Hi all
Been trying to grab the TLS cert details from incoming connections, but failing :-(
So with lines just before AUTH is called like this;
if (proto == TLS) {
xlog("L_INFO", "TLSDUMP $ci peer_subject : $tls_peer_subject\n");
Gets met with a log line line this;
INFO: tls [tls_server.c:431]: tls_accept(): tls_accept: new connection from 1.2.3.4:11797 using TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 256
INFO: tls [tls_server.c:434]: tls_accept(): tls_accept: local socket: 5.6.7.8:5061
INFO: tls [tls_server.c:445]: tls_accept(): tls_accept: client did not present a certificate
...
INFO: tls [tls_select.c:168]: get_cert(): Unable to retrieve peer TLS certificate from SSL structure
This is with verify_certificate and require_certificate set to no in tls.cfg
If I try and set the following in tls.cfg
[server:default]
method = TLSv1.2+
verify_certificate = no
require_certificate = yes
I see in the logs;
INFO: tls [tls_domain.c:303]: ksr_tls_fill_missing(): TLSs<default>: tls_method=22
INFO: tls [tls_domain.c:315]: ksr_tls_fill_missing(): TLSs<default>: certificate='/etc/kamailio/tls-certs/cert.pem'
INFO: tls [tls_domain.c:322]: ksr_tls_fill_missing(): TLSs<default>: ca_list='(null)'
INFO: tls [tls_domain.c:329]: ksr_tls_fill_missing(): TLSs<default>: crl='(null)'
INFO: tls [tls_domain.c:333]: ksr_tls_fill_missing(): TLSs<default>: require_certificate=1
INFO: tls [tls_domain.c:340]: ksr_tls_fill_missing(): TLSs<default>: cipher_list='(null)'
INFO: tls [tls_domain.c:347]: ksr_tls_fill_missing(): TLSs<default>: private_key='/etc/kamailio/tls-certs/privkey.pem'
INFO: tls [tls_domain.c:351]: ksr_tls_fill_missing(): TLSs<default>: verify_certificate=0
INFO: tls [tls_domain.c:354]: ksr_tls_fill_missing(): TLSs<default>: verify_depth=9
NOTICE: tls [tls_domain.c:1095]: ksr_tls_fix_domain(): registered server_name callback handler for socket [:0], server_name='<default>' ...
INFO: tls [tls_domain.c:692]: set_verification(): TLSs<default>: Client MUST present valid certificate
INFO: tls [tls_domain.c:303]: ksr_tls_fill_missing(): TLSc<default>: tls_method=20
INFO: tls [tls_domain.c:315]: ksr_tls_fill_missing(): TLSc<default>: certificate='(null)'
INFO: tls [tls_domain.c:322]: ksr_tls_fill_missing(): TLSc<default>: ca_list='(null)'
INFO: tls [tls_domain.c:329]: ksr_tls_fill_missing(): TLSc<default>: crl='(null)'
INFO: tls [tls_domain.c:333]: ksr_tls_fill_missing(): TLSc<default>: require_certificate=1
INFO: tls [tls_domain.c:340]: ksr_tls_fill_missing(): TLSc<default>: cipher_list='(null)'
INFO: tls [tls_domain.c:347]: ksr_tls_fill_missing(): TLSc<default>: private_key='(null)'
INFO: tls [tls_domain.c:351]: ksr_tls_fill_missing(): TLSc<default>: verify_certificate=1
INFO: tls [tls_domain.c:354]: ksr_tls_fill_missing(): TLSc<default>: verify_depth=9
INFO: tls [tls_domain.c:692]: set_verification(): TLSc<default>: Server MUST present valid certificate
...
ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed
Which looks like verification is being enabled when I add require?
Would someone be kind enough to point out what I am missing please? (Assuming it’s not a bug :-)
Thanks
Mark
--
Mark Boyce
Dark Origins Ltd
Excuse me i already made integration for kamailio with asterisk but i want to make sip calls through kamailio and media fuctions through asterisk , i want kamailio to make calls away from asterisk , i just wanted asterisk to use its dahdi module .’
Thank you.
Hello,
Yesterday, there was a new release of Linphone IOS app, but i need help
from some kamailio expert how to add PUSH notification to the application
to receive incoming calls when the phone is not in use (wake up required)
from a kamailio server.
I have read on internet old tutorials (tsilo module) but most of them are
incomplete or do not explain in an easy way how to do it (for an average
kamailio user).
Anyone could do an easy to understand tutorial ?
Regards,
William Anderson
Dev-Ops VoIP & Kamailio
GILAWA is looking for a new colleague to join our team!
