sr-users August 2024

sr-users@lists.kamailio.org

40 participants
40 discussions

by Maharaja Azhagiah

Hi all, I have kamailio running in GKE (Google Kubernetes) and recently seeing kamailio crashes frequently and I couldn't find the reason for the crash kamailio version version: kamailio 5.4.9 (x86_64/linux) 7d022d flags: USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLACKLIST, HAVE_RESOLV_RES, TLS_PTHREAD_MUTEX_SHARED ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. id: 7d022d compiled on 14:26:30 Jul 10 2024 with gcc 8.3.0 kamailio core generation: Core was generated by `kamailio -e -E -DD -M 128 -m 2048'. Program terminated with signal SIGSEGV, Segmentation fault. #0 load_route_data_db (rd=0x7ca482a48840) at cr_db.c:416 416 if (rd->carriers[i]->domains[j]->sum_prob == 0.0) { bt: (gdb) bt #0 load_route_data_db (rd=0x7ca482a48840) at cr_db.c:416 #1 0x00007ca474c8cc50 in reload_route_data () at cr_data.c:178 #2 0x00007ca474cabfdc in cr_rpc_reload_routes (rpc=0x7ca4f5a32aa0 <func_param>, c=0x7ca4f5a329c0 <_jsonrpc_ctx_global>) at cr_rpc.c:59 #3 0x00007ca4f5a158a1 in jsonrpc_exec_ex (cmd=0x7ffd774f34b0, rpath=0x0) at jsonrpcs_mod.c:1425 #4 0x00007ca4f5a15ccd in jsonrpc_exec (msg=0x7ca4f641a9f8, cmd=0x7ca4f61bde20 "x\335\033\366\244|", s2=0x0) at jsonrpcs_mod.c:1445 #5 0x00005745eb3fcb19 in do_action (h=0x7ffd774f3dc0, a=0x7ca4f61f1a50, msg=0x7ca4f641a9f8) at core/action.c:1085 #6 0x00005745eb40b35c in run_actions (h=0x7ffd774f3dc0, a=0x7ca4f61f0468, msg=0x7ca4f641a9f8) at core/action.c:1584 #7 0x00007ca474b92f8d in timer_handler (ticks=96802941, tl=0x7ca47b2f7950, data=0x7ca47b2f7868) at timer.c:216 #8 0x00005745eb49e3c4 in slow_timer_main () at core/timer.c:1105 #9 0x00005745eb3a85bd in main_loop () at main.c:1765 #10 0x00005745eb3b34c3 in main (argc=8, argv=0x7ffd774f4688) at main.c:2942 bt full: (gdb) bt full #0 load_route_data_db (rd=0x7ca482a48840) at cr_db.c:416 res = 0x7ca4f636a4a8 row = 0x7ca4f642a7f8 i = 0 j = 110 ret = 56 tmp_carrier_data = 0x7ca479ff5068 query_str = {s = 0x7ca474cdd800 <query> "SELECT DISTINCT domain FROM carrierroute WHERE carrier=8", len = 56} tmp_scan_prefix = {s = 0x5745ed889f68 "13235791374", len = 11} tmp_rewrite_host = {s = 0x5745ed889f7a "sip.telnyx.com;transport=TLS", len = 28} tmp_rewrite_prefix = {s = 0x5745ed889f99 "", len = 0} tmp_rewrite_suffix = {s = 0x5745ed889f9a "", len = 0} tmp_host_name = {s = 0x40 <error: Cannot access memory at address 0x40>, len = 1965559808} tmp_reply_code = {s = 0x7ca474ccf2b0 <__func__.5843> "reload_route_data", len = 1959587872} tmp_comment = {s = 0x5745ed889f9b "IMPORTED - WTJHSX", len = 18} p_tmp_comment = 0x7ffd774f30b0 __func__ = "load_route_data_db" n = 0 #1 0x00007ca474c8cc50 in reload_route_data () at cr_data.c:178 old_data = 0x5745ed850150 new_data = 0x7ca482a48840 i = 22341 __func__ = "reload_route_data" #2 0x00007ca474cabfdc in cr_rpc_reload_routes (rpc=0x7ca4f5a32aa0 <func_param>, c=0x7ca4f5a329c0 <_jsonrpc_ctx_global>) at cr_rpc.c:59 __func__ = "cr_rpc_reload_routes" #3 0x00007ca4f5a158a1 in jsonrpc_exec_ex (cmd=0x7ffd774f34b0, rpath=0x0) at jsonrpcs_mod.c:1425 rpce = 0x7ca4f6425fb8 ctx = 0x7ca4f5a329c0 <_jsonrpc_ctx_global> ret = -1 nj = 0x0 val = {s = 0x5745ed845010 "cr.reload_routes", len = 16} scmd = {s = 0x7ca4f61bdd78 "{\"jsonrpc\": \"2.0\", \"method\": \"cr.reload_routes\", \"id\": 2}", len = 57} __func__ = "jsonrpc_exec_ex" #4 0x00007ca4f5a15ccd in jsonrpc_exec (msg=0x7ca4f641a9f8, cmd=0x7ca4f61bde20 "x\335\033\366\244|", s2=0x0) at jsonrpcs_mod.c:1445 scmd = {s = 0x7ca4f61bdd78 "{\"jsonrpc\": \"2.0\", \"method\": \"cr.reload_routes\", \"id\": 2}", len = 57} __func__ = "jsonrpc_exec" #5 0x00005745eb3fcb19 in do_action (h=0x7ffd774f3dc0, a=0x7ca4f61f1a50, msg=0x7ca4f641a9f8) at core/action.c:1085 ret = -5 v = 0 dst = {send_sock = 0x0, to = {s = {sa_family = 41744, sa_data = "6\366\244|\000\000\035u\271t\244|\000"}, sin = {sin_family = 41744, sin_port = 63030, sin_addr = {s_addr = 31908}, sin_zero = "\035u\271t\244|\000"}, sin6 = {sin6_family = 41744, sin6_port = 63030, sin6_flowinfo = 31908, sin6_addr = {__in6_u = {__u6_addr8 = "\035u\271t\244|\000\000\005u\271t\244|\000", __u6_addr16 = {29981, 29881, 31908, 0, 29957, 29881, 31908, 0}, __u6_addr32 = {1958311197, 31908, 1958311173, 31908}}}, sin6_scope_id = 2001680800}, sas = {ss_family = 41744, __ss_padding = "6\366\244|\000\000\035u\271t\244|\000\000\005u\271t\244|\000\000\240\071Ow\375\177\000\000/.:\365\244|\000\000\320:Ow\375\177\000\000\327\337j\353EW\000\000\320\071Ow\375\177\000\000\020@ \016\366\244|\000\000\030\245\066\366\244|\000\000\020@\016\366\244|\000\000\020:Ow\375\177\000\000\356u\236\365\244|\000\000\030\245\066\366\244|\000\000\000\000\000\000\000\000\000", __ss_align = 134217728}}, id = 130848392, send_flags = {f = 0, blst_imask = 0}, proto = 56 '8', proto_pad0 = 5 '\005', proto_pad1 = 36} tmp = 0x7ca4f641a9f8 "\344\032" new_uri = 0xed3 <error: Cannot access memory at address 0xed3> end = 0x7ca474b9751b "\r\n" crt = 0x2 <error: Cannot access memory at address 0x2> cmd = 0x7ca4f617b7d8 len = 0 user = 15 uri = {user = {s = 0x9774f3800 <error: Cannot access memory at address 0x9774f3800>, len = 621}, passwd = {s = 0x400000000 <error: Cannot access memory at address 0x400000000>, len = 1721781302}, host = {s = 0x0, len = -2147483648}, port = {s = 0x8000000 <error: Cannot access memory at address 0x8000000>, len = -343946861}, params = {s = 0x7ffd774f38e0 "09Ow\375\177", len = -167557169}, sip_params = { s = 0x7ca4f53704f0 <dialog_table_name> "l^5\365\244|", len = -164192016}, headers = {s = 0x1700000000 <error: Cannot access memory at address 0x1700000000>, len = 2001681040}, port_no = 14800, proto = 30543, type = 32765, flags = (unknown: 4130775280), transport = {s = 0x0, len = 2009201968}, ttl = {s = 0x6774f3a50 <error: Cannot access memory at address 0x6774f3a50>, len = -181058744}, user_param = { s = 0x17200000000 <error: Cannot access memory at address 0x17200000000>, len = 2099608304}, maddr = {s = 0x7ffd774f3960 "\035u\271t\244|", len = -344235896}, method = {s = 0x0, len = -2147483648}, lr = { --Type <RET> for more, q to quit, c to continue without paging-- s = 0x8000000 <error: Cannot access memory at address 0x8000000>, len = -343946861}, r2 = {s = 0x7ffd774f38d0 "`9Ow\375\177", len = -166931844}, gr = {s = 0x7ca4f53704f0 <dialog_table_name> "l^5\365\244|", len = -164192016}, transport_val = {s = 0x7ffd774f3960 "\035u\271t\244|", len = -181636538}, ttl_val = {s = 0x7ffd774f3930 "`9Ow\375\177", len = -167555326}, user_param_val = {s = 0x0, len = 2}, maddr_val = { s = 0x7ca4f60c1f77 <db_mysql_submit_query> "UH\211\345AWAVAUATSH\201\354\210", len = -166889584}, method_val = {s = 0x177d6038c8 <error: Cannot access memory at address 0x177d6038c8>, len = 2001681040}, lr_val = {s = 0xe00000000 <error: Cannot access memory at address 0xe00000000>, len = 1958311183}, r2_val = {s = 0x7ffd774f3960 "\035u\271t\244|", len = -164191464}, gr_val = { s = 0x7ffd774f39f0 "\373\377\377\377", len = -344973614}} next_hop = {user = {s = 0x8000000 <error: Cannot access memory at address 0x8000000>, len = -343946861}, passwd = {s = 0x7ffd774f3720 "\020\070Ow\375\177", len = -166975523}, host = { s = 0x7ffd774f3740 "\020\070Ow\375\177", len = -166887566}, port = {s = 0x7ca4f60431d0 <sql_str> "@@w\355EW", len = -164192016}, params = {s = 0x7ffd774f3d50 "", len = -164192016}, sip_params = {s = 0x0, len = -30810208}, headers = {s = 0x0, len = -181051830}, port_no = 8055, proto = 62988, type = 31908, flags = (unknown: 4128077712), transport = { s = 0x4774f37d0 <error: Cannot access memory at address 0x4774f37d0>, len = 2001680544}, ttl = {s = 0x669fa379 <error: Cannot access memory at address 0x669fa379>, len = -164192016}, user_param = { s = 0x5745ed7743b0 "'sip:+13194676789@us.test.com',NULL,0)", len = 1721781302}, maddr = {s = 0x400000000 <error: Cannot access memory at address 0x400000000>, len = -167513741}, method = { s = 0x8000000 <error: Cannot access memory at address 0x8000000>, len = -343946861}, lr = {s = 0x7ffd774f3810 "\340\070Ow\375\177", len = -167567737}, r2 = { s = 0x8000000 <error: Cannot access memory at address 0x8000000>, len = -343946861}, gr = {s = 0x7ffd774f3810 "\340\070Ow\375\177", len = -166977673}, transport_val = {s = 0x7ca4f60431d0 <sql_str> "@@w\355EW", len = -164192016}, ttl_val = {s = 0x7ffd774f3a90 "\330\267\027\366\244|", len = 23}, user_param_val = { s = 0x5745ed77417a "3071,3795,'6e1a9c34-cec5-4ebb-bcd9-3356d80bcf9e',' sip:+13194004696@sip.telnyx.com','c5SS3F27B8rDN',' sip:+13194676789@us.test.com','f9b9b2c48ef41ef90eb05056b0a794','tls: 10.16.0.74:520"..., len = -164192016}, maddr_val = {s = 0x7ca4f60dcf18 "`", len = -31060352}, method_val = {s = 0x0, len = -180627954}, lr_val = {s = 0x7ca4f60c1f77 <db_mysql_submit_query> "UH\211\345AWAVAUATSH\201\354\210", len = -166889584}, r2_val = {s = 0x0, len = 0}, gr_val = {s = 0x0, len = 0}} u = 0x7ca4f5817bc8 port = 0 dst_host = 0x7ca474b9751d i = -344941541 flags = 0 avp = 0x7ffd774f3c40 st = {flags = 3984015424, id = 22341, name = {n = -310010607, s = {s = 0x5745ed859d11 "", len = 2001679968}, re = 0x5745ed859d11}, avp = 0x66a04c36} sct = 0x60f60e6120 sjt = 0x5f60e6a50 rve = 0x8000000 mct = 0x0 rv = 0xffffffff rv1 = 0x5745eb7fc993 c1 = {cache_type = 10, val_type = RV_NONE, c = {avp_val = {n = 0, s = {s = 0x0, len = 0}, re = 0x0}, pval = {rs = {s = 0x0, len = 0}, ri = 2001679912, flags = 32765}}, i2s = "`6Ow\375\177\000\000\031\241\a\366\244|\000\000\250\003\000\000\000"} s = {s = 0xffffffff <error: Cannot access memory at address 0xffffffff>, len = -164179120} srevp = {0x3, 0x64870454268b4200} evp = {data = 0x0, obuf = {s = 0x0, len = 0}, rcv = 0x0, dst = 0x0, req = 0x0, rpl = 0x0, rplcode = 0, mode = 0} mod_f_params = {{type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = { number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, {type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}, { type = NOSUBTYPE, u = {number = 0, string = 0x0, str = {s = 0x0, len = 0}, data = 0x0, attr = 0x0, select = 0x0}}} __func__ = "do_action" #6 0x00005745eb40b35c in run_actions (h=0x7ffd774f3dc0, a=0x7ca4f61f0468, msg=0x7ca4f641a9f8) at core/action.c:1584 t = 0x7ca4f61f1a50 ret = 1 tvb = {tv_sec = 0, tv_usec = 0} tve = {tv_sec = 0, tv_usec = 0} tz = {tz_minuteswest = 60, tz_dsttime = 0} tdiff = 4131498432 __func__ = "run_actions" #7 0x00007ca474b92f8d in timer_handler (ticks=96802941, tl=0x7ca47b2f7950, data=0x7ca47b2f7868) at timer.c:216 msg = 0x7ca4f641a9f8 a = 0x7ca47b2f7868 ra_ctx = {rec_lev = 1, run_flags = 0, last_retcode = 1, jmp_env = {{__jmpbuf = {95957815091336, 8333654393230933038, 0, 2147483648, 134217728, 95957815380371, 8333654393012829230, 2510245087605373998}, __mask_was_saved = 0, __saved_mask = {__val = {137047930071236, 0, 25985340079663656, 140726605135616, 137045787154760, 70721158768, 137045787160648, 140726605135472, 137045776334895, 1095350878208, 137045782276504, 