wrote:

Hello, when tls module is installed, a self signed pair of certificate-private key is generated in /usr/local/etc/kamailio If you need one that is signed by a trusted CA (e.g., Verisign), you will have to buy it. Cheers, Daniel On 3/19/13 8:08 AM, Khoa Pham wrote: Hi, I want to enable TLS in Kamailio, as in here http://kamailio.org/docs/modules/stable/modules/tls.html But how can I get the certificate and private key ? -- Khoa Pham HCMC University of Science Faculty of Information Technology _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing listsr-users@lists.sip-router.orghttp://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users -- Daniel-Constantin Mierla - http://www.asipto.comhttp://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda Kamailio World Conference, April 16-17, 2013, Berlin - http://conference.kamailio.com - _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

> If you need one that is signed by a trusted CA (e.g., Verisign), you > will have to buy it.

Hi Olle, I follow these 2 tutorials 1. http://nil.uniza.sk/network-security/tls/configuring-tls-support-kamailio-3… which only describes to listen on tls listen=tls:158.193.139.51:5061 2. http://www.kamailio.org/dokuwiki/doku.php/tls:create-certificates which only describes to listen on udp and tcp listen=udp:<ip-address-for-receiving-sip-requests>:5060 listen=tcp:<ip-address-for-receiving-sip-requests>:5060 It is not until I listen on both TCP and LTS does it work. You document http://kamailio.org/docs/modules/4.0.x/modules/tls.html seems to lack of these "listen"

On Wed, Mar 20, 2013 at 4:10 PM, Olle E. Johansson &lt;oej(a)edvina.net&gt; wrote: 20 mar 2013 kl. 07:55 skrev Daniel-Constantin Mierla &lt;miconda(a)gmail.com&gt;om>: The documentation for the TLS module actually includes a quick howto. http://kamailio.org/docs/modules/4.0.x/modules/tls.html What part of this needs clarification? Please help us make the documentation better if there are parts you do not undertand or isn't explained. Thanks, /O _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users -- Khoa Pham HCMC University of Science Faculty of Information Technology _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

Hummm. When I start playing with Kamailio I had some problems that were related to the compilation process not really to the final product. Now, if you comment out the listen statement then all server interfaces will listen for all enabled services (SIP-UDP, SIP-TCP and SIP-TLS if you enabled it). AS a troubleshooting suggestion, just comment out the "listen" statement and all enabled services will bind to all available IP interfaces. If it works, then use "listen="my ip address" and all enabled services will be bound to the especified IP address. Best regards, Moacir ------------------------------ From: oej(a)edvina.net Date: Wed, 20 Mar 2013 12:43:06 +0100 To: sr-users(a)lists.sip-router.org Subject: Re: [SR-Users] How to enable TLS in Kamailio ? 20 mar 2013 kl. 10:33 skrev Khoa Pham &lt;onmyway133(a)gmail.com&gt;om>: Hi Olle, I follow these 2 tutorials 1. http://nil.uniza.sk/network-security/tls/configuring-tls-support-kamailio-3… which only describes to listen on tls listen=tls:158.193.139.51:5061 2. http://www.kamailio.org/dokuwiki/doku.php/tls:create-certificates which only describes to listen on udp and tcp listen=udp:<ip-address-for-receiving-sip-requests>:5060 listen=tcp:<ip-address-for-receiving-sip-requests>:5060 It is not until I listen on both TCP and LTS does it work. You document http://kamailio.org/docs/modules/4.0.x/modules/tls.htmlseems to lack of these "listen" Right. But it's in the core cookbook. We should propably add the listen to the TLS docs too. Thanks! /O On Wed, Mar 20, 2013 at 4:10 PM, Olle E. Johansson &lt;oej(a)edvina.net&gt; wrote: 20 mar 2013 kl. 07:55 skrev Daniel-Constantin Mierla &lt;miconda(a)gmail.com&gt;om>: Hello, when tls module is installed, a self signed pair of certificate-private key is generated in /usr/local/etc/kamailio If you need one that is signed by a trusted CA (e.g., Verisign), you will have to buy it. Cheers, Daniel On 3/19/13 8:08 AM, Khoa Pham wrote: Hi, I want to enable TLS in Kamailio, as in here http://kamailio.org/docs/modules/stable/modules/tls.html But how can I get the certificate and private key ? The documentation for the TLS module actually includes a quick howto. http://kamailio.org/docs/modules/4.0.x/modules/tls.html What part of this needs clarification? Please help us make the documentation better if there are parts you do not undertand or isn't explained. Thanks, /O _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users -- Khoa Pham HCMC University of Science Faculty of Information Technology _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

Hello, i'm using the Redis module, but the function "redis_cmd" doesn't return false if there is some problem on the database. if(redis_cmd("srv1","$var(redis_credit)", "r")) { $var(credit_op)=$redis(r=>value); xlog("L_INFO","xxxxxxx -- \n"); } else { xlog("L_INFO","yyyyyyyy -- \n");} If I stop the redis db, and make a call , it enter in the "if" statement and write the log xxx . I think that , if the db is down, it should enter in the "else" and write the yyyy log. Where is the error ? Why , if the db is down, and I try to restart kamailio, it don't start ? It write in the log , that the connection is broken and it remain stopped. Thanks _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

