Dears, I am trying to use OpenSIPS with TLS but didn't work till now :(
I am getting the following error: Mar 25 14:09:49 [16855] DBG:core:print_ip: tcpconn_new: new tcp connection to: 192.168.20.19 Mar 25 14:09:49 [16855] DBG:core:tcpconn_new: on port 4034, type 3 Mar 25 14:09:49 [16855] DBG:core:tls_tcpconn_init: entered: Creating a whole new ssl connection Mar 25 14:09:49 [16855] DBG:core:tls_tcpconn_init: looking up socket based TLS server domain [192.168.168.28:5061] Mar 25 14:09:49 [16855] DBG:core:tls_find_server_domain: virtual TLS server domain found Mar 25 14:09:49 [16855] DBG:core:tls_tcpconn_init: found socket based TLS server domain [192.168.168.28:5061] Mar 25 14:09:49 [16855] DBG:core:tls_tcpconn_init: Setting in ACCEPT mode (server) Mar 25 14:09:49 [16855] DBG:core:tcpconn_add: hashes: 770, 1 Mar 25 14:09:49 [16855] DBG:core:handle_new_connect: new connection: 0xafc4f7c8 25 flags: 0002 Mar 25 14:09:49 [16855] DBG:core:send2child: to tcp child 0 0(16847), 0xafc4f7c8 Mar 25 14:09:49 [16847] DBG:core:handle_io: received n=4 con=0xafc4f7c8, fd=12 Mar 25 14:09:49 [16847] DBG:core:io_watch_add: io_watch_add(0x81b6ec0, 12, 2, 0xafc4f7c8), fd_no=1 Mar 25 14:09:49 [16847] DBG:core:tls_update_fd: New fd is 12 Mar 25 14:09:49 [16847] DBG:core:tls_update_fd: New fd is 12 Mar 25 14:09:49 [16847] ERROR:core:tls_accept: some error in SSL (ret=0, err=1, errno=0/Success): Mar 25 14:09:49 [16847] ERROR:core:tls_print_errstack: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca Mar 25 14:09:49 [16847] DBG:core:io_watch_del: io_watch_del (0x81b6ec0, 12, -1, 0x10) fd_no=2 called Mar 25 14:09:49 [16847] DBG:core:release_tcpconn: releasing con 0xafc4f7c8, state -2, fd=12, id=1 Mar 25 14:09:49 [16847] DBG:core:release_tcpconn: extra_data 0xafc5f8e4 Mar 25 14:09:49 [16855] DBG:core:handle_tcp_child: reader response= afc4f7c8, -2 from 0 Mar 25 14:09:49 [16855] DBG:core:tcpconn_destroy: destroying connection 0xafc4f7c8, flags 0002 Mar 25 14:09:49 [16855] DBG:core:tls_close: closing SSL connection Mar 25 14:09:49 [16855] DBG:core:tls_update_fd: New fd is 25 Mar 25 14:09:49 [16855] DBG:core:tls_shutdown: shutdown successful Mar 25 14:09:49 [16855] DBG:core:tls_tcpconn_clean: entered Below the configuration file for the debug and TLS Section: debug=4 fork=yes log_stderror=yes check_via=no dns=no rev_dns=no tls_client_domain_avp=0 disable_tls = no listen = tls:192.168.168.28:5061 tls_verify_server = 1 tls_verify_client = 1 tls_require_client_certificate = 1 tls_handshake_timeout=30 tls_send_timeout=30 tls_method = TLSv1 tls_ciphers_list="NULL" tls_certificate = "/usr/local/etc/opensips//tls/user/user-cert.pem" tls_private_key = "/usr/local/etc/opensips//tls/user/user-privkey.pem" tls_ca_list = "/usr/local/etc/opensips//tls/user/user-calist.pem" tls_server_domain [192.168.168.28:5061] { tls_certificate = "/usr/local/etc/opensips//tls/user/user-cert.pem" tls_private_key = "/usr/local/etc/opensips//tls/user/user-privkey.pem" tls_ca_list = "/usr/local/etc/opensips/tls//user/user-calist.pem" tls_method = TLSv1 } Below you can find also info regarding my OpenSIPS server version: opensips 1.6.4-2-tls (i386/linux) flags: STATS: Off, USE_IPV6, USE_TCP, USE_TLS, DISABLE_NAGLE, USE_MCAST, SHM_MEM, SHM_MMAP, PKG_MALLOC, F_MALLOC, FAST_LOCK-ADAPTIVE_WAIT ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16, MAX_URI_SIZE 1024, BUF_SIZE 65535 poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. svnrevision: unknown @(#) $Id: main.c 7530 2010-12-13 19:07:53Z bogdan_iancu $ main.c compiled on 13:57:04 Jan 31 2011 with gcc 4.2.4 Linux 2.6.24-23-server #1 SMP Thu Nov 27 19:19:15 UTC 2008 i686 GNU/Linux Ubuntu 8.04.4 LTS \n \l Inform me if how can I fix this issue, and if you need more info don't hesitate to contact me. BR, -----Original Message----- From: users-boun...@lists.opensips.org [mailto:users-boun...@lists.opensips.org] On Behalf Of users-requ...@lists.opensips.org Sent: Wednesday, March 23, 2011 3:47 AM To: users@lists.opensips.org Subject: Users Digest, Vol 32, Issue 56 Send Users mailing list submissions to users@lists.opensips.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.opensips.org/cgi-bin/mailman/listinfo/users or, via email, send a message with subject or body 'help' to users-requ...