140735195070144, 140726605135504, 137045776144708, 0, 140726605135552}}}}} keng = 0x0 evname = {s = 0x7ca474b9715a "timer", len = 5} __func__ = "timer_handler" --Type <RET> for more, q to quit, c to continue without paging-- #8 0x00005745eb49e3c4 in slow_timer_main () at core/timer.c:1105 n = 12 ret = 4294967295 tl = 0x7ca47b2f7950 i = 1010 __func__ = "slow_timer_main" #9 0x00005745eb3a85bd in main_loop () at main.c:1765 i = 16 pid = 0 si = 0x0 si_desc = "udp receiver child=15 sock=10.16.0.74:5101 ( 35.202.133.184:5101)\000AOw\375\177\000\000d\366\023\376\244|\000\000 \000\000\000\060\000\000\000@AOw\375\177\000\000\200@Ow \375\177\000\000\000B\213&T\004\207d\223\311\177\353EW\000\000\240\274\065\366\244|\000" nrprocs = 16 woneinit = 1 __func__ = "main_loop" #10 0x00005745eb3b34c3 in main (argc=8, argv=0x7ffd774f4688) at main.c:2942 cfg_stream = 0x5745ed74d2a0 c = -1 r = 0 tmp = 0x7ffd774f5d9f "" tmp_len = 0 port = 0 proto = 0 ahost = 0x0 aport = 0 options = 0x5745eb7b8d78 ":f:cm:M:dVIhEeb:l:L:n:vKrRDTN:W:w:t:u:g:P:G:SQ:O:a:A:x:X:Y:" ret = -1 seed = 1555962608 rfd = 4 debug_save = 0 debug_flag = 0 dont_fork_cnt = 2 n_lst = 0x7ffd77580248 p = 0x7ca4fe189995 <handle_intel+197> "H\205\300uf\213t$\004M\215\216\244" st = {st_dev = 0, st_ino = 0, st_nlink = 0, st_mode = 0, st_uid = 0, st_gid = 0, __pad0 = 0, st_rdev = 0, st_size = 0, st_blksize = 0, st_blocks = 0, st_atim = {tv_sec = 0, tv_nsec = 0}, st_mtim = {tv_sec = 0, tv_nsec = 0}, st_ctim = {tv_sec = 0, tv_nsec = 0}, __glibc_reserved = {0, 0, 0}} tbuf = "\b\000\000\000\000\000\000\000\210FOw\375\177\000\000\320FOw\375\177\000\000\330+,\376\244|\000\000\000\000\000\000\000\000\000\000\020\vH\376\244|\000\000\001", '\000' <repeats 19 times>, " \000\000\000(&G\376\244|\000\000\320EOw\375\177\000\000\312tH\376\244|\000\000\000\000\000\000\000\000\000\000@e*\376\244|\000\000\320\263+\376\244|\000\000\364EOw\375\177\000\000\006", '\000' <repeats 15 times>, "/", '\000' <repeats 39 times>, "\200\037\000\000\377\377", '\000' <repeats 186 times>... option_index = 0 long_options = {{name = 0x5745eb7baf46 "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x5745eb7b6524 "version", has_arg = 0, flag = 0x0, val = 118}, {name = 0x5745eb7baf4b "alias", has_arg = 1, flag = 0x0, val = 1024}, {name = 0x5745eb7baf51 "subst", has_arg = 1, flag = 0x0, val = 1025}, {name = 0x5745eb7baf57 "substdef", has_arg = 1, flag = 0x0, val = 1026}, {name = 0x5745eb7baf60 "substdefs", has_arg = 1, flag = 0x0, val = 1027}, {name = 0x5745eb7baf6a "server-id", has_arg = 1, flag = 0x0, val = 1028}, {name = 0x5745eb7baf74 "loadmodule", has_arg = 1, flag = 0x0, val = 1029}, {name = 0x5745eb7baf7f "modparam", has_arg = 1, flag = 0x0, val = 1030}, {name = 0x5745eb7baf88 "log-engine", has_arg = 1, flag = 0x0, val = 1031}, {name = 0x5745eb7baf93 "debug", has_arg = 1, flag = 0x0, val = 1032}, { name = 0x5745eb7baf99 "atexit", has_arg = 1, flag = 0x0, val = 1034}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}} __func__ = "main" (gdb) list 411 } 412 } while(RES_ROW_N(res) > 0); 413 414 for (i = 0; i < rd->carrier_num; ++i) { 415 for (j = 0; j < rd->carriers[i]->domain_num; ++j) { 416 if (rd->carriers[i]->domains[j]->sum_prob == 0.0) { 417 LM_ERR("All routes with carrier id %d (%.*s) and domain id %d (%.*s) have probability 0.\n", 418 rd->carriers[i]->id, rd->carriers[i]->name->len, rd->carriers[i]->name->s, 419 rd->carriers[i]->domains[j]->id, rd->carriers[i]->domains[j]->name->len, rd->carriers[i]->domains[j]->name->s); 420 } Please help to understand the reason for the crash and how to fix the problem. Thank you in advance. Regards *Maharaja Azhagiah*

