<html><head></head><body><div class="ydp6bb94e60yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;"><div></div>
<div dir="ltr" data-setdir="false">Also , forgot to mention that on the same centos 8 host, I sent openssl s_client to port 5061 using TLS 1.2 and it does not send session ID information in the clientHello TLS handshake message.</div><div><br></div>
</div><div id="yahoo_quoted_5285232137" class="yahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Sunday, March 7, 2021, 04:01:02 PM PST, Rupesh Kumar <rupesh_kumar@sbcglobal.net> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div id="yiv2661447806"><div><div class="yiv2661447806yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;"><div dir="ltr">Hi,</div><div dir="ltr"><br></div><div dir="ltr">I am running kamailio 5.2.6 on centos 8 and openssl 1.1.1c and connecting and using it as a proxy sip endpoints to a legacy PBX over TLS.</div><div dir="ltr"><br></div><div dir="ltr">The connection to the backend PBX is over TLS 1.2 . Whenever kamailio initiates a TLS connection to the PBX, it uses session ID and a random session id . The server side has a bug and cannot handle the TLS session resuse apparently because of some bug/issue in caching the TLS sessions.</div><div dir="ltr"><br></div><div dir="ltr">The renegotiation and session_cache is by default turned off and I also explicitly set to 0 via modparam but kamailio would always send the session ID in the initial client hello and this is causing us trouble. Any help would be greatly appreciated.</div><div dir="ltr"><br></div><div dir="ltr"><a rel="nofollow noopener noreferrer" target="_blank" href="https://kamailio.org/docs/modules/5.2.x/modules/tls.html#tls.p.renegotiation">https://kamailio.org/docs/modules/5.2.x/modules/tls.html#tls.p.renegotiation</a><br></div><div dir="ltr"><br></div><div dir="ltr">Regards,</div><div dir="ltr"><br>RK</div></div></div></div>_______________________________________________<br>Kamailio (SER) - Users Mailing List<br><a ymailto="mailto:sr-users@lists.kamailio.org" href="mailto:sr-users@lists.kamailio.org">sr-users@lists.kamailio.org</a><br><a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" target="_blank">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br></div>
</div>
</div></body></html>