From miconda@gmail.com Thu May 27 20:09:24 2021 From: Daniel-Constantin Mierla To: sr-users@lists.kamailio.org Subject: Re: [SR-Users] STIR/SHAKEN tests Date: Thu, 27 May 2021 20:09:20 +0200 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============1250921974==" --===============1250921974== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit Hello, On 27.05.21 19:58, David Villasmil wrote: > Hello guys, > > I want to test secsipid, but i don't yet have the certificate. So i > thought i'd create a cert like: > > openssl req -new -newkey rsa:4096 -nodes -keyout snakeoil.key -out > snakeoil.csr > openssl x509 -req -sha256 -days 365 -in snakeoil.csr -signkey > snakeoil.key -out snakeoil.pem > > Then i'm simply doing: > > $var(rc) = secsipid_add_identity("$fU", "$rU", "A", "", > "https://somedomain.com/stir/$rd/cert.pem > ", "/etc/kamailio/snakeoil.pem"); > if ( $var(rc) ) { > xlog("L_ERR", "[STIR/SHAKEN][$ci] Shaken authentication added (SIP > Identity Header created)\n"); > } else { > xlog("L_ERR", "[STIR/SHAKEN][$ci] Failed\n"); > } > > But no matter what i do it silently fails: > > INVITE d54c2919-39b6-123a-95a7-0e29a5289b8d}