<div dir="ltr"><div>OK, spent some time around tls configuration. OpenSSL shows no error now, but dispatcher continues to show me IP or AX. </div><div><br></div><div>openssl s_client -showcerts -debug -connect <a href="http://servername.com:5061">servername.com:5061</a> -no_ssl2 -bugs -servername 
<a href="http://servername.com">servername.com</a> -CAfile /root/intermediate.crt</div><div><goodgoodgoodnoerrors></div><div><br></div><div>kamalio.cfg</div><div>....</div><div>####### Routing Logic ########<br><br>event_route[tm:local-request] {<br><br>        if(is_method("OPTIONS") && $ru =~ "<a href="http://pstnhub.microsoft.com">pstnhub.microsoft.com</a>") {<br>               append_hf("Contact: <sip:servername.com:5061;transport=tls>\r\n");<br>        }<br>        xlog("L_INFO", "Sent out tm request: $mb\n");<br>}</div><div></div><div><br></div><div>request_route {</div><div>...</div><div>        if (is_method("INVITE|SUBSCRIBE")) {<br>                record_route_preset("servername.com:5061;transport=tls", "my_ip:5060");<br>                #record_route();<br>        }</div><div>...</div><div>}<br></div><div><br></div><div>route[WITHINDLG] {<br>        if (!has_totag()) return;<br><br>        # sequential request withing a dialog should<br>        # take the path determined by record-routing<br>        if (loose_route()) {<br>                route(DLGURI);<br>                if (is_method("BYE")) {<br>                        setflag(FLT_ACC); # do accounting ...<br>                        setflag(FLT_ACCFAILED); # ... even if the transaction fails<br>                } else if ( is_method("ACK") ) {<br>                        # ACK is forwarded statelessly<br>                        route(NATMANAGE);<br>                } else if ( is_method("NOTIFY") ) {<br>                        # Add Record-Route for in-dialog NOTIFY as per RFC 6665.<br>
                record_route_preset("servername.com:5061;transport=tls", "my_ip:5060");

<br>                        #record_route();<br>                }<br>                route(RELAY);<br>                exit;<br>        }<br></div><div><br></div><div>Teams web-interface shows inactive. Kamcmd's same as previous output. What do I do :(?

</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">вт, 7 июл. 2020 г. в 12:43, Роман С. <<a href="mailto:highlandy@gmail.com">highlandy@gmail.com</a>>:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hello.</div><div>I'm trying to set up Kamailio as SBC for Teams using <a href="https://skalatan.de/en/blog/kamailio-sbc-teams" target="_blank">https://skalatan.de/en/blog/kamailio-sbc-teams</a>. <br></div><div>Setup is completely default (except things mentioned at article), but I use wildcard certificate for TLS. Well, I can't even pass dispatcher:</div><div><br></div><div>kamcmd dispatcher.list | egrep "RI|FLAG"<br>                                        URI: sip:<a href="http://sip.pstnhub.microsoft.com" target="_blank">sip.pstnhub.microsoft.com</a>;transport=tls<br>                                        FLAGS: IP<br>                                        PRIORITY: 3<br>                                        URI: sip:<a href="http://sip2.pstnhub.microsoft.com" target="_blank">sip2.pstnhub.microsoft.com</a>;transport=tls<br>                                        FLAGS: IP<br>                                        PRIORITY: 2<br>                                        URI: sip:<a href="http://sip3.pstnhub.microsoft.com" target="_blank">sip3.pstnhub.microsoft.com</a>;transport=tls<br>                                        FLAGS: IP<br>                                        PRIORITY: 1</div><div><br></div><div>Where do I start to dig? <br></div></div>
</blockquote></div>