Hi all.
We are using Kamailio 4.0.4 in an Edge Proxy to Central Registrar configuration.
The system is in a functional state.
Oddly, when we enable TLS, the Kamailio server never responds with a Server Hello to the Client Hello for TLS, so a connection is never established.
Has anyone seen anything like this? There are no errors anywhere, the server just never responds to the initial TLS Client Hello. We know the packet arrives and is acknowledged at the TCP level.
Just a bit stumped.
There's a great debugging article posted to: http://www.kamailio.org/wiki/tutorials/tls/testing-and-debugging
What kind of response do you get from:
openssl s_client -connect IPADDRESS:5061 -no_ssl2 -bugs
Fred Posner | The Palner Group direct: 503-914-0999 | fax: 954-472-2896
On 11/05/2013 02:09 PM, Coy Cardwell wrote:
Hi all.
We are using Kamailio 4.0.4 in an Edge Proxy to Central Registrar configuration.
The system is in a functional state.
Oddly, when we enable TLS, the Kamailio server never responds with a Server Hello to the Client Hello for TLS, so a connection is never established.
Has anyone seen anything like this? There are no errors anywhere, the server just never responds to the initial TLS Client Hello. We know the packet arrives and is acknowledged at the TCP level.
Just a bit stumped.
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
thanks, found the problem. had to have Kamailio listen on "tls:IP:5061", not "tcp:IP:5061"
On Tue, Nov 5, 2013 at 2:37 PM, Fred Posner fred@palner.com wrote:
There's a great debugging article posted to: http://www.kamailio.org/wiki/tutorials/tls/testing-and-debugging
What kind of response do you get from:
openssl s_client -connect IPADDRESS:5061 -no_ssl2 -bugs
Fred Posner | The Palner Group direct: 503-914-0999 | fax: 954-472-2896
On 11/05/2013 02:09 PM, Coy Cardwell wrote:
Hi all.
We are using Kamailio 4.0.4 in an Edge Proxy to Central Registrar configuration.
The system is in a functional state.
Oddly, when we enable TLS, the Kamailio server never responds with a Server Hello to the Client Hello for TLS, so a connection is never established.
Has anyone seen anything like this? There are no errors anywhere, the server just never responds to the initial TLS Client Hello. We know the packet arrives and is acknowledged at the TCP level.
Just a bit stumped.
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
-
Coy Cardwell -
Fred Posner