From david.villasmil.work@gmail.com Mon May 31 17:35:50 2021
From: David Villasmil <david.villasmil.work@gmail.com>
To: sr-users@lists.kamailio.org
Subject: Re: [SR-Users] STIR/SHAKEN tests
Date: Mon, 31 May 2021 16:35:30 +0100
Message-ID:
 <CAFGRPVq871yfndHaQn6Ejq7P0T0VkYokg+nHvwjoji9LJPvcaQ@mail.gmail.com>
In-Reply-To:
 <CAFGRPVpZ9Zj=DK1sdpmnosveZScRy-qG2h0YGFy_P-ivyyU8Ow@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1260276522=="

--===============1260276522==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Yep, It's working with 1.16.4
So the problem was with the pem ownership.
It's a pity secsipid.so doesn't return an access denied error.

CLI doesn return an error:

error: Unable to read private key file: open
/etc/kamailio/ec256-private.pem: permission denied

Regards,

David Villasmil
email: david.villasmil.work(a)gmail.com
phone: +34669448337


On Mon, May 31, 2021 at 4:26 PM David Villasmil <
david.villasmil.work(a)gmail.com> wrote:

> Daniel,
>
> Ok, i downloaded and installed 1.11.6 just like yours and recompiled, etc.
> I also changed the owner of the pem file, which was owned by root, and not
> by the user kamailio.
>
> Now it's working.
>
> d9655} <script>: [STIR/SHAKEN][157428d2-3cc7-123a-eaad-122eaa5d9655]
> secsipid_add_identity('493044448888', '493055559999', 'A', '', '
> http://asipto.lab/stir/cert.pem', '/etc/kamailio/ec256-private.pem')
> May 31 15:24:08 ip-10-231-32-237 /usr/local/kamailio5/sbin/kamailio[1920]:
> DEBUG: {1 36683532 INVITE 157428d2-3cc7-123a-eaad-122eaa5d9655} secsipid
> [secsipid_mod.c:333]: ki_secsipid_add_identity(): appending identity:
> eyJhbGciOiJFUzI1NiIsInBwdCI6InNoYWtlbiIsInR5cCI6InBhc3Nwb3J0IiwieDV1IjoiaHR=
0cDovL2FzaXB0by5sYWIvc3Rpci9jZXJ0LnBlbSJ9.eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI=
6WyI0OTMwNTU1NTk5OTkiXX0sImlhdCI6MTYyMjQ3NDY0OCwib3JpZyI6eyJ0biI6IjQ5MzA0NDQ0=
ODg4OCJ9LCJvcmlnaWQiOiI0YWU3NGE3My01N2Q3LTQzZWMtYjMyOS00NDdiMDg4OWVkYmMifQ.Ay=
xAeNFuthcpJld8osJBj9QVxBnwK91zeo0tEusXrMNNrG2aW8N9Az255qf3UlOIDtm1MmQI_y3-Gz6=
u57OCQA;info=3D<
> http://asipto.lab/stir/cert.pem>;alg=3DES256;ppt=3Dshaken
>
> But now i=C2=A1m left wondering whether it was the ownership of the file or=
 the
> version.
>
> So i will install again the latest and see what happens.
>
>
> Regards,
>
> David Villasmil
> email: david.villasmil.work(a)gmail.com
> phone: +34669448337
>
>
> On Mon, May 31, 2021 at 2:19 PM David Villasmil <
> david.villasmil.work(a)gmail.com> wrote:
>
>> Hello Daniel,
>>
>> Thanks for looking into this:
>>
>> # go version
>> go version go1.16.4 linux/amd64
>>
>> # openssl version
>> OpenSSL 1.1.1d  10 Sep 2019
>> root(a)sip-stir1:/home/admin#
>> i can try getting the same go version and see what happens.
>>
>> Regards,
>>
>> David Villasmil
>> email: david.villasmil.work(a)gmail.com
>> phone: +34669448337
>>
>>
>> On Mon, May 31, 2021 at 2:15 PM Daniel-Constantin Mierla <
>> miconda(a)gmail.com> wrote:
>>
>>> Hello,
>>>
>>> what are your operating system, golang and openssl versions?
>>>
>>> I tried on Debian stable and I get the Identity header, see next:
>>>
