From david.villasmil.work@gmail.com Thu May 27 20:13:17 2021
From: David Villasmil <david.villasmil.work@gmail.com>
To: sr-users@lists.kamailio.org
Subject: Re: [SR-Users] STIR/SHAKEN tests
Date: Thu, 27 May 2021 19:13:03 +0100
Message-ID:
 <CAFGRPVpPbzboWDd8Zo1q61RMLBTWkT67XJrfxEpGF6r0eS063w@mail.gmail.com>
In-Reply-To: <fe6982fd-fa11-f64a-0530-3c459a4ebd21@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0809283222=="

--===============0809283222==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Yep i just tried that :)

I don't get an error on the CLI:

# secsipidx -sign-full -orig-tn 493044448888 -dest-tn 493055559999 -attest
A -x5u http://asipto.lab/stir/cert.pem -k ec256-private.pem
eyJhbGciOiJFUzI1NiIsInBwdCI6InNoYWtlbiIsInR5cCI6InBhc3Nwb3J0IiwieDV1IjoiaHR0c=
DovL2FzaXB0by5sYWIvc3Rpci9jZXJ0LnBlbSJ9.eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6W=
yI0OTMwNTU1NTk5OTkiXX0sImlhdCI6MTYyMjEzOTE1Nywib3JpZyI6eyJ0biI6IjQ5MzA0NDQ0OD=
g4OCJ9LCJvcmlnaWQiOiIxOWE5OWY2ZS1mZWE5LTQyYmEtYmU2ZC1lNDZkNjZkMGIzNjcifQ.64Z_=
uNPA5frA20nqurHxOD8qLtuvcGeMxmx0ZhBmSWFoeEU53nHSmEWOsAJC5eiJLuIWfVI9HFhJIKyK6=
PMrcA;info=3D<
http://asipto.lab/stir/cert.pem>;alg=3DES256;ppt=3Dshaken

But still failing in kamailio...

Regards,

David Villasmil
email: david.villasmil.work(a)gmail.com
phone: +34669448337


On Thu, May 27, 2021 at 7:09 PM Daniel-Constantin Mierla <miconda(a)gmail.com>
wrote:

> Hello,
> On 27.05.21 19:58, David Villasmil wrote:
>
> Hello guys,
>
> I want to test secsipid, but i don't yet have the certificate. So i
> thought i'd create a cert like:
>
> openssl req -new -newkey rsa:4096 -nodes -keyout snakeoil.key -out
> snakeoil.csr
> openssl x509 -req -sha256 -days 365 -in snakeoil.csr -signkey snakeoil.key
> -out snakeoil.pem
>
> Then i'm simply doing:
>
> $var(rc) =3D secsipid_add_identity("$fU", "$rU", "A", "", "
> https://somedomain.com/stir/$rd/cert.pem
> <https://kamailio.org/stir/$rd/cert.pem>", "/etc/kamailio/snakeoil.pem");
> if ( $var(rc) ) {
>     xlog("L_ERR", "[STIR/SHAKEN][$ci] Shaken authentication added (SIP
> Identity Header created)\n");
> } else {
>     xlog("L_ERR", "[STIR/SHAKEN][$ci] Failed\n");
> }
>
> But no matter what i do it silently fails:
>
> INVITE d54c2919-39b6-123a-95a7-0e29a5289b8d} <script>:
> [STIR/SHAKEN][d54c2919-39b6-123a-95a7-0e29a5289b8d] Failed
>
> I have debug on 6, but i don't get more info regarding the error.
>
> Any ideas?
>
> based on the specs, it should not be the usual ssl/tls certificate, try to
> generate them using the guidelines at:
>
>   * https://github.com/asipto/secsipidx#keys-generation
>
> Cheers,
> Daniel
>
> --
> Daniel-Constantin Mierla -- www.asipto.comwww.twitter.com/miconda -- www.li=
nkedin.com/in/miconda
> Kamailio Advanced Training - Online - June 7-10, 2021 (America Timezone)
>   * https://www.asipto.com/sw/kamailio-advanced-training-online/
>
>



--===============0809283222==
Content-Type: text/html
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"
MIME-Version: 1.0
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--===============0809283222==--