<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hello,</p>
<p>secsipid_check_identity("") should be ok, because the parameter
is empty, but secsipid_check_identity() is not ok, because is no
parameter.</p>
<p>Isn't it working when you have secsipid_check_identity("")?</p>
<p>It has to be one certificate, which corresponds to the key that
was used to generate the identity header. The function does not
expect many certificates and loop to see if one of them
corresponds to the key.<br>
</p>
<p>Cheers,<br>
Daniel<br>
</p>
<div class="moz-cite-prefix">On 26.09.22 17:53, Володимир Іванець
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAOQgkjZVD6QE8_fcC0_81pddPm0VTWww+h6EkZHJS5oBoa1Nxw@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">Hello Daniel!
<div><br>
</div>
<div>I started with a simpler configuration: <i>if
(secsipid_check_identity()) {</i> and <i>if
(secsipid_check_identity("")) {</i> - according to
documentation: <i>If the parameter is empty, the function is
downloading the key using the URL from "info" parameter of
the Identity header, using the value od "timeout" parameter
to limit the download time.</i> If this matters, I did not
configure modparam "expire" and "timeout".</div>
<div><br>
</div>
<div>When I called secsipid_check_identity with a path to the
certificate, Kamailio started as expected.</div>
<div><br>
</div>
<div>Is there something else I need to do or the function <i>secsipid_check_identity</i> must
receive a path to certificate as parameter? Also, is it safe
to assume that this file can contain multiple certificates?</div>
<div><br>
</div>
<div>Thank you very much!</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">пн, 26 вер. 2022 р. о 17:36
Daniel-Constantin Mierla <<a
href="mailto:miconda@gmail.com" target="_blank"
moz-do-not-send="true" class="moz-txt-link-freetext">miconda@gmail.com</a>>
пише:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left:1px solid
rgb(204,204,204);padding-left:1ex">
<div>
<p>Hello,</p>
<p>maybe the function is provided with invalid parameters?
What's the line 47 in the file?</p>
<p>Cheers,<br>
Daniel<br>
</p>
<div>On 26.09.22 15:54, Володимир Іванець wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hello everyone!
<div><br>
</div>
<div>I'm testing calls with STIR/SHAKEN with a
Secsipid module on a Kamailio version 5.6.1 and ran
into a problem. Outbound calls work fine when the
function <i>secsipid_add_identity</i> with
appropriate parameters is called. But as soon as I
add function <i>secsipid_check_identity</i> to my
configuration, Kamilio would not start. Here is an
error message I get:</div>
<blockquote style="margin:0px 0px 0px
40px;border:none;padding:0px"><i>kamailio: CRITICAL:
<core> [core/cfg.y:3791]: yyerror_at():
parse error in config file
/etc/kamailio/include/registrar.cfg, line 47,
column 39: unknown command, missing loadmodule?</i></blockquote>
<div><i><br>
</i></div>
<i>loadmodule "secsipid.so"</i> is present and is
above the function <i>secsipid_check_identity</i> call.
Both secsipid.so and secsipid_proc.so module files are
the correct version and present on the system.
<div><br>
</div>
<div><br>
</div>
<div>Another question is related to the rpm package
build. How do you build additional modules? I made
adjustment to the pkg/kamailio/Makefile file. In the
<b>cfg</b> section changed <i>$(MAKE) -C ../../src
cfg</i> with <i>$(MAKE) FLAVOUR=kamailio
include_modules="secsipid secsipid_proc" -C
../../src cfg</i>. Required modules appeared in
the modules.lst file but their rpm packages were not
built.</div>
<div><br>
</div>
<div>Thank you very much!</div>
</div>
<br>
<fieldset></fieldset>
<pre>__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
* <a href="mailto:sr-users@lists.kamailio.org" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">sr-users@lists.kamailio.org</a>
Important: keep the mailing list in the recipients, do not reply only to the sender!
Edit mailing list options or unsubscribe:
* <a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<pre cols="72">--
Daniel-Constantin Mierla -- <a href="http://www.asipto.com" target="_blank" moz-do-not-send="true">www.asipto.com</a>
<a href="http://www.twitter.com/miconda" target="_blank" moz-do-not-send="true">www.twitter.com/miconda</a> -- <a href="http://www.linkedin.com/in/miconda" target="_blank" moz-do-not-send="true">www.linkedin.com/in/miconda</a>
Kamailio Advanced Training - Online
Nov 7-10, 2022 (Europe Timezone)
* <a href="https://www.asipto.com/sw/kamailio-advanced-training-online/" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">https://www.asipto.com/sw/kamailio-advanced-training-online/</a></pre>
</div>
</blockquote>
</div>
</div>
</blockquote>
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a>
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda">www.linkedin.com/in/miconda</a>
Kamailio Advanced Training - Online
Nov 7-10, 2022 (Europe Timezone)
* <a class="moz-txt-link-freetext" href="https://www.asipto.com/sw/kamailio-advanced-training-online/">https://www.asipto.com/sw/kamailio-advanced-training-online/</a></pre>
</body>
</html>