Tasks:
Deploying, developing, and integrating our software based on Kamailio
Testing and validation of our customer solutions
Solve complex customer problems in the VoIP field
Fix Bugs and create extensions in the Kamailio project
Requirements:
Good background in VoIP telephony and Kamailio Stack
Experience with signalling standards (SIP, RTP etc..) and troubleshooting
Knowledge and experience in one of the following languages: C/C++, Bash, PHP
Experience with Debian or RedHat/CentOS Linux, knowledge of Ansible would be a plus
Fluent in English
Based in European or neighbouring time zone (e.g. EMEA area)
Self-organized and strong communication skills
Given the current situation this is a remote position.
If you are interested, please send me a (direct) e-mail with an CV or Linkedin link, please include your availability and salary expectations as well.
Best regards,
Henning Westerholt
--
Henning Westerholt - https://skalatan.de/blog/
Kamailio services - https://gilawa.com<https://gilawa.com/>
Hi,
I am facing below error when i try to make a call using pjsip ..
Registration is successful.
I am following the open 5gs VolTE setup. I have not changed any
configurations in any of the config files. But I am facing below issue ..
Can you please help me what could be the reason.
*reason=403 (Forbidden - You must register first with a S-CSCF)*
Could anyone please help me .. I am ready to provide anyother info if
required .
Thanks,
Pavithra
Hi ,
I am facing below error in s-cscf when i send a BYE from alice to bob in
kamailio IMS. The problem is in only call termination .Kindly help .
Error log in scscf :
Jun 30 08:40:22 scscf kamailio[557]: DEBUG: <core>
[core/mem/q_malloc.c:526]: qm_free(): freeing frag. 0x7f4746f89148 alloc'ed
from core: core/rvalue.c: rval_new_empty(224)
Jun 30 08:40:22 scscf kamailio[557]: DEBUG: <core>
[core/socket_info.c:630]: grep_sock_info(): checking if host==us: 11==11 &&
[10.244.0.57] == [10.244.0.54]
Jun 30 08:40:22 scscf kamailio[557]: DEBUG: <core>
[core/socket_info.c:637]: grep_sock_info(): checking if port 4080
(advertise 0) matches port 5060
Jun 30 08:40:22 scscf kamailio[557]: DEBUG: <core> [core/name_alias.h:62]:
grep_aliases(): matching (0:10.244.0.57:5060) vs. (0:sip.example.com:0)
Jun 30 08:40:22 scscf kamailio[557]: DEBUG: <core> [core/name_alias.h:62]:
grep_aliases(): matching (0:10.244.0.57:5060) vs. (0:sip.example.com:5060)
Jun 30 08:40:22 scscf kamailio[557]: DEBUG: <core> [core/name_alias.h:62]:
grep_aliases(): matching (0:10.244.0.57:5060) vs. (0:
scscf.sip.example.com:4080)
Jun 30 08:40:22 scscf kamailio[557]: DEBUG: <core> [core/forward.c:423]:
check_self(): *host (0:10.244.0.57:5060 <http://10.244.0.57:5060>) != me*
Jun 30 08:40:22 scscf kamailio[557]: ERROR: <script>: sip:bob at
sip.example.com
Jun 30 08:40:22 scscf kamailio[557]: ERROR: <script>: *Domain not served
403*
Jun 30 08:40:22 scscf kamailio[557]: ERROR: <script>: *BYE *(
sip:alice@sip.example.com (10.244.0.52:4060) to sip:bob@sip.example.com,
-ARSjM.TTZgxhzwDjKRN0DtENWD4bKl0)
Jun 30 08:40:22 scscf kamailio[557]: DEBUG: <core>
[core/mem/q_malloc.c:374]: qm_malloc(): qm_malloc(0x7f4746dd7010, 30)
called from core: core/ut.c: as_asciiz(161)
I am not getting what it checks ..
10.244.0.57 -> UE bob
10.244.0.52 -> pcscf
10.244.0.53 -> icscf
10.244.0.54 -> scscf
10.244.0.56 -> UE alice
Kindly help
Thanks,
Pavithra
Greetings,
I'm trying to clean a SQL result using "sql_result_free()" but i'm not
having success.
Can you please verify if i'm doing anything wrong here?
This is my code :
xerr("Pre clean [0] = Iterator 0 =
$xavp(Cli_PICKER_Default_Search_Result[0]=>Code)");
sql_result_free("Cli_PICKER_Default_Search_Result");
xerr("Pos clean [0] = Iterator 0 =
$xavp(Cli_PICKER_Default_Search_Result[0]=>Code)");
The result is the following :
ERROR: <script>:Pre clean [0] = Iterator 0 = 111111111111
ERROR: <script>:Pos clean [0] = Iterator 0 = 111111111111
Am i using sql_result_free correctly or doing something wrong?
Best Regards,
