<div><strong>Hi,</strong></div>
<div><strong></strong> </div>
<div><strong>I want to use OpenSer with TLS but when I try to connect to openser with Windows Messenger I receive this message:</strong></div>
<div> </div>
<div>----------------------------------------------------------------------------------</div>
<div>"Impossible to establish an HTTPS or TCP connection."</div>
<div>----------------------------------------------------------------------------------</div>
<div> </div>
<div><strong>I used the TLS tutorial from openser site to configure TLS; I created the certificates and this is my <u>openser.cfg file</u>:</strong></div>
<div><font size="2"><em></em> </font></div>
<div>
<p><em># $Id: openser.cfg,v 1.5 2005/10/28 19:45:33 bogdan_iancu Exp $</em></p>
<p><em># simple quick-start config script</em></p>
<p><em># ----------- global configuration parameters ------------------------</em></p>
<p><em>debug=3 # debug level (cmd line: -dddddddddd)</em></p>
<p><em>fork=yes</em></p>
<p><em>log_stderror=no # (cmd line: -E)</em></p>
<p><em>/* Uncomment these lines to enter debugging mode </em></p>
<p><em>fork=no</em></p>
<p><em>log_stderror=yes</em></p>
<p><em>*/</em></p>
<p><em>check_via=no # (cmd. line: -v)</em></p>
<p><em>dns=no # (cmd. line: -r)</em></p>
<p><em>rev_dns=no # (cmd. line: -R)</em></p>
<p><em>port=5060</em></p>
<p><em>children=4</em></p>
<p><em>fifo="/tmp/openser_fifo"</em></p>
<p><em># uncomment the following lines for TLS support</em></p>
<p><em>disable_tls = 0</em></p>
<p><em>listen = tls:<a href="http://192.168.1.5:5061">192.168.1.5:5061</a></em></p>
<p><em>tls_verify = 0</em></p>
<p><em>tls_require_certificate = 0</em></p>
<p><em>tls_method = SSLv23</em></p>
<p><em>tls_certificate = "/usr/local/etc/openser/tls/opensercert.pem"</em></p>
<p><em>tls_private_key = "/usr/local/etc/openser/tls/openser.pem"</em></p>
<p><em>tls_ca_list = "/usr/local/etc/openser/tls/calist.pem"</em></p>
<p><em></em> </p>
<p>etc...... </p>
<p> </p>
<p><strong>I captured with <u>Ethereal</u> the <u>packets exchanged</u> between the server(<a href="http://192.168.1.5">192.168.1.5</a>) and the client(<a href="http://192.168.1.98">192.168.1.98</a>) and on the openserver interface I found this dialog:
</strong></p>
<p> </p><font size="2">
<p><em>No. Time Source Destination Protocol Info</em></p>
<p>1 0.000000 <a href="http://192.168.1.98">192.168.1.98</a> <a href="http://192.168.1.255">192.168.1.255</a> BROWSER Host Announcement MARCO, Workstation, Server, NT Workstation</p>
<p><em>No. Time Source Destination Protocol Info</em></p>
<p>2 28.080507 <a href="http://192.168.1.98">192.168.1.98</a> Broadcast ARP Who has <a href="http://192.168.1.5">192.168.1.5</a>? Tell <a href="http://192.168.1.98">192.168.1.98</a></p>
<p><em>No. Time Source Destination Protocol Info</em></p>
<p>3 28.080636 <a href="http://192.168.1.5">192.168.1.5</a> <a href="http://192.168.1.98">192.168.1.98</a> ARP <a href="http://192.168.1.5">192.168.1.5</a> is at 00:50:fc:6d:0e:1e</p>
<p><em>No. Time Source Destination Protocol Info</em></p>
<p>4 28.080742 <a href="http://192.168.1.98">192.168.1.98</a> <a href="http://192.168.1.5">192.168.1.5</a> TCP 1439 > sip-tls [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460</p>
<p><em>No. Time Source Destination Protocol Info</em></p>
<p>5 28.080841 <a href="http://192.168.1.5">192.168.1.5</a> <a href="http://192.168.1.98">192.168.1.98</a> TCP sip-tls > 1439 [RST, ACK] Seq=0 Ack=0 Win=0 Len=0</p>
<p><em>No. Time Source Destination Protocol Info</em></p>
<p>6 28.498558 <a href="http://192.168.1.98">192.168.1.98</a> <a href="http://192.168.1.5">192.168.1.5</a> TCP 1439 > sip-tls [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460</p>
<p><em>No. Time Source Destination Protocol Info</em></p>