2 weeks, 6 days

Limiting Video calls(Volte to video conversion)

by dushy

Hello All, I am trying to limiting the number of video calls (converting Volte to Vilte). To reduce traffic on the enodeb. Its like if there are 10 volte calls going on then I should be able to limit the number calls that can be converted to Vilte. I tried to write a route in kamailio_pcscf.cfg using module ims_dialog. But it doesnt work and get some errors while doing a modparam. Tried another method of counting eRAB at eNB (ENBUEID and ERABID pair with qci-2). This worked, but after sometime the extra call got established. Looks like traffic is going through qci 9 bearer. Is there any method where we can achieve this. Thanks in Advance. Regards, Dushyanth

2 weeks, 6 days

Re: certificate verify failed (sni: unknown) integration with ms teams

by Muhammad Sohaib

Hi Batanai, After disabling #!define WITH_NAT in Kamailio, calls from the Asterisk endpoint to Microsoft Teams are functioning correctly. Both inbound and outbound calls exhibit proper two-way audio and no disconnection issues but there is no Bye when hangup from ms teams. However, I am encountering a problem with outbound calls originating from Microsoft Teams. When a call is placed from MS Teams, the recipient's phone rings as expected. Once the call is answered, Microsoft Teams disconnects the call immediately. The root of the issue seems to be that the ACK message is not being sent or received properly. As a result, Microsoft Teams does not receive the ACK, leading to an immediate call termination. Additionally, Asterisk does not receive a BYE message from Kamailio. *Summary of the Issue:* - *Inbound Calls*: From Asterisk to MS Teams work fine, with full audio and no disconnections but no BYE from ms teams. - *Outbound Calls*: From MS Teams to Asterisk result in the call being disconnected immediately after being answered due to a missing ACK, and Asterisk does not receive a BYE message. Thanks, On Tue, Aug 27, 2024 at 5:45 PM Batanai Musiiwa <batanai.musiiwa(a)etel.co.zw> wrote: > Hi @ > Muhammad. May you advise if the calls are disconnecting in either > direction? > > ; > > On Tue, Aug 27, 2024 at 11:05 AM Muhammad Sohaib via sr-users < > sr-users(a)lists.kamailio.org> wrote: > >> Hi everyone, >> >> Thank you all for your kind help with the TLS configuration. Palany's >> suggestion worked flawlessly, and now both inbound and outbound calls are >> functioning. >> >> However, I'm facing a one-way audio issue, and calls are disconnected >> after 30 seconds. I suspect this might be related to NAT. Here’s the >> current setup: >> >> *Asterisk <===> Kamailio (as SBC) <=====> MS Teams* >> >> Could this be related to my NAT configuration, or is there something else >> I should investigate? Any guidance would be greatly appreciated. >> >> Thanks again for your support! >> >> On Thu, Aug 15, 2024 at 11:02 PM palany <palany(a)advancedzim.com> wrote: >> >>> >>> >>> Hi Muhammad >>> >>> >>> >>> Can you try your tls cfg as below and make sure your certificates have >>> the right permissions. >>> >>> >>> >>> [server:default] >>> >>> method = TLSv1.2+ >>> >>> verify_certificate = no >>> >>> require_certificate = no >>> >>> private_key = /etc/letsencrypt/live/MYDOMAIN/privkey.pem >>> >>> certificate = /etc/letsencypt/live/MYDOMAIN/fullchain.pem >>> >>> >>> >>> [client:default] >>> >>> method = TLSv1.2+ >>> >>> verify_certificate = no >>> >>> require_certificate = no >>> >>> private_key = /etc/letsencrypt/live/MYDOMAIN/privkey.pem >>> >>> certificate = /etc/letsencrypt/live/MYDOMAIN/fullchain.pem >>> >>> *From:* Muhammad Sohaib via sr-users [mailto:sr-users@lists.kamailio.org] >>> >>> *Sent:* Thursday, 15 August 2024 3:46 PM >>> *To:* Kamailio (SER) - Users Mailing List >>> *Cc:* Muhammad Sohaib >>> *Subject:* [SR-Users] certificate verify failed (sni: unknown) >>> integration with ms teams >>> >>> >>> >>> Dear all, >>> >>> >>> >>> Trying to integrate Kamailio with MS Teams by following >>> https://skalatan.de/en/blog/kamailio-sbc-teams >>> >>> >>> >>> kamcmd dispatcher.list | egrep "URI|FLAGS" >>> >>> >>> URI: sip: >>> sip.pstnhub.microsoft.com;transport=tls >>> FLAGS: IP >>> URI: sip: >>> sip2.pstnhub.microsoft.com;transport=tls >>> FLAGS: IP >>> URI: sip: >>> sip3.pstnhub.microsoft.com;transport=tls >>> FLAGS: IP >>> >>> >>> >>> Kamailio Logs: >>> >>> /usr/local/sbin/kamailio[412158]: INFO: <script>: Sent out tm request: >>> OPTIONS sip:sip.pstnhub.microsoft.com;transport=tls SIP/2.0#015#012 >>> Via: SIP/2.0/TLS >>> x.x.x.x:5061;branch=z9hG4bK5dad.92de50b2000000000000000000000000.0#015#012 >>> To: <sip:sip.pstnhub.microsoft.com;transport=tls>#015#012 >>> From: <sip:test.mytest.com >>> >;tag=5d0939b82abe9b1bbf185d963b6e6c88-edeb3c71#015#012 >>> CSeq: 10 OPTIONS#015#012 >>> Call-ID: 2db6bede5631d9b6-412158(a)88.99.244.106#015#012 >>> <http://2db6bede5631d9b6-412158@88.99.244.106#015%23012> >>> Max-Forwards: 70#015#012Content-Length: 0#015#012 >>> User-Agent: kamailio (5.8.2 (x86_64/linux)) >>> >>> /usr/local/sbin/kamailio[412165]: ERROR: tls [tls_server.c:1312]: >>> tls_h_read_f(): protocol level error >>> /usr/local/sbin/kamailio[412165]: ERROR: tls [tls_util.h:49]: >>> tls_err_ret(): TLS write:error:0A000086:SSL routines::certificate verify >>> failed (sni: unknown) >>> /usr/local/sbin/kamailio[412165]: ERROR: tls [tls_server.c:1316]: >>> tls_h_read_f(): src addr: 52.114.75.24:5061 >>> /usr/local/sbin/kamailio[412165]: ERROR: tls [tls_server.c:1319]: >>> tls_h_read_f(): dst addr: x.x.x.x:0 >>> /usr/local/sbin/kamailio[412165]: ERROR: <core> [core/tcp_read.c:1524]: >>> tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7fa74d265d40 r: >>> 0x7fa74d265e68 (-1) >>> >>> >>> tls.cfg: >>> >>> [server:default] >>> method = TLSv1.2+ >>> verify_certificate = yes >>> require_certificate = yes >>> private_key = /etc/letsencrypt/live/test.mytest.com/privkey.pem >>> certificate = /etc/letsencrypt/live/test.mytest.com/fullchain.pem >>> ca_list = /etc/letsencrypt/live/test.mytest.com/fullchain.pem >>> server_name = test.mytest.com >>> >>> [client:default] >>> method = TLSv1.2+ >>> verify_certificate = yes >>> require_certificate = yes >>> private_key = /etc/letsencrypt/live/test.mytest.com/privkey.pem >>> certificate = /etc/letsencrypt/live/test.mytest.com/fullchain.pem >>> ca_list = /etc/letsencrypt/live/test.mytest.com/fullchain.pem >>> >>> Please suggest what I am missing. >>> >>> --- >>> >>> Thanks, >>> >> >> >> -- >> Thanks, >> __________________________________________________________ >> Kamailio - Users Mailing List - Non Commercial Discussions >> To unsubscribe send an email to sr-users-leave(a)lists.kamailio.org >> Important: keep the mailing list in the recipients, do not reply only to >> the sender! >> Edit mailing list options or unsubscribe: >> > -- Thanks,

