<div dir="ltr">Hi All,<div><br></div><div>Am using kamailio 5.1.9 version</div><div><br></div><div>From <a href="http://www.kamailio.org/docs/modules/5.1.x/modules/tls.html">http://www.kamailio.org/docs/modules/5.1.x/modules/tls.html</a> , i understand " <span style="color:rgb(0,0,0);font-family:Helvetica,Arial,sans-serif;font-size:15px;text-align:justify">The value for server_id can be any string, being used to match TLS client config profile, overriding the match on ip:port and server_name.</span> " </div><div><br></div><div>Which suggests that the server_name and server_id can be different for a tls profile <br></div><div><br></div><div><table class="gmail-highlight gmail-tab-size gmail-js-file-line-container" style="box-sizing:border-box;border-spacing:0px;border-collapse:collapse;color:rgb(36,41,46);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:14px"><tbody style="box-sizing:border-box"><tr style="box-sizing:border-box"><td id="gmail-LC1369" class="gmail-blob-code gmail-blob-code-inner gmail-js-file-line" style="box-sizing:border-box;padding:0px 10px;line-height:20px;vertical-align:top;overflow:visible;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px;white-space:pre">
IN my tls.cfg i have
[client:default]<br>verify_certificate = no<br>require_certificate = no<br>
[client:<a href="http://10.211.160.172:5071">10.211.160.172:5071</a>]<br>method = TLSv1.2<br>verify_certificate = yes<br>require_certificate = yes<br>private_key = /ssl/sip/profile1/server.key<br>certificate = /ssl/sip/profile1/server.crt<br>ca_list = /ssl/sip/profile1/ca.crt<br>cipher_list = RSA<br>verify_depth = 9<br>server_id = profile1<br>server_name = <a href="http://btip.176.com">btip.176.com</a>
And in sar.cfg i am doing, before sending the request out
$xavp(tls=>server_name)="<a href="http://btip.176.com">btip.176.com</a>";<br>$xavp(tls[0]=>server_id)="profile1";
But if i see the logs , its picking client default profile for tls handshake, Am i missing anything in tls.cfg or sar.cfg ?
<div>if i see the code in <span style="color:rgb(111,66,193)">tls_lookup_cfg() </span></div><div><span style="color:rgb(111,66,193)"><br></span></div><div><table class="gmail-highlight gmail-tab-size gmail-js-file-line-container" style="box-sizing:border-box;border-spacing:0px;border-collapse:collapse;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:14px"><tbody style="box-sizing:border-box"><tr style="box-sizing:border-box"><td id="gmail-LC1359" class="gmail-blob-code gmail-blob-code-inner gmail-js-file-line" style="box-sizing:border-box;padding:0px 10px;line-height:20px;vertical-align:top;overflow:visible;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px"><span class="gmail-pl-k" style="box-sizing:border-box;color:rgb(215,58,73)">while</span> (p) {</td></tr><tr style="box-sizing:border-box"><td id="gmail-L1360" class="gmail-blob-num gmail-js-line-number" style="box-sizing:border-box;padding:0px 10px;width:50px;min-width:50px;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px;line-height:20px;color:rgba(27,31,35,0.3);text-align:right;white-space:nowrap;vertical-align:top"></td><td id="gmail-LC1360" class="gmail-blob-code gmail-blob-code-inner gmail-js-file-line" style="box-sizing:border-box;padding:0px 10px;line-height:20px;vertical-align:top;overflow:visible;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px"> <span class="gmail-pl-k" style="box-sizing:border-box;color:rgb(215,58,73)">if</span>(srvid && srvid-><span class="gmail-pl-smi" style="box-sizing:border-box">len</span>><span class="gmail-pl-c1" style="box-sizing:border-box;color:rgb(0,92,197)">0</span>) {</td></tr><tr style="box-sizing:border-box"><td id="gmail-L1361" class="gmail-blob-num gmail-js-line-number" style="box-sizing:border-box;padding:0px 10px;width:50px;min-width:50px;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px;line-height:20px;color:rgba(27,31,35,0.3);text-align:right;white-space:nowrap;vertical-align:top"></td><td id="gmail-LC1361" class="gmail-blob-code gmail-blob-code-inner gmail-js-file-line" style="box-sizing:border-box;padding:0px 