sr-users October 2025

sr-users@lists.kamailio.org

34 participants
23 discussions

topoh breaks SIPS with PJSIP if PJMEDIA_SRTP_MANDATORY is set
by Mathias Schneuwly 01 Dec '25

01 Dec '25

Hi I have a question related to topoh. We are running Kamailio in version 6.0.2 with topoh enabled. The PJSIP based softphone is unable to establish a call with SIPS and SRTP if we use "PJMEDIA_SRTP_MANDATORY" in PJSIP. PJSIP complains about "Secure dialog requires SIPS scheme in Contact and Record-Route headers, ending the session". The other side is sending "Contact: <sips:620150@10.165.44.117:59686;transport=tls>", but topoh modifies the contact header to "Contact: <sip:127.0.0.8;line=sr-avdFaQDvhUxGrqtxhqxThq-ZnUy6nUzGrQDZmqa1rUf6a0JTaLt4aoyV2EGQ>" without sips scheme and without transport=tls. PJSIP then refuses to establish the call and sends immediately a BYE. If topoh is disabled, the call is successfully established. Is it somehow possible to tell topoh to keep the scheme or transport=tls if the other side provided it? Thanks for your help Best regards Mathias

3 3

Kamailio Developers Meeting, Dec 8-9, 2025, in Dusseldorf
by Daniel-Constantin Mierla 24 Nov '25

24 Nov '25

Hello, Kamailio SIP Server project is organizing another meeting of its developers and community members during December 8-9, 2025 (Mon-Tue), hosted again by sipgate.de in Dusseldorf, Germany. The event is intended to facilitate the interaction between Kamailio developers and contributors in order to offer a convenient environment for working together on several topics of high interest for the project, including writing code for Kamailio and its tools, improving documentation, or discuss about future development. Everyone from the community is welcome to join, developer or user interested in helping the project. Please note we have a limited capacity of seats in the meeting room, the main policy for accepting participants being first come first server. Also, very important to be aware that this is not an event to learn how to use Kamailio. More details about the event, the venue, how to register, are available at: * https://www.kamailio.org/w/developers-meeting/ Looking forward to those two intensive hacking Kamailio days in Dusseldorf! Cheers, Daniel -- Daniel-Constantin Mierla (@ asipto.com) twitter.com/miconda -- linkedin.com/in/miconda Kamailio Consultancy, Training and Development Services -- asipto.com

1 1

RTPEngine installation on RHEL 8.x or Rocky Linux 8.x
by Chandramouli P 21 Nov '25

21 Nov '25

Hello, I tried a lot to install RTPEngine on RHEL 8.x and as well as in Rocky Linux 8.x also using different sources. But, I am facing a lot of issues like libraries issues, dependencies issues, conflict issues etc. Anyone successfully installed RTPEngine on RHEL 8.x or Rocky Linux 8.x (Not on CentOS)? If so, could you please share the documentation step-by-step or web URL? Thanks in advance. Best regards, Chandramouli.

5 18

Unable to start Kamailio with TLS configuration
by Chandramouli P 21 Nov '25

21 Nov '25

Hello, Please find my server environment below: Operating System: RockyLinux 8.x and RHEL 8.x Kamailio version: 6.0.2 IP address: 10.122.0.4 I have generated SSL certificates using OpenSSL. After configuring Kamailio, I am unable to start Kamailio. Please find the steps that I used to generate certificates along with configuration at the below link: *https://pastebin.com/Veu8z9Pr <https://pastebin.com/Veu8z9Pr>* Any help would be appreciated and thanks in advance. Best Regards, Chandramouli.