2 weeks, 6 days

certificate verify failed (sni: unknown) integration with ms teams

by Muhammad Sohaib

Dear all, Trying to integrate Kamailio with MS Teams by following https://skalatan.de/en/blog/kamailio-sbc-teams kamcmd dispatcher.list | egrep "URI|FLAGS" URI: sip:sip.pstnhub.microsoft.com ;transport=tls FLAGS: IP URI: sip:sip2.pstnhub.microsoft.com ;transport=tls FLAGS: IP URI: sip:sip3.pstnhub.microsoft.com ;transport=tls FLAGS: IP Kamailio Logs: /usr/local/sbin/kamailio[412158]: INFO: <script>: Sent out tm request: OPTIONS sip:sip.pstnhub.microsoft.com;transport=tls SIP/2.0#015#012 Via: SIP/2.0/TLS x.x.x.x:5061;branch=z9hG4bK5dad.92de50b2000000000000000000000000.0#015#012 To: <sip:sip.pstnhub.microsoft.com;transport=tls>#015#012 From: <sip:test.mytest.com >;tag=5d0939b82abe9b1bbf185d963b6e6c88-edeb3c71#015#012 CSeq: 10 OPTIONS#015#012 Call-ID: 2db6bede5631d9b6-412158(a)88.99.244.106#015#012 Max-Forwards: 70#015#012Content-Length: 0#015#012 User-Agent: kamailio (5.8.2 (x86_64/linux)) /usr/local/sbin/kamailio[412165]: ERROR: tls [tls_server.c:1312]: tls_h_read_f(): protocol level error /usr/local/sbin/kamailio[412165]: ERROR: tls [tls_util.h:49]: tls_err_ret(): TLS write:error:0A000086:SSL routines::certificate verify failed (sni: unknown) /usr/local/sbin/kamailio[412165]: ERROR: tls [tls_server.c:1316]: tls_h_read_f(): src addr: 52.114.75.24:5061 /usr/local/sbin/kamailio[412165]: ERROR: tls [tls_server.c:1319]: tls_h_read_f(): dst addr: x.x.x.x:0 /usr/local/sbin/kamailio[412165]: ERROR: <core> [core/tcp_read.c:1524]: tcp_read_req(): ERROR: tcp_read_req: error reading - c: 0x7fa74d265d40 r: 0x7fa74d265e68 (-1) tls.cfg: [server:default] method = TLSv1.2+ verify_certificate = yes require_certificate = yes private_key = /etc/letsencrypt/live/test.mytest.com/privkey.pem certificate = /etc/letsencrypt/live/test.mytest.com/fullchain.pem ca_list = /etc/letsencrypt/live/test.mytest.com/fullchain.pem server_name = test.mytest.com [client:default] method = TLSv1.2+ verify_certificate = yes require_certificate = yes private_key = /etc/letsencrypt/live/test.mytest.com/privkey.pem certificate = /etc/letsencrypt/live/test.mytest.com/fullchain.pem ca_list = /etc/letsencrypt/live/test.mytest.com/fullchain.pem Please suggest what I am missing. --- Thanks,

