempting to search for media type: [image] 3(237) DEBUG: sdpops [sdpo

Re: [SR-Users] KSR.sdpops.remove_media is not working as expected

The log mentioned at https://pastebin.com/5JZmQUfq is by configuring "debug = 4" in kamailio.cfg. Please suggest other way if any, to get more debug logs. Thank you, Mitesh On Thu, Dec 19, 2019 at 3:34 PM Henning Westerholt wrote: > Hello, > > > > I see – do you get any error message in the log

Re: [SR-Users] Kamailio SIP TLS Troubleshooting

Ok, thanks. But do you mean to say Kamailio doesn't provide any module to decrypt the Encrypted SIP packets? On Wed, Dec 18, 2019 at 10:22 PM Henning Westerholt wrote: > Hello, > > > > if the requirement is to send this from android – then maybe ask at the > android client project or vendor. I

Re: [SR-Users] Kamailio SIP TLS Troubleshooting

Hi Henning My SIP message which are received by my kamailio is already TLS Encrypted from my android Client ( Handset) but I have requirement to forward these SIP messages from android client to a port mirrored destination ( say a Probe). Cheers Sudhakar Parasher On Wed, Dec 18, 2019 at 9:39 PM

Re: [SR-Users] Kamailio SIP TLS Troubleshooting

Thanks Henning But i need to send unencrypted TLS packets to mirrored destination Any ideas?? On Wed, 18 Dec 2019, 19:15 Henning Westerholt, wrote: > Hello, > > > > you could mirror the SIP traffic also with t_replicate function from the > TM module in the cfg. > > > > Cheers, > > > > Henning >

Re: [SR-Users] KSR.sdpops.remove_media is not working as expected

Hello, I see – do you get any error message in the logs? Can you execute it with debug logging activated, the function should output some debug logs about its working. Cheers, Henning -- Henning Westerholt – https://skalatan.de/blog/ Kamailio services – https://gilawa.com

Re: [SR-Users] KSR.sdpops.remove_media is not working as expected

Thank you for your response Henning! Unfortunately, it is not removed from outgoing message. True. I also believe that msg_apply_changes is not recommended, hence I am not using that. Thank you, Mitesh On Thu, Dec 19, 2019 at 3:14 PM Henning Westerholt wrote: > Hello, > > > > does it actually

Re: [SR-Users] KSR.sdpops.remove_media is not working as expected

Hello, does it actually remove the media after you send the message out? Usually the message altering functions will only be applied when you send out the message due to performance reasons. You can force it in the cfg with the function “msg_apply_changes” – then you should be able to see it a

Re: [SR-Users] [dispatcher] freeing already freed pointer, called from core: core/xavp.c: xavp_free

Hello Denys, good to know that you found a way how to solve this. You can create an issue on our github tracker about it, it should not produce this error. Please add your cfg examples and also dispatcher.list examples as well to reproduce it. Cheers, Henning -- Henning Westerholt – https://s

Re: [SR-Users] Questions about Presence

Hello, if you use subs_db_mode 2 then the list of activate watches should be available in the respective active_watchers table, I think. To the get the content of this in mode 0 there could be probably a RPC function to be added. If you thinking of adding an extra debugging line – this can be a

Re: [SR-Users] kamailio 5.2.5 wrong send socket on a mhomed proxy.

Hello Vitalii, thanks for the report. Please open a new issue on our github tracker about it, that this issue can be investigated more. Cheers, Henning -- Henning Westerholt – https://skalatan.de/blog/ Kamailio services – https://gilawa.com -Original Message- From: sr-users On Beha