<!--
Kamailio Project uses GitHub Issues only for bugs in the code or feature requests. Please use this template only for bug reports.
If you have questions about using Kamailio or related to its configuration file, ask on sr-users mailing list:
* http://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
If you have questions about developing extensions to Kamailio or its existing C code, ask on sr-dev mailing list:
* http://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev
Please try to fill this template as much as possible for any issue. It helps the developers to troubleshoot the issue.
If there is no content to be filled in a section, the entire section can be removed.
You can delete the comments from the template sections when filling.
You can delete next line and everything above before submitting (it is a comment).
-->
### Description
<!--
Explain what you did, what you expected to happen, and what actually happened.
-->
Ubuntu Bionic 18.04.02 LTS ships with "OpenSSL 1.1.1 11 Sep 2018" (0x1010100f), whereas the `kamailio-tls-modules` package is compiled with "OpenSSL 1.1.0g 2 Nov 2017" (0x1010007f).
I installed Kamailio from the Kamailio repositories (not from the Ubuntu repositories).
This leads to Kamailio being unable to start as it complains about the OpenSSL versions being too different from each other.
Overriding the OpenSSl version check by enabling `tls_force_run` does not solve the issue, instead, it leads to Kamailio emitting multiple errors.
<!-- ### Troubleshooting -->
#### Reproduction
I installed Kamailio from the official Kamailio apt sources (nightly build, the same occurs for the latest stable version 5.2).
```
deb http://deb.kamailio.org/kamailiodev-nightly bionic main
deb-src http://deb.kamailio.org/kamailiodev-nightly bionic main
```
I enabled TLS and edited the configuration files accordingly.
<!--
If the issue can be reproduced, describe how it can be done.
-->
<!-- #### Debugging Data -->
<!--
If you got a core dump, use gdb to extract troubleshooting data - full backtrace,
local variables and the list of the code at the issue location.
gdb /path/to/kamailio /path/to/corefile
bt full
info locals
list
If you are familiar with gdb, feel free to attach more of what you consider to
be relevant.
-->
```
(paste your debugging data here)
```
#### Log Messages
```
CRITICAL: tls [tls_init.c:677]: init_tls_h(): installed openssl library version is too different from the library the kamailio tls module was compiled with: installed "OpenSSL 1.1.1 11 Sep 2018" (0x1010100f), compiled "OpenSSL 1.1.0g 2 Nov 2017" (0x1010007f).#012 Please make sure a compatible version is used (tls_force_run in kamailio.cfg will override this check)
```
<!-- #### SIP Traffic -->
### Possible Solutions
Recompile and publish the `kamailio-tls-modules` package compiled with OpenSSL 1.1.1b.
### Additional Information
* **Kamailio Version** - output of `kamailio -v`
```
version: kamailio 5.3.0-dev6 (x86_64/linux)
flags: STATS: Off, USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLACKLIST, HAVE_RESOLV_RES
ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB
poll method support: poll, epoll_lt, epoll_et, sigio_rt, select.
id: unknown
compiled with gcc 7.3.0
```
* **Operating System**:
<!--
Details about the operating system, the type: Linux (e.g.,: Debian 8.4, Ubuntu 16.04, CentOS 7.1, ...), MacOS, xBSD, Solaris, ...;
Kernel details (output of `uname -a`)
-->
```
Linux hostname 4.15.0-55-generic #60-Ubuntu SMP Tue Jul 2 18:22:20 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
Description: Ubuntu 18.04.2 LTS
Release: 18.04
```
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/2018
Hello,
I think this thread is for Users maillist.
Anyway, first of all start scscf in debug mode and test. Then have a look
on the logs.
There is only one place in the scscf configuration where you can get
"Domain not served":
if (uri == myself || uri =~ "tel:.*") {
if (!term_impu_registered("location")) {
xlog("L_DBG", "We need to do an UNREG server SAR assignemnt");
assign_server_unreg("UNREG_SAR_REPLY", "location", "term");
exit;
}
} else {
sl_send_reply("403","Forbidden - Domain not served");
exit();
}
I personally got the same error some time ago and I didn't have enough time
to debug it. That's why I just commented all the code above so scscf can
proceed to :
route(term);
This is a temporary workaround but it is working fine for me. Most likely
this is something important but it stays in the todo to debug it in the
near future.