2 weeks, 6 days

I have mo media and I must park

by Alexandru Covalschi

Hello list! Please help me understand if putting my b2bua in sensory deprivation is actually the best approach to punish it for sole reason of its existence. The background of this horror story is pretty cliche, call center needs a way to infinitely expand, so I'm building a scaling telephony core. Our main protagonist is an innocent b2bua with a very grounded backstory: step 0: receive external instruction to start a call step 1: originate step 2: park step 3: play moh until: - - a) told to pass it to other component - - b) told to hang up - - c) hang up on local timeout A simplified diagram of the call flow looks something like this (repeating names are same components): ### Signaling ### Remote Destination ^ Kamailio-external ^ Freeswitch-originator V Freeswitch- queue V Kamailio-local V Agent ### end of signaling ### ### Media ### Remote Destination ^ Rtpengine-external ^ Freeswitch-originator V Freeswitch-queue V Rtpengine- local V Agent ### end of media ### Due to specifics of the setting, re-negotiating the media and any non-essential signaling with remote destination is a very much last resort. And, as you can imagine, after step3a (pass it to other component), the character development of Freeswitch-originator service stops completely. Well, at least it is doing an honest job by playing the music on hold, which a little bit justifies its presence on the media path. But not for long. In the world of near future, pull request number 3956 is merged with the master branch, exposing the rtpengine API and leaving me no reason not to move MoH to a kernel media player. At this moment I feel a wild urge to get rid of Freeswitch-originator at all, but then I read the sources for mohq and dialog to remind myself that Kamailio is a proxy and proxies can't do this... So I fill b2bua's dialplan with 387.44 million lines of hateful comments and remind it to rcvonly every time it tries to warn the others about the grim fate. When the queue designates an agent to his call, theoretically I don't even need the second freswitch as well - if agen't media session has been established (sometimes ICE take tooo long) with Rtpengine- local, I can bridge their media sessions using publish and subscribe. I'd like to ask your opinion, list: do you see any plotholes potential issues with such deisgn? I'd honestly like to set Freeswitch to bypass-media, so it wont' waste ports and cpu for nothing at all. Are there any issues if I add body for the iniitial invite in the request_route as if it was received in there? Maybe there's a better way, overall? Any critique is welcome! Thank you -- AC

3 weeks

How to invoke RTPengine for re-Invite 200 OK within dialog

by Shah Hussain Khattak

Hello Experts, I need your advice on the following issue if you can kindly help. I am working on a hold call flow: UA - > Kamailio (RTP Engine) - > FS initial call establishes fine, RTP engine is invoked and SDP media IP is modified correctly. Then 1. I am receiving a hold re-invite with a send-only 2. I see Kamailio is changing the media IP in the SDP (with my RTP engine IP) when it sends the Invite to my core FS server. 3. FS sends 200 OK with a=recvonly 4. Kamailio relays the message as it is to the other leg. can someone advise me, on how can I invoke rtpengine at step 4, so the SDP is sent with my media server IP in the 200 OK? --- 200 OK from FS ---- SIP/2.0 200 OK Via: SIP/2.0/UDP 13.54.01.02:5060;branch=z9hG4bKd2e8.8a573af8d927f67c1db4550676f8be88.0;i=1 Via: SIP/2.0/TCP 192.168.10.117:51280;received=218.33.01.02;rport=51280;branch=z9hG4bKPj7d1d8968830d4ed3922eec7da7cdc17c;alias Record-Route: <sip:13.54.01.02:5060;r2=on;lr=on> Record-Route: <sip:13.54.01.02;transport=tcp;r2=on;lr=on> From: <sip:0403225908@trunk.xyz.corp>;tag=6a180ffa7f824972a2c59ba47f293acb To: <sip:+61285038000@trunk.xyz.corp>;tag=DZrpcpgS1BDKF Call-ID: 4154062196634c34a2dbcb6b612bf44c CSeq: 12263 INVITE Contact: <sip:+61285038000@54.88.54.88:5060;transport=udp> User-Agent: UserAgentX/v1.0 Accept: application/sdp Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY Require: timer Supported: timer, path, replaces Session-Expires: 1800;refresher=uac Content-Type: application/sdp Content-Disposition: session Content-Length: 266 v=0 o=FreeSWITCH 1724635755 1724635757 IN IP4 54.88.54.88 s=FreeSWITCH c=IN IP4 54.88.54.88 t=0 0 m=audio 21202 RTP/AVP 8 101 a=rtpmap:8 PCMA/8000 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-15 a=recvonly a=ptime:20 a=rtcp:21203 IN IP4 54.88.54.88 --- 200 OK relayed towards the UA ---- 2024/08/26 17:22:39.923639 172.16.8.126:5060 -> 218.33.78.33:51280 SIP/2.0 200 OK Via: SIP/2.0/TCP 192.168.10.117:51280;received=218.33.01.02;rport=51280;branch=z9hG4bKPj7d1d8968830d4ed3922eec7da7cdc17c;alias Record-Route: <sip:13.54.01.02:5060;r2=on;lr=on> Record-Route: <sip:13.54.01.02;transport=tcp;r2=on;lr=on> From: <sip:0403225908@trunk.xyz.corp>;tag=6a180ffa7f824972a2c59ba47f293acb To: <sip:+61285038000@trunk.xyz.corp>;tag=DZrpcpgS1BDKF Call-ID: 4154062196634c34a2dbcb6b612bf44c CSeq: 12263 INVITE Contact: <sip:+61285038000@54.88.54.88:5060;transport=udp> User-Agent: UserAgentX/v1.0 Accept: application/sdp Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY Require: timer Supported: timer, path, replaces Session-Expires: 1800;refresher=uac Content-Type: application/sdp Content-Disposition: session Content-Length: 266 v=0 o=FreeSWITCH 1724635755 1724635757 IN IP4 54.88.54.88 s=FreeSWITCH c=IN IP4 54.88.54.88 t=0 0 m=audio 21202 RTP/AVP 8 101 a=rtpmap:8 PCMA/8000 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-15 a=recvonly a=ptime:20 a=rtcp:21203 IN IP4 54.88.54.88 my configs for within dialog route: ##### route[WITHINDLG] { append_hf("X-Test-Header: route_WITHINDLG\r\n"); if (has_totag()) { if (loose_route()) { if (is_method("BYE")) { setflag(FLT_ACC); # do accounting ... setflag(FLT_ACCFAILED); # ... even if the transaction fails } if (is_method("ACK")) { xlog("L_INFO", "Relaying ACK\n"); } if (is_method("INVITE|UPDATE")) { if (has_body("application/sdp") && search_body("m=image") && search_body("T38")) { xlog("L_INFO", "T.38 re-INVITE detected, skipping rtpengine invocation\n"); } else { xlog("L_INFO", "Non-T.38 INVITE detected, invoking rtpengine\n"); rtpengine_manage("replace-origin replace-session-connection"); } } route(RELAY); } else { if (is_method("SUBSCRIBE") && uri == myself) { route(PRESENCE); exit; } if (is_method("ACK")) { if (t_check_trans()) { t_relay(); exit; } else { exit; } } sl_send_reply("404","Not here"); } exit; } } ##### looking forward to your usual guidance. Thank you! Regards, Shah