3 11

seting sdp bundle with rtpengine
by Samuel Moya Tinoco 02 Nov '25

02 Nov '25

Hi everyone, I want to configure my kamailio+rtpengine to use the option bundle in SDP. I have a dedicated route to configure the specific rtpengine_manage options for each case (it's based on a route I saw in github) route[SETUP_BY_TRANSPORT] { if ($ru =~ "transport=ws") { xlog("L_INFO", "Request going to WS"); if(sdp_with_transport("RTP/SAVPF")) { rtpengine_manage("replace-origin replace-session-connection DTLS=passive SDES-off ICE=force SRTP AVPF rtcp-mux-reject bundle=accept"); t_on_reply("REPLY_WS_TO_WS"); return; } rtpengine_manage("replace-origin replace-session-connection DTLS=passive SDES-off ICE=force UDP/TLS/RTP/SAVPF bundle=accept bundle=accept"); t_on_reply("REPLY_FROM_WS"); } else if ($proto =~ "ws") { xlog("L_INFO", "Request coming from WS"); rtpengine_manage("replace-origin replace-session-connection DTLS SDES-off ICE=force SRTP AVPF bundle=accept"); t_on_reply("REPLY_TO_WS"); } else { xlog("L_INFO", "This is a classic phone call"); if (isflagset(RTPENGINE_NO_SRTP)){ xlog("L_INFO", "Llamada de Telealarm a la IPS (no srtp)"); rtpengine_manage("replace-origin replace-session-connection DTLS=off SDES-off RTP/AVP"); t_on_reply("REPLY_NO_SRTP"); return; } if ($tU=~"^ips") { rtpengine_manage("replace-origin replace-session-connection DTLS=passive SDES-off UDP/TLS/RTP/SAVPF"); t_on_reply("REPLY_NO_SRTP_ICE"); return; } if (isflagset(RTPENGINE_NO_ICE)) { rtpengine_manage("replace-origin replace-session-connection DTLS=passive SDES-off UDP/TLS/RTP/SAVPF ICE=remove"); t_on_reply("MANAGE_CLASSIC_REPLY"); return; } rtpengine_manage("replace-origin replace-session-connection DTLS=passive SDES-off UDP/TLS/RTP/SAVPF ICE=force"); t_on_reply("MANAGE_CLASSIC_REPLY_NO_ICE"); return; } } Reading the rtpengine and kamailio docs I see that rtpengine shows more options than kamailio rtpengine module. In rtpengine options it shows bundle option but in kamailio it doesn't appear. And I've tried to set this option but it doesn't work. Kamailio recives the invite with bundle but when it sends the invite to my asterisk the invite doesn't have the bundle option enabled Does anyone know what could be happening? Maybe I'm doing something wrong Thanks in advance for your time and help Samuel Moya Tinoco Departamento de Sistemas y Redes Móvil: (+34) 606985997 smoya(a)vivelibre.es<mailto:smoya@vivelibre.es> ViveLibre C/ La Orotava 4 28660 Boadilla del Monte Madrid www.vivelibre.es<http://www.vivelibre.es/> [cid:image001.png@01DC49C0.02D76010] Soluciones inteligentes para la autonomía personal "Tanto este mensaje como todos los posibles documentos adjuntos al mismo son confidenciales y están dirigidos exclusivamente a los destinatarios de los mismos. Por favor, si Usted no es uno de dichos destinatarios, notifíquenos este hecho y elimine el mensaje de su sistema. Queda prohibida la copia, difusión o revelación de su contenido a terceros sin el previo consentimiento por escrito de VIVELIBRE AUTONOMÍA PERSONAL S.L.U. (VIVELIBRE). En caso contrario, vulnerará la legislación vigente. De conformidad con lo establecido en el Reglamento (UE) 2016/679, General de Protección de Datos, le informamos de que sus datos son objeto de tratamiento por VIVELIBRE, en calidad de Responsable del Tratamiento. VIVELIBRE tratará sus datos con la finalidad de mantener la relación contractual, gestionar su solicitud, así como remitirle comunicaciones de carácter comercial relacionadas con su ámbito de actividad y los servicios prestados. Si desea ejercitar sus derechos de acceso, rectificación, supresión, limitación, oposición o portabilidad, puede dirigirse a la dirección postal Calle de la Orotava 4, 28660, Boadilla del Monte, (Madrid) o a la dirección de correo electrónico protecciondedatos(a)vivelibre.es. Para obtener más información sobre cómo tratamos sus datos, consulta nuestra Política de Privacidad en Política de Privacidad - Vivelibre."