10px;line-height:20px;vertical-align:top;overflow:visible;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px"> <span class="gmail-pl-c1" style="box-sizing:border-box;color:rgb(0,92,197)">LM_DBG</span>(<span class="gmail-pl-s" style="box-sizing:border-box;color:rgb(3,47,98)"><span class="gmail-pl-pds" style="box-sizing:border-box">"</span>comparing addr: [<span class="gmail-pl-c1" style="box-sizing:border-box;color:rgb(0,92,197)">%s</span>:<span class="gmail-pl-c1" style="box-sizing:border-box;color:rgb(0,92,197)">%d</span>] [<span class="gmail-pl-c1" style="box-sizing:border-box;color:rgb(0,92,197)">%s</span>:<span class="gmail-pl-c1" style="box-sizing:border-box;color:rgb(0,92,197)">%d</span>] -- id: [<span class="gmail-pl-c1" style="box-sizing:border-box;color:rgb(0,92,197)">%.*s</span>] [<span class="gmail-pl-c1" style="box-sizing:border-box;color:rgb(0,92,197)">%.*s</span>]<span class="gmail-pl-cce" style="box-sizing:border-box">\n</span><span class="gmail-pl-pds" style="box-sizing:border-box">"</span></span>,</td></tr><tr style="box-sizing:border-box"><td id="gmail-L1362" class="gmail-blob-num gmail-js-line-number" style="box-sizing:border-box;padding:0px 10px;width:50px;min-width:50px;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px;line-height:20px;color:rgba(27,31,35,0.3);text-align:right;white-space:nowrap;vertical-align:top"></td><td id="gmail-LC1362" class="gmail-blob-code gmail-blob-code-inner gmail-js-file-line" style="box-sizing:border-box;padding:0px 10px;line-height:20px;vertical-align:top;overflow:visible;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px"> <span class="gmail-pl-c1" style="box-sizing:border-box;color:rgb(0,92,197)">ip_addr2a</span>(&p-><span class="gmail-pl-smi" style="box-sizing:border-box">ip</span>), p-><span class="gmail-pl-smi" style="box-sizing:border-box">port</span>, <span class="gmail-pl-c1" style="box-sizing:border-box;color:rgb(0,92,197)">ip_addr2a</span>(ip), port,</td></tr><tr style="box-sizing:border-box"><td id="gmail-L1363" class="gmail-blob-num gmail-js-line-number" style="box-sizing:border-box;padding:0px 10px;width:50px;min-width:50px;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px;line-height:20px;color:rgba(27,31,35,0.3);text-align:right;white-space:nowrap;vertical-align:top"></td><td id="gmail-LC1363" class="gmail-blob-code gmail-blob-code-inner gmail-js-file-line" style="box-sizing:border-box;padding:0px 10px;line-height:20px;vertical-align:top;overflow:visible;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px"> p-><span class="gmail-pl-smi" style="box-sizing:border-box">server_id</span>.<span class="gmail-pl-smi" style="box-sizing:border-box">len</span>, <span class="gmail-pl-c1" style="box-sizing:border-box;color:rgb(0,92,197)">ZSW</span>(p-><span class="gmail-pl-smi" style="box-sizing:border-box">server_id</span>.<span class="gmail-pl-smi" style="box-sizing:border-box">s</span>),</td></tr><tr style="box-sizing:border-box"><td id="gmail-L1364" class="gmail-blob-num gmail-js-line-number" style="box-sizing:border-box;padding:0px 10px;width:50px;min-width:50px;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px;line-height:20px;color:rgba(27,31,35,0.3);text-align:right;white-space:nowrap;vertical-align:top"></td><td id="gmail-LC1364" class="gmail-blob-code gmail-blob-code-inner gmail-js-file-line" style="box-sizing:border-box;padding:0px 10px;line-height:20px;vertical-align:top;overflow:visible;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px"> srvid-><span class="gmail-pl-smi" style="box-sizing:border-box">len</span>, <span class="gmail-pl-c1" style="box-sizing:border-box;color:rgb(0,92,197)">ZSW</span>(srvid-><span class="gmail-pl-smi" style="box-sizing:border-box">s</span>));</td></tr><tr style="box-sizing:border-box"><td id="gmail-L1365" class="gmail-blob-num gmail-js-line-number" style="box-sizing:border-box;padding:0px 10px;width:50px;min-width:50px;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px;line-height:20px;color:rgba(27,31,35,0.3);text-align:right;white-space:nowrap;vertical-align:top"></td><td id="gmail-LC1365" class="gmail-blob-code gmail-blob-code-inner gmail-js-file-line" style="box-sizing:border-box;padding:0px 10px;line-height:20px;vertical-align:top;overflow:visible;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px"> <span class="gmail-pl-k" style="box-sizing:border-box;color:rgb(215,58,73)">if</span>(p-><span class="gmail-pl-smi" style="box-sizing:border-box">server_id</span>.