sr-users October 2025

sr-users@lists.kamailio.org

34 participants
20 discussions

Unable to start Kamailio with TLS configuration
by Chandramouli P 03 Nov '25

03 Nov '25

Hello, Please find my server environment below: Operating System: RockyLinux 8.x and RHEL 8.x Kamailio version: 6.0.2 IP address: 10.122.0.4 I have generated SSL certificates using OpenSSL. After configuring Kamailio, I am unable to start Kamailio. Please find the steps that I used to generate certificates along with configuration at the below link: *https://pastebin.com/Veu8z9Pr <https://pastebin.com/Veu8z9Pr>* Any help would be appreciated and thanks in advance. Best Regards, Chandramouli.

3 10

seting sdp bundle with rtpengine
by Samuel Moya Tinoco 02 Nov '25

02 Nov '25

Hi everyone, I want to configure my kamailio+rtpengine to use the option bundle in SDP. I have a dedicated route to configure the specific rtpengine_manage options for each case (it's based on a route I saw in github) route[SETUP_BY_TRANSPORT] { if ($ru =~ "transport=ws") { xlog("L_INFO", "Request going to WS"); if(sdp_with_transport("RTP/SAVPF")) { rtpengine_manage("replace-origin replace-session-connection DTLS=passive SDES-off ICE=force SRTP AVPF rtcp-mux-reject bundle=accept"); t_on_reply("REPLY_WS_TO_WS"); return; } rtpengine_manage("replace-origin replace-session-connection DTLS=passive SDES-off ICE=force UDP/TLS/RTP/SAVPF bundle=accept bundle=accept"); t_on_reply("REPLY_FROM_WS"); } else if ($proto =~ "ws") { xlog("L_INFO", "Request coming from WS"); rtpengine_manage("replace-origin replace-session-connection DTLS SDES-off ICE=force SRTP AVPF bundle=accept"); t_on_reply("REPLY_TO_WS"); } else { xlog("L_INFO", "This is a classic phone call"); if (isflagset(RTPENGINE_NO_SRTP)){ xlog("L_INFO", "Llamada de Telealarm a la IPS (no srtp)"); rtpengine_manage("replace-origin replace-session-connection DTLS=off SDES-off RTP/AVP"); t_on_reply("REPLY_NO_SRTP"); return; } if ($tU=~"^ips") { rtpengine_manage("replace-origin replace-session-connection DTLS=passive SDES-off UDP/TLS/RTP/SAVPF"); t_on_reply("REPLY_NO_SRTP_ICE"); return; } if (isflagset(RTPENGINE_NO_ICE)) { rtpengine_manage("replace-origin replace-session-connection DTLS=passive SDES-off UDP/TLS/RTP/SAVPF ICE=remove"); t_on_reply("MANAGE_CLASSIC_REPLY"); return; } rtpengine_manage("replace-origin replace-session-connection DTLS=passive SDES-off UDP/TLS/RTP/SAVPF ICE=force"); t_on_reply("MANAGE_CLASSIC_REPLY_NO_ICE"); return; } } Reading the rtpengine and kamailio docs I see that rtpengine shows more options than kamailio rtpengine module. In rtpengine options it shows bundle option but in kamailio it doesn't appear. And I've tried to set this option but it doesn't work. Kamailio recives the invite with bundle but when it sends the invite to my asterisk the invite doesn't have the bundle option enabled Does anyone know what could be happening? Maybe I'm doing something wrong Thanks in advance for your time and help Samuel Moya Tinoco Departamento de Sistemas y Redes Móvil: (+34) 606985997 smoya(a)vivelibre.es<mailto:smoya@vivelibre.es> ViveLibre C/ La Orotava 4 28660 Boadilla del Monte Madrid www.vivelibre.es<http://www.vivelibre.es/> [cid:image001.png@01DC49C0.02D76010] Soluciones inteligentes para la autonomía personal "Tanto este mensaje como todos los posibles documentos adjuntos al mismo son confidenciales y están dirigidos exclusivamente a los destinatarios de los mismos. Por favor, si Usted no es uno de dichos destinatarios, notifíquenos este hecho y elimine el mensaje de su sistema. Queda prohibida la copia, difusión o revelación de su contenido a terceros sin el previo consentimiento por escrito de VIVELIBRE AUTONOMÍA PERSONAL S.L.U. (VIVELIBRE). En caso contrario, vulnerará la legislación vigente. De conformidad con lo establecido en el Reglamento (UE) 2016/679, General de Protección de Datos, le informamos de que sus datos son objeto de tratamiento por VIVELIBRE, en calidad de Responsable del Tratamiento. VIVELIBRE tratará sus datos con la finalidad de mantener la relación contractual, gestionar su solicitud, así como remitirle comunicaciones de carácter comercial relacionadas con su ámbito de actividad y los servicios prestados. Si desea ejercitar sus derechos de acceso, rectificación, supresión, limitación, oposición o portabilidad, puede dirigirse a la dirección postal Calle de la Orotava 4, 28660, Boadilla del Monte, (Madrid) o a la dirección de correo electrónico protecciondedatos(a)vivelibre.es. Para obtener más información sobre cómo tratamos sus datos, consulta nuestra Política de Privacidad en Política de Privacidad - Vivelibre."

