<div>Dear all,</div> <div> </div> <div>Thank you very much for this chance. Thank you. <BR>I am sorry, I have some questions. Can I ask you, Please?</div> <div> </div> <div>1. All, I have build openser server with TLS support. I use openser-1.1.0-tls<BR>Now, I tried to test it by making a call by using softphone that supported TLS.<BR>Based on the suggestion from this forum, for testing it, I can use minisip.<BR>I have configured minisip like the installation note that I got when download it.<BR>But, I have a problem. I have error when running minisip and make a call in Windows XP.</div> <div><BR>This is the error message :</div> <div> </div> <div>Starting MiniSIP ... welcome!</div> <div>libmutil: setupDefaultSignalHandling: No stack trace signal handler available<BR>Initializing NetUtil<BR>Creating SipSoftPhoneConfiguration<BR>init 1/9: Creating timeout provider<BR>init 2/9: Creating GUI<BR>Creating GTK GUI<BR>Setting contact db<BR>Thread 2
running - doing initParseConfig<BR>init 3/9: Parsing configuration file ()<BR>WARNING: Could not determine home directory<BR>Config file version checked ok!<BR>SipIdentity::SipIdentity : cretated identity id=1<BR>SipIdentity::setSipUri: sipUsername=<aldi> sipDomain=<pcr.ac.id><BR>SipIdentity::setSipProxy: autodetect is false; <A href="mailto:userUri=aldi@pcr.ac.id">userUri=aldi@pcr.ac.id</A>; transport<BR> = UDP; proxyAddr=sip.pcr.ac.id; proxyPort=5060<BR>SipProxy:setProxy(str) : addr = sip.pcr.ac.id<BR>SipIdentity::setProxy: manual sipproxy success ...<BR>SipIdentity::setProxy: else ...<BR>Identities:<BR> identity=1; username=aldi; domain=pcr.ac.id proxy=[proxyString=sip.pcr.a<BR>c.id; proxyString=sip.pcr.ac.id; port=5060; transport=UDP; autodetect=no; user=a<BR>ldi; password=aldi; expires=1000]; isRegistered=0<BR>init 4/9: Creating IP provider<BR> Adapter
Name: {DAF8C45E-7B2A-4D08-98AA-5E5091C3464D}<BR> Adapter Name: {6FFFD1E7-4BC6-426E-929D-E8292B7FC0DB}<BR> Adapter Name: {B926ACA5-8120-42A4-BAD7-AE95AA6708F0}<BR>SimpleIPProvider: localIp =<BR>SimpleIPProvider: preferred network interface = {DAF8C45E-7B2A-4D08-98AA-5E5091C<BR>3464D}<BR>SimpleIPProvider: preferred interface found<BR>Minisip is using IP = 202.95.149.5<BR>init 5/9: Creating MediaHandler<BR>Sound I/O: using Spatial Audio Mixer<BR>Adding audio codec: G.711<BR>init 6/9: Creating MSip SIP stack<BR>init 7/9: Connecting GUI to SIP logic<BR>init 8.2/9: Starting TCP transport worker thread<BR>init 9/9: Registering Identities to registrar server</div> <div>Registering user <A href="mailto:aldi@pcr.ac.id">aldi@pcr.ac.id</A> to proxy sip.pcr.ac.id, requesting domain pcr.ac<BR>.id</div> <div>IP4Address(string): sip.pcr.ac.id