<span class="gmail-pl-smi" style="box-sizing:border-box">s</span> && p-><span class="gmail-pl-smi" style="box-sizing:border-box">server_id</span>.<span class="gmail-pl-smi" style="box-sizing:border-box">len</span>==srvid-><span class="gmail-pl-smi" style="box-sizing:border-box">len</span></td></tr><tr style="box-sizing:border-box"><td id="gmail-L1366" class="gmail-blob-num gmail-js-line-number" style="box-sizing:border-box;padding:0px 10px;width:50px;min-width:50px;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px;line-height:20px;color:rgba(27,31,35,0.3);text-align:right;white-space:nowrap;vertical-align:top"></td><td id="gmail-LC1366" class="gmail-blob-code gmail-blob-code-inner gmail-js-file-line" style="box-sizing:border-box;padding:0px 10px;line-height:20px;vertical-align:top;overflow:visible;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px"> && <span class="gmail-pl-c1" style="box-sizing:border-box;color:rgb(0,92,197)">strncasecmp</span>(p-><span class="gmail-pl-smi" style="box-sizing:border-box">server_name</span>.<span class="gmail-pl-smi" style="box-sizing:border-box">s</span>, srvid-><span class="gmail-pl-smi" style="box-sizing:border-box">s</span>, srvid-><span class="gmail-pl-smi" style="box-sizing:border-box">len</span>)==<span class="gmail-pl-c1" style="box-sizing:border-box;color:rgb(0,92,197)">0</span>) {</td></tr><tr style="box-sizing:border-box"><td id="gmail-L1367" class="gmail-blob-num gmail-js-line-number" style="box-sizing:border-box;padding:0px 10px;width:50px;min-width:50px;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px;line-height:20px;color:rgba(27,31,35,0.3);text-align:right;white-space:nowrap;vertical-align:top"></td><td id="gmail-LC1367" class="gmail-blob-code gmail-blob-code-inner gmail-js-file-line" style="box-sizing:border-box;padding:0px 10px;line-height:20px;vertical-align:top;overflow:visible;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px"> <span class="gmail-pl-c1" style="box-sizing:border-box;color:rgb(0,92,197)">LM_DBG</span>(<span class="gmail-pl-s" style="box-sizing:border-box;color:rgb(3,47,98)"><span class="gmail-pl-pds" style="box-sizing:border-box">"</span>TLS config found by server id<span class="gmail-pl-cce" style="box-sizing:border-box">\n</span><span class="gmail-pl-pds" style="box-sizing:border-box">"</span></span>);</td></tr><tr style="box-sizing:border-box"><td id="gmail-L1368" class="gmail-blob-num gmail-js-line-number" style="box-sizing:border-box;padding:0px 10px;width:50px;min-width:50px;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px;line-height:20px;color:rgba(27,31,35,0.3);text-align:right;white-space:nowrap;vertical-align:top"></td><td id="gmail-LC1368" class="gmail-blob-code gmail-blob-code-inner gmail-js-file-line" style="box-sizing:border-box;padding:0px 10px;line-height:20px;vertical-align:top;overflow:visible;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px"> <span class="gmail-pl-k" style="box-sizing:border-box;color:rgb(215,58,73)">return</span> p;</td></tr><tr style="box-sizing:border-box"><td id="gmail-L1369" class="gmail-blob-num gmail-js-line-number" style="box-sizing:border-box;padding:0px 10px;width:50px;min-width:50px;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px;line-height:20px;color:rgba(27,31,35,0.3);text-align:right;white-space:nowrap;vertical-align:top"></td><td id="gmail-LC1369" class="gmail-blob-code gmail-blob-code-inner gmail-js-file-line" style="box-sizing:border-box;padding:0px 10px;line-height:20px;vertical-align:top;overflow:visible;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,monospace;font-size:12px"> }
....
Why is that there is a strncasecmp between p->server_name.s and srvid->s ?? the strncasecmp should be between p->server_id.s and srvid->s right ?</td></tr></tbody></table></div>
Regards,
Mahesh.B</td></tr></tbody></table></div></div>