2 2

How to get count of contacts/branches after t_next_contacts()
by Benoît Panizzon 31 Oct '25

31 Oct '25

Hi Gang I use: lookup_to_dset(), t_load_contacts(), t_next_contacts() to gather contacts for parallel forking (like for a hunt group). After that I use $cnt($xavp(tm_contacts)) to find the number of branches which would be created. But $cnt($xavp(tm_contacts)) seems to always be 1 no matter how many branches I get in route(RELAY). What am I doing wrong? Is there another PV I could use? Background: When a 100rel is supported by the originating device, the destination devices might all reply 180 RINGING with 100required, same rseq but different ToTags. The originating device would require to reply PRACK to each of those ringing and it looks like MANY originating devices (especially commercial SBC) do NOT consider the ToTag but ignore any subsequent 180 RINGING with same CallID and rseq causing such forked calls fail. So if I have > 1 branches, I would like to exclude_hf_value("Allow", "PRACK"); exclude_hf_value("Supported", "100rel"); -- Mit freundlichen Grüssen -Benoît Panizzon- @ HomeOffice und normal erreichbar -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

2 2

how to add users without db_mysql
by disa_369＠msn.com 31 Oct '25

31 Oct '25

Hello everyone. Is there a way to add users (sip) to kamailio without db_mysql? Thank you

2 1

dynamic selection of authentication algorithm
by Juha Heinanen 28 Oct '25

28 Oct '25

How about this new function that sets the algorithm? -- Juha iff --git a/src/modules/auth/auth_mod.c b/src/modules/auth/auth_mod.c index 534ad9e20f..4e3a584d22 100644 --- a/src/modules/auth/auth_mod.c +++ b/src/modules/auth/auth_mod.c @@ -74,6 +74,10 @@ int w_consume_credentials(struct sip_msg *msg, char *s1, char *s2); * Check for credentials with given realm */ int w_has_credentials(struct sip_msg *msg, char *s1, char *s2); +/* + * Set authentication algorithm + */ +int w_auth_algorithm(struct sip_msg *msg, char *alg, char* s2); static int pv_proxy_authenticate( struct sip_msg *msg, char *realm, char *passwd, char *flags); @@ -170,6 +174,8 @@ static cmd_export_t cmds[] = { REQUEST_ROUTE}, {"pv_auth_check", (cmd_function)w_pv_auth_check, 4, fixup_pv_auth_check, 0, REQUEST_ROUTE}, + {"auth_algorithm", w_auth_algorithm, 1, fixup_spve_null, 0, + REQUEST_ROUTE}, {"bind_auth_s", (cmd_function)bind_auth_s, 0, 0, 0}, {0, 0, 0, 0, 0, 0} @@ -475,6 +481,35 @@ int w_has_credentials(sip_msg_t *msg, char *realm, char *s2) return -1; } return ki_has_credentials(msg, &srealm); + +} +/** + * + */ +int w_auth_algorithm(sip_msg_t *msg, char* alg, char* s2) +{ + if (fixup_get_svalue(msg, (gparam_t*)alg, &auth_algorithm) < 0) { + LM_ERR("failed to get algorithm value\n"); + return -1; + } + + if (strcmp(auth_algorithm.s, "MD5") == 0) { + hash_hex_len = HASHHEXLEN; + calc_HA1 = calc_HA1_md5; + calc_response = calc_response_md5; + } + else if (strcmp(auth_algorithm.s, "SHA-256") == 0) { + hash_hex_len = HASHHEXLEN_SHA256; + calc_HA1 = calc_HA1_sha256; + calc_response = calc_response_sha256; + } + else { + LM_ERR("Invalid algorithm provided." + " Possible values are \"\", \"MD5\" or \"SHA-256\"\n"); + return -1; + } + + return 1; } #ifdef USE_NC

