sr-users August 2025

sr-users@lists.kamailio.org

38 participants
30 discussions

topoh breaks SIPS with PJSIP if PJMEDIA_SRTP_MANDATORY is set
by Mathias Schneuwly 01 Dec '25

01 Dec '25

Hi I have a question related to topoh. We are running Kamailio in version 6.0.2 with topoh enabled. The PJSIP based softphone is unable to establish a call with SIPS and SRTP if we use "PJMEDIA_SRTP_MANDATORY" in PJSIP. PJSIP complains about "Secure dialog requires SIPS scheme in Contact and Record-Route headers, ending the session". The other side is sending "Contact: <sips:620150@10.165.44.117:59686;transport=tls>", but topoh modifies the contact header to "Contact: <sip:127.0.0.8;line=sr-avdFaQDvhUxGrqtxhqxThq-ZnUy6nUzGrQDZmqa1rUf6a0JTaLt4aoyV2EGQ>" without sips scheme and without transport=tls. PJSIP then refuses to establish the call and sends immediately a BYE. If topoh is disabled, the call is successfully established. Is it somehow possible to tell topoh to keep the scheme or transport=tls if the other side provided it? Thanks for your help Best regards Mathias

3 3

dynamic selection of authentication algorithm
by Juha Heinanen 28 Oct '25

28 Oct '25

How about this new function that sets the algorithm? -- Juha iff --git a/src/modules/auth/auth_mod.c b/src/modules/auth/auth_mod.c index 534ad9e20f..4e3a584d22 100644 --- a/src/modules/auth/auth_mod.c +++ b/src/modules/auth/auth_mod.c @@ -74,6 +74,10 @@ int w_consume_credentials(struct sip_msg *msg, char *s1, char *s2); * Check for credentials with given realm */ int w_has_credentials(struct sip_msg *msg, char *s1, char *s2); +/* + * Set authentication algorithm + */ +int w_auth_algorithm(struct sip_msg *msg, char *alg, char* s2); static int pv_proxy_authenticate( struct sip_msg *msg, char *realm, char *passwd, char *flags); @@ -170,6 +174,8 @@ static cmd_export_t cmds[] = { REQUEST_ROUTE}, {"pv_auth_check", (cmd_function)w_pv_auth_check, 4, fixup_pv_auth_check, 0, REQUEST_ROUTE}, + {"auth_algorithm", w_auth_algorithm, 1, fixup_spve_null, 0, + REQUEST_ROUTE}, {"bind_auth_s", (cmd_function)bind_auth_s, 0, 0, 0}, {0, 0, 0, 0, 0, 0} @@ -475,6 +481,35 @@ int w_has_credentials(sip_msg_t *msg, char *realm, char *s2) return -1; } return ki_has_credentials(msg, &srealm); + +} +/** + * + */ +int w_auth_algorithm(sip_msg_t *msg, char* alg, char* s2) +{ + if (fixup_get_svalue(msg, (gparam_t*)alg, &auth_algorithm) < 0) { + LM_ERR("failed to get algorithm value\n"); + return -1; + } + + if (strcmp(auth_algorithm.s, "MD5") == 0) { + hash_hex_len = HASHHEXLEN; + calc_HA1 = calc_HA1_md5; + calc_response = calc_response_md5; + } + else if (strcmp(auth_algorithm.s, "SHA-256") == 0) { + hash_hex_len = HASHHEXLEN_SHA256; + calc_HA1 = calc_HA1_sha256; + calc_response = calc_response_sha256; + } + else { + LM_ERR("Invalid algorithm provided." + " Possible values are \"\", \"MD5\" or \"SHA-256\"\n"); + return -1; + } + + return 1; } #ifdef USE_NC

5 13

SIP Trunk registration In Kamailio
by tanmoykarmakar10＠gmail.com 14 Oct '25

14 Oct '25

I want to register SIP Trunk directly in Kamailio. How can I register the SIP trunk in Kamailio. Please find the below sample SIP trunk details. Network IP 10.2.2.2 Subnet Mask 255.255.255.252 Customer IP 10.3.3.3 Gateway IP 10.1.1.1 SBCIP 10.4.4.4 Username 12345678 Password 1234 Please help me with configuration to register SIP trunk in kamailio.

4 4

Support for TLS server_name extension (aka SNI=server name indication)
by Barry Flanagan 04 Sep '25

04 Sep '25

Hi, Back in Kamailio 1.5, the release notes state: "support for TLS server_name extension (aka SNI=server name indication)" However, I cannot find any indication of this in the current TLS docs, and trying to set tls_server_name or server_name in tls.cfg fails with "unsupported option". Is this actually supported? Thanks. -Barry Flanagan

5 7

SDP Issue on NAT environment
by Nathan C 02 Sep '25

02 Sep '25

Hello, I have a kamailio on SITE A using a public IP. I'm trying to setup another kamailio on SITE B with NAT. When I try to make a call from SITE B to SITE A, the call is initiated but when comes the SDP my equipment on SITE B does not reply to SDP sent by kamailio on SITE A. I made some test and use only Public IP between the 2 sites and it works properly. So I think that I have a problem on my NAT configuration or maybe I'm missing something. Can someone help me one this problem ? Do you have an idea on what could be blocking. Thank in advance for your help. Regards, Nathan

3 6

Is a kamailio integer signed or unsigned?
by Benoit Panizzon 02 Sep '25

02 Sep '25

Hi I'm chasing an issue where I have a mysql column of type int NOT NULL In MySQL this is a signed integer. In some cases this column can be negative for example -1 I read this column with sql_xquery I end up with 18446744073709551615 That is the unsigned equivalent of 2^64-1 - so kamailio uses SIGNED int? Is there a way to change this to unsigned or to read have sql_xquery convert the value to a string? Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