2 2

How to get count of contacts/branches after t_next_contacts()
by Benoît Panizzon 31 Oct '25

31 Oct '25

Hi Gang I use: lookup_to_dset(), t_load_contacts(), t_next_contacts() to gather contacts for parallel forking (like for a hunt group). After that I use $cnt($xavp(tm_contacts)) to find the number of branches which would be created. But $cnt($xavp(tm_contacts)) seems to always be 1 no matter how many branches I get in route(RELAY). What am I doing wrong? Is there another PV I could use? Background: When a 100rel is supported by the originating device, the destination devices might all reply 180 RINGING with 100required, same rseq but different ToTags. The originating device would require to reply PRACK to each of those ringing and it looks like MANY originating devices (especially commercial SBC) do NOT consider the ToTag but ignore any subsequent 180 RINGING with same CallID and rseq causing such forked calls fail. So if I have > 1 branches, I would like to exclude_hf_value("Allow", "PRACK"); exclude_hf_value("Supported", "100rel"); -- Mit freundlichen Grüssen -Benoît Panizzon- @ HomeOffice und normal erreichbar -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

2 2

how to add users without db_mysql
by disa_369＠msn.com 31 Oct '25

31 Oct '25

Hello everyone. Is there a way to add users (sip) to kamailio without db_mysql? Thank you

2 1

dynamic selection of authentication algorithm
by Juha Heinanen 28 Oct '25

28 Oct '25

How about this new function that sets the algorithm? -- Juha iff --git a/src/modules/auth/auth_mod.c b/src/modules/auth/auth_mod.c index 534ad9e20f..4e3a584d22 100644 --- a/src/modules/auth/auth_mod.c +++ b/src/modules/auth/auth_mod.c @@ -74,6 +74,10 @@ int w_consume_credentials(struct sip_msg *msg, char *s1, char *s2); * Check for credentials with given realm */ int w_has_credentials(struct sip_msg *msg, char *s1, char *s2); +/* + * Set authentication algorithm + */ +int w_auth_algorithm(struct sip_msg *msg, char *alg, char* s2); static int pv_proxy_authenticate( struct sip_msg *msg, char *realm, char *passwd, char *flags); @@ -170,6 +174,8 @@ static cmd_export_t cmds[] = { REQUEST_ROUTE}, {"pv_auth_check", (cmd_function)w_pv_auth_check, 4, fixup_pv_auth_check, 0, REQUEST_ROUTE}, + {"auth_algorithm", w_auth_algorithm, 1, fixup_spve_null, 0, + REQUEST_ROUTE}, {"bind_auth_s", (cmd_function)bind_auth_s, 0, 0, 0}, {0, 0, 0, 0, 0, 0} @@ -475,6 +481,35 @@ int w_has_credentials(sip_msg_t *msg, char *realm, char *s2) return -1; } return ki_has_credentials(msg, &srealm); + +} +/** + * + */ +int w_auth_algorithm(sip_msg_t *msg, char* alg, char* s2) +{ + if (fixup_get_svalue(msg, (gparam_t*)alg, &auth_algorithm) < 0) { + LM_ERR("failed to get algorithm value\n"); + return -1; + } + + if (strcmp(auth_algorithm.s, "MD5") == 0) { + hash_hex_len = HASHHEXLEN; + calc_HA1 = calc_HA1_md5; + calc_response = calc_response_md5; + } + else if (strcmp(auth_algorithm.s, "SHA-256") == 0) { + hash_hex_len = HASHHEXLEN_SHA256; + calc_HA1 = calc_HA1_sha256; + calc_response = calc_response_sha256; + } + else { + LM_ERR("Invalid algorithm provided." + " Possible values are \"\", \"MD5\" or \"SHA-256\"\n"); + return -1; + } + + return 1; } #ifdef USE_NC

5 13

Kamailio WebSocket configuration error
by tjgcourage11 28 Oct '25

28 Oct '25

Hi, could you please help me check this issue? Or provide tutorial links for WebSocket installation and configuration. Requirement: Support WebSocket signaling Configuration in Kamailio.cfg as follows: [Please paste your specific configuration here] 3. I keep getting the following syntax error in my Kamailio configuration: 4. We suspect it might be because WebSocket is not supported during compilation and installation. 5. Additional information: The websocket.so file exists in /usr/local/lib64/kamailio/modules/, along with other dependencies like xhttp, etc. Best regards, Kamailio User

5 5

Whitelisting and Blacklisting IPs Without Using a Database
by Fernando Lopes 25 Oct '25

25 Oct '25

Hello everyone, I have a question: is there a way to whitelist and blacklist IP addresses without using a database table? I’m currently using the permissions module to block some traffic, but I’d also like to ban specific IPs. Ideally, I’d prefer not to use a database — I’d rather use a file-based approach, something like a permissions.allow file. Thank you.

6 5

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users October 2025