5 13

Kamailio WebSocket configuration error
by tjgcourage11 28 Oct '25

28 Oct '25

Hi, could you please help me check this issue? Or provide tutorial links for WebSocket installation and configuration. Requirement: Support WebSocket signaling Configuration in Kamailio.cfg as follows: [Please paste your specific configuration here] 3. I keep getting the following syntax error in my Kamailio configuration: 4. We suspect it might be because WebSocket is not supported during compilation and installation. 5. Additional information: The websocket.so file exists in /usr/local/lib64/kamailio/modules/, along with other dependencies like xhttp, etc. Best regards, Kamailio User

5 5

Whitelisting and Blacklisting IPs Without Using a Database
by Fernando Lopes 25 Oct '25

25 Oct '25

Hello everyone, I have a question: is there a way to whitelist and blacklist IP addresses without using a database table? I’m currently using the permissions module to block some traffic, but I’d also like to ban specific IPs. Ideally, I’d prefer not to use a database — I’d rather use a file-based approach, something like a permissions.allow file. Thank you.

6 5

Info: Updates to Kamailio management group
by Daniel-Constantin Mierla 15 Oct '25

15 Oct '25

Hello, Juha Heinanen has decided to retire from the Kamailio management group, being now replaced by Federico Cabiddu: - https://www.kamailio.org/w/management/ Juha is one of the very early contributors to the SER/Kamailio project, his activity going back to 2002, only a few months after the project has been released open source -- tracking based on git commits: commit 1d98277a960161528cf01844e9eec75a9910ee75 Author: Jan Janak <jan(a)iptel.org> Date: Sun Dec 8 00:11:50 2002 +0000 get_from macro contributed by Juha Heinanen Directly committing not long after, on: commit dcd0a103ea8ae8c08ad0e59ec90d241a657e14f8 Author: Juha Heinanen <jh(a)tutpro.com> Date: Sun Jan 19 13:59:51 2003 +0000 Used get_parsed_from_body for From header access LCR, Enum, Radius modules, to name a few, are among those mainly authored by Juha. We are very grateful for all his contributions to the project so far, as developer and all the other roles! Federico is a long term contributor as well, with modules such as http_async_client and tsilo mainly authored by him, with many commits to other components of Kamailio. He presented about Kamailio at events like FOSDEM or Kamailio World, being a frequent participant to Kamailio Development Meetings as well. Cheers, Daniel PS: A quick reminder that the next Kamailio Development Meeting in scheduled to happen in less than two months: https://www.kamailio.org/w/developers-meeting/) -- Daniel-Constantin Mierla (@ asipto.com) twitter.com/miconda -- linkedin.com/in/miconda Kamailio Consultancy, Training and Development Services -- asipto.com

2 1

Help with lookup() and save() for WebRTC traffic (dynamic instance ID issue)
by Fernando Lopes 15 Oct '25