2 2

[4.2] how to send out BYE successfully to close a TCP/TLS connection which misses the connection ID?
by Jack Wang 02 Sep '25

02 Sep '25

For some reasons, My settings will cause kamailio to be restarted even if there were connections connected to it. And when one SIP client in a connection wanted to hangup the call with a WebRTC Client (SIP over websocket) after the proxy-restarting, local client was closed, however , the other side was not. >From the log below it seems that the connection missed. Jan 30 18:19:31 ./kamailio[27857]: WARNING: <core> [msg_translator.c:2777]: via_builder(): TCP/TLS connection (id: 0) for WebSocket could not be found Jan 30 18:19:31 ./kamailio[27857]: ERROR: tm [t_msgbuilder.c:1365]: assemble_via(): assemble_via: via building failed Jan 30 18:19:31 ./kamailio[27857]: ERROR: tm [t_msgbuilder.c:1545]: build_uac_req(): build_uac_req(): Error while assembling Via Jan 30 18:19:31 ./kamailio[27857]: ERROR: tm [uac.c:379]: t_uac_prepare(): t_uac: Error while building message So, Is it equivalent to connection ID missing? And is there any way to make Websocket found the connection? Btw, after proxy-restarting for seconds , I typed `sh kamctl stats` : websocket:ws_current_connections = 1 It showed that the WebRTC Client will re-connect automatically, So I think this connection could be found by proxy, Any suggestion? Thanks :)

2 3

Error: ACK without matching transaction
by Fernando Lopes 29 Aug '25

29 Aug '25

Hello everyone, Quick question: I have a t_check_trans that is returning false even though the ACK should match a SIP message. Here are my logs: INVITE sip:7@172.31.217.74 SIP/2.0 Via: SIP/2.0/WSS hruuc8uql46h.invalid;branch=z9hG4bK9771396 To: <sip:7@172.31.217.74> From: "916c67e8-652f-49ea-b288-2bbbee8dbf21" <sip:User1@172.31.217.74>;tag=cv63sqfvns CSeq: 2 INVITE Call-ID: pr0ndrr8fd14vekv6k15 Max-Forwards: 70 Authorization: Digest algorithm=MD5, username="User1", realm="XXXXXX", nonce="1756247832/9dfac95b19496304d744138c5789346f", uri="sip:7@172.31.217.74", response="8abe90b7e0971cc52ce0a2c6988e0656", opaque="370804d3544dc2aa", qop=auth, cnonce="im9losvhkh93", nc=00000001 Contact: <sip:916c67e8-652f-49ea-b288-2bbbee8dbf21@hruuc8uql46h.invalid;transport=ws;ob> Allow: ACK,CANCEL,INVITE,MESSAGE,BYE,OPTIONS,INFO,NOTIFY,REFER Supported: outbound User-Agent: SIP.js/0.21.1 Content-Type: application/sdp Content-Length: 2545 ACK sip:10.5.0.2:5060 SIP/2.0 Via: SIP/2.0/WSS hruuc8uql46h.invalid;branch=z9hG4bK6675132 To: <sip:7@172.31.217.74>;tag=b51c9e70-e71d-4a52-a8a3-07673119e625 From: "916c67e8-652f-49ea-b288-2bbbee8dbf21" <sip:User1@172.31.217.74>;tag=cv63sqfvns CSeq: 2 ACK Call-ID: pr0ndrr8fd14vekv6k15 Max-Forwards: 70 Supported: outbound User-Agent: SIP.js/0.21.1 Content-Length: 0 Thank you.

4 5

Guidance on installing Kamailio 5.2.x with specific modules
by Arthur Quinot 29 Aug '25

29 Aug '25

Hello Kamailio Team, I am working on a project that has a specific requirement to use Kamailio version 5.2.x. I understand that this is an older and unsupported version, but due to external constraints, upgrading to a newer version is not feasible at this moment. My goal is to install Kamailio 5.2.x and use it with the following modules: kamailio-extra-modules kamailio-json-modules kamailio-lua-modules kamailio-postgres-modules kamailio-redis-modules kamailio-systemd-modules I have been looking through the documentation and installation guides for version 5.2.x. However, I would greatly appreciate some guidance from the community on the best approach to achieve this specific setup. Could you please advise on the recommended installation method (from source or packages, if still available) to ensure compatibility between the Kamailio 5.2.x core and these modules? Specifically, I would like to know: Is it still possible to install Kamailio 5.2.x with this set of modules using a package manager on a specific Linux distribution (e.g., Debian 12)? If compiling from source is the recommended path, are there any known compatibility issues or patches required to build this version with the specified modules? Are there any other potential challenges or important considerations I should be aware of when working with this older version? Any advice or pointers to relevant documentation would be extremely helpful. I appreciate your understanding and support. Thank you! [image: Foto] Arthur Quinot Solvefy/Cloud [image: Email Icon] arthur(a)solvefy.cloud [image: Site Icon] solvefy.cloud

2 2

How can the 200 OK response to a CANCEL request be modified in Kamailio?
by Olivier Thomas 29 Aug '25

29 Aug '25

Hello everyone ! I am trying to modify the "200 OK canceling" response that is locally generated by Kamailio when handling a CANCEL request. So far, I haven’t found a way to do this. Specifically, I would like to change the host part of the From and To headers in that response. Is there a way to perform such a modification? Thanks a lot, Regards, Olivier

2 2

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users August 2025