(202.95.149.251)<BR>IP4Address(string): sip.pcr.ac.id (202.95.149.251)<BR>IP4Address(string): sip.pcr.ac.id (202.95.149.251)<BR>Before new mediaSession<BR>RtpReceiver:: final trying port = 34694<BR>After new mediaSession<BR>Before addDialog<BR>After addDialog<BR>Before handleCommand<BR>After handleCommand<BR>Session::getSdpOffer:<BR>v=0<BR>o=- 3344 3344 IN IP4 202.95.149.5<BR>s=Minisip Session<BR>c=IN IP4 202.95.149.5<BR>t=0 0<BR>m=audio 34694 RTP/AVP 0 101<BR>a=rtpmap:0 PCMU/8000/1<BR>a=rtpmap:101 telephone-event/8000<BR>a=fmtp:101 0-15</div> <div><BR>IP4Address(string): sip.pcr.ac.id (202.95.149.251)<BR>ERROR:(in IP6Address) Unknown host: <pcr.ac.id></div> <div><BR>What`s wrong? I have tried to analyze it, but I still do not understand about the error message.<BR>I do hope anybody can give me a suggestion. Please help me..Please.</div> <div> </div> <div>2. In order minisip can use TLS, I have loaded a certificate from "certificate settings" menu.</div>
<div><BR> What kind of certificate that I have to load? Where I can load the certificate? <BR> Does it means the certificate that I use in openser.cfg?</div> <div> tls_certificate = "/usr/local/etc/openser/tls/user/user-cert.pem" <BR> tls_private_key = "/usr/local/etc/openser/tls/user/user-privkey.pem"<BR> tls_ca_list = "/usr/local/etc/openser/tls/user/user-calist.pem"</div> <div>I mean, Do I have to copy user-cert.pem, user-privkey.pem, user-calist.pem to Client computer (using Windows XP), and load it<BR>by using "certificate setting" menu in minisip? </div> <div>Maybe my question is too much. I am sorry for that. </div> <div><BR>I do hope anybody can give me a suggestion. Please help...this newbie one..Please...</div> <div> </div> <div>Thank you very much,</div> <div><BR>Regards,</div> <div> </div> <div> </div> <div> </div> <div>Ferianto</div> <div> </div> <div>Note
: Here is my openser.cfg file:</div> <div> </div> <div>debug=4<BR>fork=no<BR>log_stderror=yes</div> <div>listen=200.95.149.251 # put your openserver IP address here<BR>port=5060<BR>children=4</div> <div>dns=no<BR>rev_dns=no</div> <div>fifo="/tmp/openser_fifo"<BR>fifo_db_url="mysql://openser:openserrw@localhost/openser"<BR>fifo_mode=0666<BR>alias="pcr.ac.id"<BR>tls_port_no=5061</div> <div># uncomment the following lines for TLS support<BR>disable_tls = 0<BR>listen = tls:200.95.149.251:5061<BR>tls_verify_client = on<BR>tls_require_client_certificate = on<BR>tls_verify_server=on<BR>tls_method = TLSv1<BR>tls_certificate = "/usr/local/etc/openser/tls/user/user-cert.pem"<BR>tls_private_key = "/usr/local/etc/openser/tls/user/user-privkey.pem"<BR>tls_ca_list = "/usr/local/etc/openser/tls/user/user-calist.pem"</div> <div>loadmodule "/usr/local/lib/openser/modules/mysql.so"<BR>loadmodule
"/usr/local/lib/openser/modules/sl.so"<BR>loadmodule "/usr/local/lib/openser/modules/tm.so"<BR>loadmodule "/usr/local/lib/openser/modules/rr.so"<BR>loadmodule "/usr/local/lib/openser/modules/maxfwd.so"<BR>loadmodule "/usr/local/lib/openser/modules/usrloc.so"<BR>loadmodule "/usr/local/lib/openser/modules/registrar.so"<BR>loadmodule "/usr/local/lib/openser/modules/auth.so"<BR>loadmodule "/usr/local/lib/openser/modules/auth_db.so"<BR>loadmodule "/usr/local/lib/openser/modules/nathelper.so"<BR>loadmodule "/usr/local/lib/openser/modules/textops.so"<BR>loadmodule "/usr/local/lib/openser/modules/uri_db.so"<BR>loadmodule "/usr/local/lib/openser/modules/uri.so"<BR>loadmodule "/usr/local/lib/openser/modules/avpops.so"<BR>loadmodule "/usr/local/lib/openser/modules/domain.so"<BR>loadmodule "/usr/local/lib/openser/modules/permissions.so"</div> <div>modparam("auth_db|permissions|uri_db|usrloc","db_url", "mysql://openser:openserrw@localhost/openser")</div>