>>> OPTIONS sip:alice(a)127.0.0.1 SIP/2.0
>>> Via: SIP/2.0/UDP
>>> 127.0.0.1;branch=3Dz9hG4bK8eba.da1d50fc272715b1f6dfcd665d319b32.0
>>> Via: SIP/2.0/UDP 127.0.1.1:52897
>>> ;received=3D127.0.0.1;branch=3Dz9hG4bK.2d35a346;rport=3D56013;alias
>>> From: sip:sipsak(a)127.0.1.1:52897;tag=3D219ec22d
>>> To: sip:alice(a)127.0.0.1
>>> Call-ID: 564052525(a)127.0.1.1
>>> CSeq: 1 OPTIONS
>>> Contact: sip:sipsak(a)127.0.1.1:52897
>>> Content-Length: 0
>>> Max-Forwards: 69
>>> User-Agent: sipsak 0.9.7pre
>>> Accept: text/plain
>>> Identity:
>>> eyJhbGciOiJFUzI1NiIsInBwdCI6InNoYWtlbiIsInR5cCI6InBhc3Nwb3J0IiwieDV1Ijoia=
HR0cHM6Ly9hc2lwdG8ubGFiL3N0aXIvY2VydC5wZW0ifQ.eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ=
0biI6WyI0OTMwNTU1NTk5OTkiXX0sImlhdCI6MTYyMjQ2NjUyNSwib3JpZyI6eyJ0biI6IjQ5MzA0=
NDQ0ODg4OCJ9LCJvcmlnaWQiOiJlOWI3Nzc1OC03ZmI3LTQ1ZWQtYWMwOS02MDlmOTM3NjFiOWQif=
Q.fnLenxEUk5qyKvY2xChbAPS-kvjiRmu8jKqEzlywFt0RnpDAK-ErUBjbR78aRjt66fJIFEdQ_dX=
vV-qRoxkWzA;info=3D
>>> <https://asipto.lab/stir/cert.pem> <https://asipto.lab/stir/cert.pem>
>>> ;alg=3DES256;ppt=3Dshaken
>>>
>>> The OPTIONS was generated with: sipsak -s sip:alice(a)127.0.0.1
>>>
>>> In kamaili.cfg I have:
>>>
>>>    if(is_method("OPTIONS|INVITE")) {
>>>           secsipid_add_identity("493044448888", "493055559999", "A", "",
>>>                   "https://asipto.lab/stir/cert.pem"
>>> <https://asipto.lab/stir/cert.pem>,
>>>                   "/tmp/ec256-private.pem");
>>>
>>> Versions:
>>>
>>> $ go version
>>> go version go1.11.6 linux/amd64
>>>
>>> $ openssl version
>>> OpenSSL 1.1.1d  10 Sep 2019
>>>
>>> Cheers,
>>> Daniel
>>> On 28.05.21 13:05, Daniel-Constantin Mierla wrote:
>>>
>>> I will try to reproduce when I get the first chance these days, maybe I
>>> broke something while I worked to propagate different return codes for
>>> error cases.
>>>
>>> One more question for now: are you using the latest libsecsipid, build
>>> from the master/main branch of the secsipidx project?
>>>
>>> Cheers,
>>> Daniel
>>> On 28.05.21 10:27, David Villasmil wrote:
>>>
>>> Correct.
>>> That=E2=80=99s a log with debug 3, absolutely nothing is coming out. :(
>>>
>>>
>>>
>>> On Thu, 27 May 2021 at 20:54, Daniel-Constantin Mierla <
>>> miconda(a)gmail.com> wrote:
>>>
>>>> Same logs like with before with previous certificate? Can you attach
>>>> log messages with debug=3D3?
>>>>
>>>> Cheers,
>>>> Daniel
>>>> On 27.05.21 20:13, David Villasmil wrote:
>>>>
>>>> Yep i just tried that :)
>>>>
>>>> I don't get an error on the CLI:
>>>>
>>>> # secsipidx -sign-full -orig-tn 493044448888 -dest-tn 493055559999
>>>> -attest A -x5u http://asipto.lab/stir/cert.pem -k ec256-private.pem
>>>>
>>>> eyJhbGciOiJFUzI1NiIsInBwdCI6InNoYWtlbiIsInR5cCI6InBhc3Nwb3J0IiwieDV1Ijoi=
aHR0cDovL2FzaXB0by5sYWIvc3Rpci9jZXJ0LnBlbSJ9.eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0=
biI6WyI0OTMwNTU1NTk5OTkiXX0sImlhdCI6MTYyMjEzOTE1Nywib3JpZyI6eyJ0biI6IjQ5MzA0N=
DQ0ODg4OCJ9LCJvcmlnaWQiOiIxOWE5OWY2ZS1mZWE5LTQyYmEtYmU2ZC1lNDZkNjZkMGIzNjcifQ=
.64Z_uNPA5frA20nqurHxOD8qLtuvcGeMxmx0ZhBmSWFoeEU53nHSmEWOsAJC5eiJLuIWfVI9HFhJ=
IKyK6PMrcA;info=3D<