Regards,
Pavel Siderov
На пн, 13.04.2020 г. в 22:38 <sr-dev-request(a)lists.kamailio.org> написа:
>
> Date: Tue, 14 Apr 2020 01:07:14 +0530
> From: Pavithra M <pavimohan3096(a)gmail.com>
> To: "Kamailio (SER) - Development Mailing List"
> <sr-dev(a)lists.kamailio.org>
> Subject: Re: [sr-dev] Unable to make SIP Calls (403 Forbidden - Domain
> Not Served)
> Message-ID:
> <CAJvDr=+
> UKZ66o1ZQ-EmQ5xc70AEnZ3fJzoNair1ctCanB1DyvA(a)mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> Hi ,
>
> I have configured kamailio as an IMS server as VM based .
>
> PCSCF - 10.x.x.179
> ICSCF - 10.x.x.79
> SCSCF - 10.x.x.73
> HSS - 10.x.x.75
>
> I am using zoiper client for testing the call flow . The *registration is
> happening properly* in my both zoiper clients for hss configured users
> (alice and bob).
> When i am making an *INVITE , *I am getting *403 Forbidden - Domain not
> served *error from SCSCF.
>
> The Call Flow for invite is as follows . call from alice(a)sip.example.com
>
> zoiper1 (UE) -> PCSCF ( INVITE sip:bob@sip.example.com;transport=UDP )
> PCSCF -> SCSCF ( INVITE sip:bob@sip.example.com;transport=UDP )
> SCSCF -> PCSCF (100 trying)
> SCSCF -> ICSCF ( INVITE sip:bob@sip.example.com;transport=UDP )
> ICSCF -> SCSCF (100 trying)
> ICSCF -> SCSCF ( INVITE sip:bob@sip.example.com;transport=UDP )
> SCSCF -> ICSCF (100 trying)
> SCSCF -> ICSCF (*403 Forbidden - Domain not served*)
> ICSCF -> SCSCF (Request: ACK sip:bob@sip.example.com | )
> ICSCF -> SCSCF ( 403 Forbidden - Domain not served )
> SCSCF -> PCSCF ( 403 Forbidden - Domain not served )
> PCSCF -> UE ( 403 Forbidden - Domain not served )
>
> Below are the alias configuration i have done in pcscf,icscf,scscf nodes
> *PCSCF.CFG*
> # IP-Adress for incoming SIP-Traffic, in the following format:
>
> # SIP / UDP
> listen=udp:10.x.x.179:4060
> # SIP / TCP
> listen=tcp:10.x.x.179:4060
> # SIP / TCP/TLS
> listen=tls:10.x.x.179:4060
>
> # IPSEC / UDP
> #!define IPSEC_LISTEN_ADDR "0.0.0.0"
> #!define IPSEC_CLIENT_PORT 5062
> #!define IPSEC_SERVER_PORT 5063
> #alias="sip.example.com:4060"
> alias=pcscf.sip.example.com:4060
>
> #!define MY_WS_PORT 80
> #!define MY_WSS_PORT 443
>
> #!define PCSCF_URL "sip:pcscf.sip.example.com:4060"
>
> #!define TCP_PROCESSES 8
>
> #!subst "/NETWORKNAME/sip.example.com/"
> #!subst "/HOSTNAME/pcscf.sip.example.com/"
>
> *ICSCF.CFG*
>
> # SIP / UDP
> listen=udp:10.x.x.79:4070
> # SIP / TCP
> listen=tcp:10.x.x.79:4070
> # SIP / TCP/TLS
> listen=tls:10.x.x.79:4071
>
> alias="icscf.sip.example.com:4070"
>
> #!define NETWORKNAME "sip.example.com"
> #!define HOSTNAME "icscf.sip.example.com"
>
> *SCSCF.CFG*
>
> # SIP / UDP
> listen=udp:10.x.x.73:4080
> # SIP / TCP
> listen=tcp:10.x.x.73:4080
> # SIP / TCP/TLS
> listen=tls:10.x.x.73:4081
>
> #!define NETWORKNAME "sip.example.com"
> #!define HOSTNAME "scscf.sip.example.com"
> #!define URI "sip:scscf.sip.example.com:4080"
> alias=scscf.sip.example.com:4080
>
> # ENUM-Server to query:
> #!define ENUM_SUFFIX "scscf.sip.example.com."
