<div dir="ltr">Thanks Daniel.</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Nov 19, 2019 at 5:20 PM Daniel-Constantin Mierla <<a href="mailto:miconda@gmail.com">miconda@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div bgcolor="#FFFFFF">
<p>Hello,</p>
<p>looks like client side is doing renegotiation, which is disabled
by default:</p>
<p> * <a href="https://www.kamailio.org/docs/modules/devel/modules/tls.html#tls.p.renegotiation" target="_blank">https://www.kamailio.org/docs/modules/devel/modules/tls.html#tls.p.renegotiation</a></p>
<p>Cheers,<br>
Daniel<br>
</p>
<div>On 19.11.19 21:22, Andrew Chen wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hi guys,
<div><br>
</div>
<div>I was wondering if someone can help decipher what these few
lines mean?</div>
<div><br>
</div>
<div>Nov 19 20:12:50 sjomainkama51 /usr/sbin/kamailio[21501]:
DEBUG: tls [tls_server.c:431]: tls_accept(): tls_accept: new
connection from <a href="http://10.94.98.18:51698" target="_blank">10.94.98.18:51698</a> using TLSv1.3
TLS_AES_256_GCM_SHA384 256<br>
Nov 19 20:12:50 sjomainkama51 /usr/sbin/kamailio[21501]:
DEBUG: tls [tls_server.c:434]: tls_accept(): tls_accept: local
socket: <a href="http://206.81.191.45:443" target="_blank">206.81.191.45:443</a><br>
Nov 19 20:12:50 sjomainkama51 /usr/sbin/kamailio[21501]:
DEBUG: tls [tls_server.c:445]: tls_accept(): tls_accept:
client did not present a certificate<br>
Nov 19 20:12:50 sjomainkama51 /usr/sbin/kamailio[21501]:
DEBUG: tls [tls_server.c:1189]: tls_read_f(): Reading on a
renegotiation of connection (n:1652) (0)<br>
Nov 19 20:12:50 sjomainkama51 /usr/sbin/kamailio[21501]:
DEBUG: <core> [core/tcp_read.c:1527]: tcp_read_req():
EOF<br>
Nov 19 20:12:50 sjomainkama51 /usr/sbin/kamailio[21501]:
DEBUG: <core> [core/io_wait.h:602]: io_watch_del(): DBG:
io_watch_del (0x56367f8b8f80, 12, -1, 0x10) fd_no=2 called<br>
Nov 19 20:12:50 sjomainkama51 /usr/sbin/kamailio[21501]:
DEBUG: <core> [core/tcp_read.c:1680]: release_tcpconn():
releasing con 0x7fcfc20c57b0, state -1, fd=12, id=23
([10.94.98.18]:51698 -> [10.94.98.18]:443)<br>
Nov 19 20:12:50 sjomainkama51 /usr/sbin/kamailio[21501]:
DEBUG: <core> [core/tcp_read.c:1684]: release_tcpconn():
extra_data 0x7fcfc2089f88<br>
Nov 19 20:12:50 sjomainkama51 /usr/sbin/kamailio[21517]:
DEBUG: <core> [core/tcp_main.c:3320]:
handle_tcp_child(): reader response= 7fcfc20c57b0, -1 from 16<br>
Nov 19 20:12:50 sjomainkama51 /usr/sbin/kamailio[21517]:
DEBUG: tls [tls_server.c:683]: tls_h_close(): Closing SSL
connection 0x7fcfc2089f88</div>
<div><br>
</div>
<div>Bottom line is kamailio closed the connection and I have
method setting to this:</div>
<div><br>
</div>
<div>root@sjomainkama51:/etc/kamailio # grep method tls.cfg<br>
method = TLSv1.1+<br>
</div>
<div><br>
</div>
<div>Supposedly this should work?</div>
<div>
<div><br>
</div>
-- <br>
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr" style="font-size:12.8px">Andy Chen</div>
<div dir="ltr" style="font-size:12.8px">
<div>Sr. Telephony Lead Engineer</div>
<div><a href="mailto:achen@thinkingphones.com" style="font-size:12.8px" target="_blank">achen@</a><a href="http://fuze.com" style="font-size:12.8px" target="_blank">fuze.com</a><br>
</div>
<div><br>
<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">*Confidentiality
Notice: The information contained in this e-mail and any</span><br style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">
<span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">attachments
may be confidential. If you are not an intended recipient, you</span><br style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">
<span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">are
hereby notified that any dissemination, distribution or copying
of this</span><br style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">
<span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">e-mail
is strictly prohibited. If you have received this e-mail in
error,</span><br style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">
<span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">please
notify the sender and permanently delete the e-mail and any</span><br style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">
<span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">attachments
immediately. You should not retain, copy or use this e-mail or</span><br style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">
<span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">any
attachment for any purpose, nor disclose all or any part of the</span><br style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">
<span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">contents
to any other person. Thank you.*</span>
<br>
<fieldset></fieldset>
<pre>_______________________________________________
Kamailio (SER) - Users Mailing List
<a href="mailto:sr-users@lists.kamailio.org" target="_blank">sr-users@lists.kamailio.org</a>
<a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" target="_blank">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<pre cols="72">--
Daniel-Constantin Mierla -- <a href="http://www.asipto.com" target="_blank">www.asipto.com</a>
<a href="http://www.twitter.com/miconda" target="_blank">www.twitter.com/miconda</a> -- <a href="http://www.linkedin.com/in/miconda" target="_blank">www.linkedin.com/in/miconda</a>
Kamailio World Conference - April 27-29, 2020, in Berlin -- <a href="http://www.kamailioworld.com" target="_blank">www.kamailioworld.com</a></pre>
</div>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr" style="font-size:12.8px">Andy Chen</div><div dir="ltr" style="font-size:12.8px"><div>Sr. Telephony Lead Engineer</div><div>415 516 5535 (M)</div><div><a href="mailto:achen@thinkingphones.com" target="_blank">achen@</a><a href="http://fuze.com" target="_blank">fuze.com</a></div><div><br></div></div></div></div></div></div>
<br>
<span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">*Confidentiality Notice: The information contained in this e-mail and any</span><br style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">attachments may be confidential. If you are not an intended recipient, you</span><br style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">are hereby notified that any dissemination, distribution or copying of this</span><br style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">e-mail is strictly prohibited. If you have received this e-mail in error,</span><br style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">please notify the sender and permanently delete the e-mail and any</span><br style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">attachments immediately. You should not retain, copy or use this e-mail or</span><br style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">any attachment for any purpose, nor disclose all or any part of the</span><br style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)">contents to any other person. Thank you.*</span>