>>>> http://asipto.lab/stir/cert.pem>;alg=3DES256;ppt=3Dshaken
>>>>
>>>> But still failing in kamailio...
>>>>
>>>> Regards,
>>>>
>>>> David Villasmil
>>>> email: david.villasmil.work(a)gmail.com
>>>> phone: +34669448337
>>>>
>>>>
>>>> On Thu, May 27, 2021 at 7:09 PM Daniel-Constantin Mierla <
>>>> miconda(a)gmail.com> wrote:
>>>>
>>>>> Hello,
>>>>> On 27.05.21 19:58, David Villasmil wrote:
>>>>>
>>>>> Hello guys,
>>>>>
>>>>> I want to test secsipid, but i don't yet have the certificate. So i
>>>>> thought i'd create a cert like:
>>>>>
>>>>> openssl req -new -newkey rsa:4096 -nodes -keyout snakeoil.key -out
>>>>> snakeoil.csr
>>>>> openssl x509 -req -sha256 -days 365 -in snakeoil.csr -signkey
>>>>> snakeoil.key -out snakeoil.pem
>>>>>
>>>>> Then i'm simply doing:
>>>>>
>>>>> $var(rc) =3D secsipid_add_identity("$fU", "$rU", "A", "", "
>>>>> https://somedomain.com/stir/$rd/cert.pem
>>>>> <https://kamailio.org/stir/$rd/cert.pem>",
>>>>> "/etc/kamailio/snakeoil.pem");
>>>>> if ( $var(rc) ) {
>>>>>     xlog("L_ERR", "[STIR/SHAKEN][$ci] Shaken authentication added (SIP
>>>>> Identity Header created)\n");
>>>>> } else {
>>>>>     xlog("L_ERR", "[STIR/SHAKEN][$ci] Failed\n");
>>>>> }
>>>>>
>>>>> But no matter what i do it silently fails:
>>>>>
>>>>> INVITE d54c2919-39b6-123a-95a7-0e29a5289b8d} <script>:
>>>>> [STIR/SHAKEN][d54c2919-39b6-123a-95a7-0e29a5289b8d] Failed
>>>>>
>>>>> I have debug on 6, but i don't get more info regarding the error.
>>>>>
>>>>> Any ideas?
>>>>>
>>>>> based on the specs, it should not be the usual ssl/tls certificate,
>>>>> try to generate them using the guidelines at:
>>>>>
>>>>>   * https://github.com/asipto/secsipidx#keys-generation
>>>>>
>>>>> Cheers,
>>>>> Daniel
>>>>>
>>>>> --
>>>>> Daniel-Constantin Mierla -- www.asipto.comwww.twitter.com/miconda -- ww=
w.linkedin.com/in/miconda
>>>>> Kamailio Advanced Training - Online - June 7-10, 2021 (America Timezone)
>>>>>   * https://www.asipto.com/sw/kamailio-advanced-training-online/
>>>>>
>>>>> --
>>>> Daniel-Constantin Mierla -- www.asipto.comwww.twitter.com/miconda -- www=
.linkedin.com/in/miconda
>>>> Kamailio Advanced Training - Online - June 7-10, 2021 (America Timezone)
>>>>   * https://www.asipto.com/sw/kamailio-advanced-training-online/
>>>>
>>>> --
>>> Regards,
>>>
>>> David Villasmil
>>> email: david.villasmil.work(a)gmail.com
>>> phone: +34669448337
>>>
>>> --
>>> Daniel-Constantin Mierla -- www.asipto.comwww.twitter.com/miconda -- www.=
linkedin.com/in/miconda
>>> Kamailio Advanced Training - Online - June 7-10, 2021 (America Timezone)
>>>   * https://www.asipto.com/sw/kamailio-advanced-training-online/
>>>
>>> --
>>> Daniel-Constantin Mierla -- www.asipto.comwww.twitter.com/miconda -- www.=
linkedin.com/in/miconda
>>> Kamailio Advanced Training - Online - June 7-10, 2021 (America Timezone)
>>>   * https://www.asipto.com/sw/kamailio-advanced-training-online/
>>>
>>>



--===============1260276522==
Content-Type: text/html
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"
MIME-Version: 1.0
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--===============1260276522==--