@lists.opensips.org You can reach the person managing the list at users-ow...@lists.opensips.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Users digest..." Today's Topics: 1. OpenSIPS/SIP over TLS (David Chedid) 2. Re: Munin monitoring plugin (ha do) 3. ERROR:core:tcp_read_req: bad request (John Khvatov) 4. Re: Opensips Control Pannel does not take effect into Opensips Server (Duong Manh Truong) ---------------------------------------------------------------------- Message: 1 Date: Tue, 22 Mar 2011 13:47:21 +0200 From: "David Chedid" <dche...@p-group.cc> Subject: [OpenSIPS-Users] OpenSIPS/SIP over TLS To: <users@lists.opensips.org> Message-ID: <02b001cbe886$ed185e50$c7491af0$@cc> Content-Type: text/plain; charset="us-ascii" I need to test the SIP over TLS using the OpenSIPS. . I need to know what is the best stable version? so I can install it and start testing. . Do I need to generate certificate and install it from the client side? . Is there any sample of configuration file to use it? Thanks, BR, -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.opensips.org/pipermail/users/attachments/20110322/29f3a53b/att achment-0001.htm> ------------------------------ Message: 2 Date: Tue, 22 Mar 2011 06:48:55 -0700 (PDT) From: ha do <haloha...@yahoo.com> Subject: Re: [OpenSIPS-Users] Munin monitoring plugin To: OpenSIPS users mailling list <users@lists.opensips.org> Message-ID: <526619.6915...@web32406.mail.mud.yahoo.com> Content-Type: text/plain; charset=iso-8859-1 Hi interesting plug_in do you have screen shot of pictures :D --- On Tue, 3/22/11, Henning Holtschneider <henn...@loca.net> wrote: > From: Henning Holtschneider <henn...@loca.net> > Subject: [OpenSIPS-Users] Munin monitoring plugin > To: "OpenSIPS users mailling list" <users@lists.opensips.org> > Date: Tuesday, March 22, 2011, 2:01 AM > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hello everybody, > > I wrote a Munin monitoring plugin which collects data via > the 'opensipsctl fifo get_statistics' command the other day. > The plugin is available at <http://github.com/hehol/OpenSIPS-Munin-Plugin>. If > you have any questions or suggestions, feel free to contact > me or just fork my code at Github and contribute! > > Cheers, > Henning Holtschneider > - -- > LocaNet oHG - http://www.loca.net > Lindemannstrasse 81, D-44137 Dortmund > tel +49 231 91596-25, fax +49 231 91596-55 > sip 2...@voip.loca.net > > Registergericht Amtsgericht Dortmund HRA 14208 > Gesch?ftsf?hrer Sven Haufe, Henning Holtschneider > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.10 (Darwin) > > iEYEARECAAYFAk2IV2EACgkQP9goCV2uudcm3gCfR/37oL7BtYGKdxvvGp9Y2qTS > lMMAoO4PV6fO9+WOm9zCNjvdD62QZHdR > =+tCa > -----END PGP SIGNATURE----- > > _______________________________________________ > Users mailing list > Users@lists.opensips.org > http://lists.opensips.org/cgi-bin/mailman/listinfo/users > ------------------------------ Message: 3 Date: Tue, 22 Mar 2011 20:54:07 +0300 From: John Khvatov <iva...@gmail.com> Subject: [OpenSIPS-Users] ERROR:core:tcp_read_req: bad request To: OpenSIPS users mailling list <users@lists.opensips.org> Message-ID: <d5dcb5bd-eaf3-4e3d-afe0-f63ca0e53...@gmail.com> Content-Type: text/plain; charset=us-ascii Hello all. I could be wrong but it looks like bug in parser: Mar 22 17:26:22 sip /usr/sbin/opensips[3005]: ERROR:core:tcp_read_req: bad request, state=4, error=4 buf:#012REGISTER sip:tipmeet.com SIP/2.0#015#012Via: SIP/2.0/TCP 192.168.1.100:58279;branch=z9hG4bK-d8754z-e162c0293960910c-1---d8754z-;rport #015#012Max-Forwards: 70#015#012Contact: <sip:96210185@192.168.1.100:58279;rinstance=8f953a1c002afaee;transport=TCP># 015#012To: "96210185"<sip:96210...@tipmeet.com>#015#012From: "96210185"<sip:96210...@tipmeet.com>;tag=6a11c927#015#012Call-ID: YTJhZmEzN2EzM2NkNGU1ZWY0ZDU3MTZlZTM3Y2Q1MWQ.#015#012CSeq: 2 REGISTER#015#012Expires: 3600#015#012Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO#015#012User-Agent: Bria release 2.5 RC4 stamp 47242#015#012Authorization: Digest username="tipmeet.com#012#01296210185",realm="tipmeet.com",nonce="4d88dbdb00 000b9759f36d9f0a8fbac1ae1a3aea9963bae6",uri="sip:tipmeet.com",response="bc7d 38b1bb7b190d94c8ad6a4cd4599a",cnonce="3264a3294f724a3d1cd0ca276593b9ba",nc=0 0000001,qop=auth,algorithm=MD5#015#012Content-Length: 0#015#012#015#012#012parsed:#012REGISTER sip:tipmeet.com SIP/2.0#015#012Via: SIP/2.0/TCP 192.168.1.100:58279;branch=z9hG4bK-d8754z-e162c0293960910c-1---d8754z-;rport #015#012Max-Forwards: 70#015#012Contact: <sip:96210185@192.168.1.100:58279;rinstance=8f953a1c002afaee;transport=TCP># 015#012To: "96210185"<sip:96210...