<div>modparam("auth_db|uri_db|usrloc", "db_url", "mysql://openser:openserrw@localhost/openser")</div> <div>modparam("auth_db", "calculate_ha1", 1)<BR>modparam("auth_db", "password_column", "password")</div> <div>modparam("nathelper", "natping_interval", 30) <BR>modparam("nathelper", "ping_nated_only", 1) <BR>modparam("nathelper", "rtpproxy_sock", "unix:/var/run/rtpproxy.sock")</div> <div>modparam("usrloc", "db_mode", 2)</div> <div>modparam("registrar", "nat_flag", 6)</div> <div>modparam("rr", "enable_full_lr", 1)</div> <div>modparam("tm", "fr_inv_timer", 27)<BR>modparam("tm", "fr_inv_timer_avp", "s:inv_timeout")</div> <div>modparam("permissions", "db_mode", 1)<BR>modparam("permissions", "trusted_table", "trusted")</div> <div><BR>route {</div> <div># -----------------------------------------------------------------<BR># Sanity Check Section<BR># -----------------------------------------------------------------<BR> if
(!mf_process_maxfwd_header("10")) {<BR> sl_send_reply("483", "Too Many Hops");<BR> return;<BR> };<BR> if (msg:len > max_len) {<BR> sl_send_reply("513", "Message Overflow");<BR> return;<BR> };</div> <div># -----------------------------------------------------------------<BR># Record Route Section<BR># -----------------------------------------------------------------<BR> if (method!="REGISTER") {<BR>
record_route();<BR> };<BR> if (method=="BYE" || method=="CANCEL") {<BR> unforce_rtp_proxy();<BR> } </div> <div># -----------------------------------------------------------------<BR># Loose Route Section<BR># -----------------------------------------------------------------<BR> if (loose_route()) {<BR> if (has_totag() && (method=="INVITE" || method=="ACK")) {<BR> if (nat_uac_test("19")) {<BR>
setflag(6);<BR> force_rport();<BR> fix_nated_contact();<BR> };<BR> force_rtp_proxy("l");<BR> };<BR>
route(1);<BR> return;<BR> };</div> <div># -----------------------------------------------------------------<BR># Call Type Processing Section<BR># -----------------------------------------------------------------</div> <div> if (uri!=myself) {<BR> <BR> route(5);<BR> route(1);<BR> return;<BR> };</div> <div> if (uri==myself) {</div> <div> if (method=="ACK") {<BR> route(6);<BR> return;<BR> } else if (method=="CANCEL")
{<BR> route(3);<BR> return;<BR> } else if (method=="INVITE") {<BR> route(3);<BR> return;<BR> } else if (method=="REGISTER")
{<BR> route(2);<BR> return;<BR> };</div> <div> lookup("aliases");<BR> if (uri!=myself) {<BR> route(5);<BR> route(1);<BR>
return;<BR> };</div> <div> if (!lookup("location")) {<BR> sl_send_reply("404", "Uopenser Not Found");<BR> return;<BR> };<BR> };</div> <div> route(1);<BR>}</div> <div>route[1] {</div> <div># -----------------------------------------------------------------<BR># Default Message Handler<BR>#
-----------------------------------------------------------------</div> <div> t_on_reply("1");</div> <div> if (!t_relay()) {<BR> if (method=="INVITE" && isflagset(6)) {<BR> unforce_rtp_proxy();<BR> };<BR> sl_reply_error();<BR> };<BR>}</div> <div>route[2] {</div> <div># -----------------------------------------------------------------<BR># REGISTER Message Handler<BR># ----------------------------------------------------------------</div>