15 Oct '25

Hello Everyone, I'm having an issue with lookup() and save() when handling WebRTC traffic. I need to send the SIP response back to my client, but this client uses an instance ID that isn’t fixed — it changes between browsers and sessions. I’ve been trying to save the location using a custom URI, like this: xlog("L_INFO", "Instance ID: $fn\n"); save("location", "0x00", "sip:$fn@accelerat.net"); and for lookup I’m using a simple: lookup("location"); but get this error: lookup failed: Location lookup failed for user: 894aa72f-d7a3-437b-ac20-62b3943f7b5e I’ve checked the module docs here but I’m still unclear on how the lookup process works internally or what’s missing in my configuration.: https://kamailio.org/docs/modules/4.2.x/modules/registrar.html#registrar.f.… Here are my my logs: INFO: <script>: Instance ID: "bad2be9e-d9ff-41a8-8a19-5010acceb09d" kamcmd ul.dump { Domains: { Domain: { Domain: location Size: 1024 AoRs: { Info: { AoR: "894aa72f-d7a3-437b-ac20-62b3943f7b5e" HashID: -680662917 Contacts: { Contact: { Address: sip:894aa72f-d7a3-437b-ac20-62b3943f7b5e@kfea73lbnajh.invalid Expires: 480 Q: -1 Call-ID: fkjjsrvt84dkc6a33dsb CSeq: 4 User-Agent: n/a Received: sip:172.31.208.1:64941;transport=ws Path: [not set] State: CS_NEW Flags: 0 CFlags: 0 Socket: udp:10.5.0.8:5060 Methods: -1 Ruid: uloc-68ed19b3-31-1 Instance: [not set] Reg-Id: 0 Server-Id: 0 Tcpconn-Id: -1 Keepalive: 0 Last-Keepalive: 1760369199 KA-Roundtrip: 0 Last-Modified: 1760369199 } } } Stats: { Records: 2 Max-Slots: 1 } } } } Any ideas on how to make lookup() find the right record or how to properly handle this dynamic instance ID scenario for WebRTC clients? Thank you.

2 2

out of dialog requests
by Robert Boardman 15 Oct '25

15 Oct '25

Hi, I'm trying to send a refer from a rtpengine dtmf event, its mostly working but the uac_req_send always seems to append new tags for the from /to even though I specify the origionals in the . The far end uses the tags and the callid to match the dialogs so these need to be in the refer. Example # REFER to callee xlog("L_INFO", "Sending REFER using from uri $var(to_uri)\n"); $uac_req(method)="REFER"; $uac_req(ruri)="sip:"+$var(to_uriU)+"@"+$var(SourceIP); $uac_req(furi)=$var(from_uri)+";tag="+$var(fromTAG); $uac_req(turi)=$var(to_uri)+";tag="+$var(toTAG); $uac_req(callid)=$var(callid); $uac_req(hdrs)="Refer-To:" + $var(conf_uri2) + "\r\nReferred-By: " + $var(to_uri) + "\r\nContent-Length: 0\r\n\r\n"; uac_req_send(); Is this possible? Thanks for your help Regards Rob Robert Boardman Solution Architect Tel: 03330147908 Email: Robert.Boardman(a)gamma.co.uk This is an email from Gamma Telecom Ltd, trading as “Gamma”. The contents of this email are confidential to the ordinary user of the email address to which it was addressed. This email is not intended to create any legal relationship. No one else may place any reliance upon it, or copy or forward all or any of it in any form (unless otherwise notified). If you receive this email in error, please accept our apologies, we would be obliged if you would telephone our postmaster on +44 (0) 808 178 9652 or email postmaster(a)gamma.co.uk Gamma Telecom Limited, a company incorporated in England and Wales, with limited liability, with registered number 04340834, and whose registered office is at The Scalpel, 18th Floor, 52 Lime Street, London EC3M 7AF and whose principal place of business is at Kings House, Kings Road West, Newbury, Berkshire, RG14 5BY.

4 6

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users October 2025