>
>
> Kindly let me know where i am missing . Kindly need help in this issue
> since the registration is happening successfully and dropping in the INVITE
> level.
> Kindly help.
Hi ,
I have configured kamailio as an IMS server as VM based .
PCSCF - 10.x.x.179
ICSCF - 10.x.x.79
SCSCF - 10.x.x.73
HSS - 10.x.x.75
I am using zoiper client for testing the call flow . The *registration is
happening properly* in my both zoiper clients for hss configured users
(alice and bob).
When i am making an *INVITE , *I am getting *403 Forbidden - Domain not
served *error from SCSCF.
The Call Flow for invite is as follows . call from alice(a)sip.example.com
zoiper1 (UE) -> PCSCF ( INVITE sip:bob@sip.example.com;transport=UDP )
PCSCF -> SCSCF ( INVITE sip:bob@sip.example.com;transport=UDP )
SCSCF -> PCSCF (100 trying)
SCSCF -> ICSCF ( INVITE sip:bob@sip.example.com;transport=UDP )
ICSCF -> SCSCF (100 trying)
ICSCF -> SCSCF ( INVITE sip:bob@sip.example.com;transport=UDP )
SCSCF -> ICSCF (100 trying)
SCSCF -> ICSCF (*403 Forbidden - Domain not served*)
ICSCF -> SCSCF (Request: ACK sip:bob@sip.example.com | )
ICSCF -> SCSCF ( 403 Forbidden - Domain not served )
SCSCF -> PCSCF ( 403 Forbidden - Domain not served )
PCSCF -> UE ( 403 Forbidden - Domain not served )
Below are the alias configuration i have done in pcscf,icscf,scscf nodes
*PCSCF.CFG*
# IP-Adress for incoming SIP-Traffic, in the following format:
# SIP / UDP
listen=udp:10.x.x.179:4060
# SIP / TCP
listen=tcp:10.x.x.179:4060
# SIP / TCP/TLS
listen=tls:10.x.x.179:4060
# IPSEC / UDP
#!define IPSEC_LISTEN_ADDR "0.0.0.0"
#!define IPSEC_CLIENT_PORT 5062
#!define IPSEC_SERVER_PORT 5063
#alias="sip.example.com:4060"
alias=pcscf.sip.example.com:4060
#!define MY_WS_PORT 80
#!define MY_WSS_PORT 443
#!define PCSCF_URL "sip:pcscf.sip.example.com:4060"
#!define TCP_PROCESSES 8
#!subst "/NETWORKNAME/sip.example.com/"
#!subst "/HOSTNAME/pcscf.sip.example.com/"
*ICSCF.CFG*
# SIP / UDP
listen=udp:10.x.x.79:4070
# SIP / TCP
listen=tcp:10.x.x.79:4070
# SIP / TCP/TLS
listen=tls:10.x.x.79:4071
alias="icscf.sip.example.com:4070"
#!define NETWORKNAME "sip.example.com"
#!define HOSTNAME "icscf.sip.example.com"
*SCSCF.CFG*
# SIP / UDP
listen=udp:10.x.x.73:4080
# SIP / TCP
listen=tcp:10.x.x.73:4080
# SIP / TCP/TLS
listen=tls:10.x.x.73:4081
#!define NETWORKNAME "sip.example.com"
#!define HOSTNAME "scscf.sip.example.com"
#!define URI "sip:scscf.sip.example.com:4080"
alias=scscf.sip.example.com:4080
# ENUM-Server to query:
#!define ENUM_SUFFIX "scscf.sip.example.com."
Kindly let me know where i am missing . Kindly need help in this issue
since the registration is happening successfully and dropping in the INVITE
level.
Kindly help.