@tipmeet.com>#015#012From: "96210185"<sip:96210...@tipmeet.com>;tag=6a11c927#015#012Call-ID: YTJhZmEzN2EzM2NkNGU1ZWY0ZDU3MTZlZTM3Y2Q1MWQ.#015#012CSeq: 2 REGISTER#015#012Expires: 3600#015#012Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO#015#012User-Agent: Bria release 2.5 RC4 stamp 47242#015#012Authorization: Digest username="tipmeet.com#012#012 Pay attention to this header: Authorization: Digest username="tipmeet.com#012#01296210185" Quoted string with two NL chars: "tipmeet.com\n\n96210185" did not parsed correctly. -- WBR, John Khvatov ------------------------------ Message: 4 Date: Wed, 23 Mar 2011 08:47:19 +0700 From: Duong Manh Truong <ngoahotanglon...@gmail.com> Subject: Re: [OpenSIPS-Users] Opensips Control Pannel does not take effect into Opensips Server To: users@lists.opensips.org Message-ID: <AANLkTimrLa0UHV4imbHkuGg-_YW8YL5evTX4svh=_...@mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1" Dear Dave! Thanks for your help. I've checked the opensips.cfg again but i still can not find out what stuff is incorrect ! :-( I attached my config file in this email, hope that will help my problem to be clearer! If anyone has had the same issue, please tell me how can i check or fix it. (Hope to receive relatively specific informations) Thanks and Best Regards. Date: Mon, 21 Mar 2011 08:45:03 -0700 From: Dave Singer <dave.sin...@wideideas.com> Subject: Re: [OpenSIPS-Users] Opensips Control Pannel does not take effect into Opensips Server To: OpenSIPS users mailling list <users@lists.opensips.org> Message-ID: <aanlktingldzzbugjgqxod_93r31hjnhavazpmo64k...@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1 Duong, Some modules, like drouting, you have to click a reload module button in the control pannel. However, I think your problem is that you haven't implemented the needed stuff in opensips.cfg script. CP only provides an interface to managing/accessing the databases tables. You still have to impliment the logic in opensips.cfg. Dave On Sat, Mar 19, 2011 at 3:04 AM, Duong Manh Truong <ngoahotanglon...@gmail.com> wrote: > Hi all, > I have followed all instructions about Opensips CP installations > After done all configurations, the Web interface is appeared > but unfortunately, when i use modules in this interfaces, it seems there is > no connection between Opensips CP and Opensips Server Core! > Take add/manage users module as an example: I registered user 1001, then i > selected this module to show online users > => But the result was "no data found" :-( > I've created opensips database, correctly insert parameters to opensips CP > config files (including mysql user/pass to connect to opensips database) > No error found ! > But i still can not use Opensips CP, someone help me to figure out why > Opensips CP has no effect ?? > Do i misconfig ?(or forget to config) some important parameters to make > Opensips CP connect properly to Opensips Server Core? > (Something likes authentications........etc) > Thanks a lot! > _______________________________________________ > Users mailing list > Users@lists.opensips.org > http://lists.opensips.org/cgi-bin/mailman/listinfo/users > > -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.opensips.org/pipermail/users/attachments/20110323/e1491166/att achment.htm> -------------- next part -------------- A non-text attachment was scrubbed... Name: opensips.cfg Type: application/octet-stream Size: 11218 bytes Desc: not available URL: <http://lists.opensips.org/pipermail/users/attachments/20110323/e1491166/att achment.obj> ------------------------------ _______________________________________________ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users End of Users Digest, Vol 32, Issue 56 ************************************* _______________________________________________ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users