<div> sl_send_reply("100", "Trying");</div> <div> if (!search("^Contact:\ +\*") && nat_uac_test("19")) {<BR> setflag(6);<BR> fix_nated_register();<BR> force_rport();<BR> };</div> <div> if (!www_authorize("pcr.ac.id","subscriber")) {<BR> www_challenge("pcr.ac.id","0");<BR> return;<BR> };</div> <div> if (!check_to())
{<BR> sl_send_reply("401", "Unauthorized");<BR> return;<BR> };</div> <div> consume_credentials();</div> <div> if (!save("location")) {<BR> sl_reply_error();<BR> };<BR>}</div> <div>route[3] {</div> <div># -----------------------------------------------------------------<BR># CANCEL and INVITE Message Handler<BR># -----------------------------------------------------------------</div> <div> <BR> if (nat_uac_test("19"))
{<BR> setflag(6);<BR> }<BR>#if (!allow_trusted() && nat_uac_test("19")) {<BR> # setflag(6);<BR> #}<BR> <BR> lookup("aliases");<BR> if (method=="INVITE" && !allow_trusted()) <BR> {<BR> if (!proxy_authorize("pcr.ac.id","subscriber")) { <BR> proxy_challenge("pcr.ac.id","0");<BR> return;<BR> } else if (!check_from()) {<BR> sl_send_reply("403", "Use From=ID");<BR> return;<BR> };<BR> consume_credentials();<BR> };<BR> if (uri=~"^sip:9[0-9]*@")
{<BR> route(4);<BR> return;<BR> };</div> <div> if (uri!=myself) {<BR> route(5);<BR> route(1);<BR> return;<BR> };</div> <div> if (!lookup("location")) {<BR> if (uri=~"^sip:[0-9]{10}@") {<BR> route(4);<BR> return;<BR> };</div> <div> sl_send_reply("404", "Uopenser Not Found");<BR> return;<BR> };</div> <div> if (method=="CANCEL")
{<BR> route(1);<BR> return;<BR> }</div> <div> if (isflagset(6)) {<BR> force_rport();<BR> fix_nated_contact();<BR> force_rtp_proxy();<BR> };</div> <div> t_on_reply("1");</div> <div> if (!t_relay()) {<BR> if(isflagset(6)) {<BR>
unforce_rtp_proxy();<BR> }<BR> sl_reply_error();<BR> };<BR>}</div> <div>route[4] {</div> <div> # -----------------------------------------------------------------<BR> # PSTN Handler<BR> # -----------------------------------------------------------------</div> <div> rewritehostport("200.95.149.254:5060"); # INOPENSERT YOUR PSTN GATEWAY IP ADDRESS</div> <div># avp_write("i:45", "inv_timeout");</div> <div> #if (!allow_trusted() && isflagset(6)) {<BR> if (isflagset(6)) {<BR> force_rport();<BR>
fix_nated_contact();<BR> force_rtp_proxy();<BR> };</div> <div> route(1);<BR> }</div> <div>onreply_route[1] {</div> <div> if (isflagset(6) && status=~"(180)|(183)|2[0-9][0-9]") {<BR> if (!search("^Content-Length:\ +0")) {<BR> force_rtp_proxy();<BR> };<BR> };</div> <div> if (nat_uac_test("1"))
{<BR> fix_nated_contact();<BR> };<BR>}</div> <div> </div> <div><BR> </div><p>
<hr size=1>Stay in the know. Pulse on the new Yahoo.com. <a href="http://us.rd.yahoo.com/evt=42974/*http://www.yahoo.com/preview"> Check it out.</a>
<p> 
<hr size=1><a href="http://us.rd.yahoo.com/evt=43256/*http://advision.webevents.yahoo.com/mailbeta"> All-new Yahoo! Mail </a>- Fire up a more powerful email and get things done faster.