3 weeks

TLS module crashes with FIPS OpenSSL

by Marat Gareev

Hello, I encountered a problem stopping Kamailio with FIPS OpenSSL: Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007ff7292380ac in OPENSSL_sk_pop () from /lib64/libcrypto.so.3 Missing separate debuginfos, use: dnf debuginfo-install kamailio-5.7.3-4816.x86_64 (gdb) bt #0 0x00007ff7292380ac in OPENSSL_sk_pop () from /lib64/libcrypto.so.3 #1 0x00007ff72914bf5b in conf_modules_finish_int () from /lib64/libcrypto.so.3 #2 0x00007ff72914c694 in CONF_modules_unload () from /lib64/libcrypto.so.3 #3 0x00007ff7291efff9 in OPENSSL_cleanup () from /lib64/libcrypto.so.3 #4 0x00007ff72954702b in ?? () #5 0x0000000100061c08 in ?? () #6 0x00007ff7190566c8 in ?? () #7 0x00007ffccf196a20 in ?? () #8 0x000000000071da8a in futex_release (lock=0x7ff729f08b50 <syslog>) at core/mem/../mem/../futexlock.h:134 #9 0x00000000006e9448 in destroy_tls () at core/tls_hooks.c:75 #10 0x000000000041f278 in cleanup (show_status=1) at main.c:594 #11 0x0000000000420af1 in shutdown_children (sig=15, show_status=1) at main.c:721 #12 0x0000000000421717 in handle_sigs () at main.c:752 #13 0x0000000000430c88 in main_loop () at main.c:1988 #14 0x0000000000439d13 in main (argc=14, argv=0x7ffccf1973f8) at main.c:3212 (gdb) Environment: Oracle Linux Server 9.3 Kamailio 5.7.3 yum list --installed | grep ssl openssl.x86_64 10:3.0.7-24.0.3.el9_fips @tools openssl-libs.x86_64 10:3.0.7-24.0.3.el9_fips @tools openssl-pkcs11.x86_64 0.4.11-7.el9 @anaconda xmlsec1-openssl.x86_64 1.2.29-9.el9 @AppStream What can I do for further investigation? Thanks

3 weeks

socket names for command line parameter "listen"

by Xenofon Karamanos

Hello all, I wanted to inform you about an upcoming change regarding the syntax we use for defining socket names in the listen (-l) command line argument. Current Syntax: -l udp:10.10.10.10:5060/11.11.11.11:5060 Proposed Options: 1. -l udp:10.10.10.10:5060/11.11.11.11:5060=s1 2. -l s1=udp:10.10.10.10:5060/11.11.11.11:5060 ( A draft PR about this option can be found in https://github.com/kamailio/kamailio/pull/3954) [https://opengraph.githubassets.com/69f8a4a1d2c8988372b4942f84bde95de94502d2…]<https://github.com/kamailio/kamailio/pull/3954> main: Add support for naming socket in cli by xkaraman · Pull Request #3954 · kamailio/kamailio<https://github.com/kamailio/kamailio/pull/3954> Pre-Submission Checklist Commit message has the format required by CONTRIBUTING guide Commits are split per component (core, individual modules, libs, utils, ...) Each component has a single... github.com Please note that the socket name (s1) in both options is/should be optional. The change will allow for better clarity and flexibility when defining sockets, particularly when a name needs to be assigned and match the config file style. I would appreciate your feedback on which syntax you find more intuitive or any concerns you might have with these options. Your input is important to ensure a smooth transition. Best regards, Xenofon

3 weeks, 3 days

Kamailio cluster options

by Ali Taher

Hello all, I'm using Kamailio as SIP redirect (act as routing decision for SBC) depending mainly on sqlops and db_postgres modules, and it's working perfectly. What I need now is to have a kind of cluster of Kamailio servers for high availability purpose. What is the best option for me ? BR

3 weeks, 4 days

push server tcp problem

by Bernd Krueger-Knauber

Hi, I implemented an apple and android push server/proxy with kamailio 5.8.1. The server/proxy is transparent. It works fine with UDP, since the registration after the push comes from the same ip and port. So t_continue works without problems. (We use the new registration as signal thet the phone is ready) If we use tcp at the client, he gets the push, wakes up and send the new registration on an other port. The SIP stack uses now an other connection. t_continue fails, because it uses the old data of the original invite acccording to the first registration. Is it possible to change the stored connection values according to the new registration data? Best regards, Bernd

3 weeks, 6 days

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users August 2024