<p>7 28.498674 <a href="http://192.168.1.5">192.168.1.5</a> <a href="http://192.168.1.98">192.168.1.98</a> TCP sip-tls > 1439 [RST, ACK] Seq=0 Ack=1 Win=0 Len=0</p>
<p><em>No. Time Source Destination Protocol Info</em></p>
<p>8 29.045430 <a href="http://192.168.1.98">192.168.1.98</a> <a href="http://192.168.1.5">192.168.1.5</a> TCP 1439 > sip-tls [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460</p>
<p><em>No. Time Source Destination Protocol Info</em></p>
<p>9 29.045538 <a href="http://192.168.1.5">192.168.1.5</a> <a href="http://192.168.1.98">192.168.1.98</a> TCP sip-tls > 1439 [RST, ACK] Seq=0 Ack=1 Win=0 Len=0</p>
<p><em>No. Time Source Destination Protocol Info</em></p>
<p>10 29.048035 <a href="http://192.168.1.98">192.168.1.98</a> <a href="http://192.168.1.5">192.168.1.5</a> TCP 1440 > https [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460</p>
<p><em>No. Time Source Destination Protocol Info</em></p>
<p>11 29.048128 <a href="http://192.168.1.5">192.168.1.5</a> <a href="http://192.168.1.98">192.168.1.98</a> TCP https > 1440 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460</p>
<p><em>No. Time Source Destination Protocol Info</em></p>
<p>12 29.048245 <a href="http://192.168.1.98">192.168.1.98</a> <a href="http://192.168.1.5">192.168.1.5</a> TCP 1440 > https [ACK] Seq=1 Ack=1 Win=65535 Len=0</p>
<p><em>No. Time Source Destination Protocol Info</em></p>
<p>13 29.118672 <a href="http://192.168.1.98">192.168.1.98</a> <a href="http://192.168.1.5">192.168.1.5</a> SSLv3 Client Hello</p>
<p>
<p><em></em></p><em>No. Time Source Destination Protocol Info</em></p>
<p>14 29.118795 <a href="http://192.168.1.5">192.168.1.5</a> <a href="http://192.168.1.98">192.168.1.98</a> TCP https > 1440 [ACK] Seq=1 Ack=103 Win=5840 Len=0</p>
<p><em>Frame 14 (54 bytes on wire, 54 bytes captured)</em></p>
<p>
<p><em></em></p><em>No. Time Source Destination Protocol Info</em></p>
<p>15 31.192871 <a href="http://192.168.1.5">192.168.1.5</a> <a href="http://192.168.1.98">192.168.1.98</a> SSLv3 Server Hello, Certificate, Server Hello Done</p>
<p>
<p><em></em></p><em>No. Time Source Destination Protocol Info</em></p>
<p>16 31.256175 <a href="http://192.168.1.98">192.168.1.98</a> <a href="http://192.168.1.5">192.168.1.5</a> SSLv3 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message</p>
<p>
<p><em></em></p><em>No. Time Source Destination Protocol Info</em></p>
<p>17 31.256329 <a href="http://192.168.1.5">192.168.1.5</a> <a href="http://192.168.1.98">192.168.1.98</a> TCP https > 1440 [ACK] Seq=741 Ack=307 Win=6432 Len=0</p>
<p><em>No. Time Source Destination Protocol Info</em></p>
<p>18 31.317188 <a href="http://192.168.1.5">192.168.1.5</a> <a href="http://192.168.1.98">192.168.1.98</a> SSLv3 Change Cipher Spec, Encrypted Handshake Message</p>
<p><em>No. Time Source Destination Protocol Info</em></p>
<p>19 31.318624 <a href="http://192.168.1.98">192.168.1.98</a> <a href="http://192.168.1.5">192.168.1.5</a> TCP 1440 > https [FIN, ACK] Seq=307 Ack=808 Win=64728 Len=0</p>
<p><em>No. Time Source Destination Protocol Info</em></p>
<p>20 31.335535 <a href="http://192.168.1.5">192.168.1.5</a> <a href="http://192.168.1.98">192.168.1.98</a> SSLv3 Encrypted Alert</p>
<p>
<p><em></em></p><em>No. Time Source Destination Protocol Info</em></p>
<p>21 31.335788 <a href="http://192.168.1.98">192.168.1.98</a> <a href="http://192.168.1.5">192.168.1.5</a> TCP 1440 > https [RST, ACK] Seq=308 Ack=831 Win=0 Len=0</p></font></div>
<div><strong>....so it seems that server and client use the TLS and exchange the certificate....</strong></div>
<div><strong>Can someone help me? Why are there the TCP RSTs? What is the Encrypted Alert? Is the configuration file exact or not? What can I do to find the problem and solve it?</strong></div>
<div><strong></strong> </div>
<div><strong>Thanks!</strong></div>
<div><strong>Silvia</strong></div>