Hi Daniel, thanks for your answer, I've tried now to log the variable "$redis(r=>info)" that, as documented, should contain an error message from REDIS, but in this case , REDIS is down and the log is <null >. Thanks for your help and your work. *Da:*sr-users-bounces@lists.sip-router.org [mailto:sr-users-bounces@lists.sip-router.org] *Per conto di *Daniel-Constantin Mierla *Inviato:* giovedì 21 marzo 2013 07:59 *A:* Kamailio (SER) - Users Mailing List *Oggetto:* Re: [SR-Users] Redis module problem Hello, iirc, the error is signaled as part of redis response pseudo-variable (as type field or so). But indeed can be more logical as you present. It is kind of typical behavior not to start when not able to connect to backend (e.g., even for like mysql, etc.). This could be changed, as there are options to reconnect at runtime, just that nobody took the time to do it... If you make a patch for any or both of these change, we will get the in -- if you are not a developer and is not convenient to do it, I will do it sometime soon, in this devel cycle, but I may need your assistance to test. Cheers, Daniel On 3/20/13 5:54 PM, pars3c wrote: Hello, i'm using the Redis module, but the function "redis_cmd" doesn't return false if there is some problem on the database. if(redis_cmd("srv1","$var(redis_credit)", "r")) { $var(credit_op)=$redis(r=>value); xlog("L_INFO","xxxxxxx -- \n"); } else { xlog("L_INFO","yyyyyyyy -- \n");} If I stop the redis db, and make a call , it enter in the "if" statement and write the log xxx . I think that , if the db is down, it should enter in the "else" and write the yyyy log. Where is the error ? Why , if the db is down, and I try to restart kamailio, it don't start ? It write in the log , that the connection is broken and it remain stopped. Thanks _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org <mailto:sr-users@lists.sip-router.org> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users -- Daniel-Constantin Mierla -http://www.asipto.com http://twitter.com/#!/miconda <http://twitter.com/#%21/miconda> -http://www.linkedin.com/in/miconda Kamailio World Conference, April 16-17, 2013, Berlin -http://conference.kamailio.com - ------------------------------------------------------------------------ Nessun virus nel messaggio. Controllato da AVG - www.avg.com <http://www.avg.com> Versione: 2013.0.2904 / Database dei virus: 2641/6185 - Data di rilascio: 17/03/2013 _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

Hi Daniel, thanks for your answer, I've tried now to log the variable "$redis(r=>info)" that, as documented, should contain an error message from REDIS, but in this case , REDIS is down and the log is <null >. Thanks for your help and your work. *Da:*sr-users-bounces@lists.sip-router.org [mailto:sr-users-bounces@lists.sip-router.org] *Per conto di *Daniel-Constantin Mierla *Inviato:* giovedì 21 marzo 2013 07:59 *A:* Kamailio (SER) - Users Mailing List *Oggetto:* Re: [SR-Users] Redis module problem Hello, iirc, the error is signaled as part of redis response pseudo-variable (as type field or so). But indeed can be more logical as you present. It is kind of typical behavior not to start when not able to connect to backend (e.g., even for like mysql, etc.). This could be changed, as there are options to reconnect at runtime, just that nobody took the time to do it... If you make a patch for any or both of these change, we will get the in -- if you are not a developer and is not convenient to do it, I will do it sometime soon, in this devel cycle, but I may need your assistance to test. Cheers, Daniel On 3/20/13 5:54 PM, pars3c wrote: Hello, i'm using the Redis module, but the function "redis_cmd" doesn't return false if there is some problem on the database. if(redis_cmd("srv1","$var(redis_credit)", "r")) { $var(credit_op)=$redis(r=>value); xlog("L_INFO","xxxxxxx -- \n"); } else { xlog("L_INFO","yyyyyyyy -- \n");} If I stop the redis db, and make a call , it enter in the "if" statement and write the log xxx . I think that , if the db is down, it should enter in the "else" and write the yyyy log. Where is the error ? Why , if the db is down, and I try to restart kamailio, it don't start ? It write in the log , that the connection is broken and it remain stopped. Thanks _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org <mailto:sr-users@lists.sip-router.org> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users -- Daniel-Constantin Mierla -http://www.asipto.com http://twitter.com/#!/miconda <http://twitter.com/#%21/miconda> -http://www.linkedin.com/in/miconda Kamailio World Conference, April 16-17, 2013, Berlin -http://conference.kamailio.com - ------------------------------------------------------------------------ Nessun virus nel messaggio. Controllato da AVG - www.avg.com <http://www.avg.com> Versione: 2013.0.2904 / Database dei virus: 2641/6185 - Data di rilascio: 17/03/2013 _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users