(no subject)

List overview All Threads
Download

newer

older

Use topos module to hide contact...

secfilter not working for me

ahmed moghazy

2 Mar 2020 2 Mar '20

4:15 a.m.

Hello sir , when i enabled tls module in kamailio and i made the configurations in tls.cfg, kamailio always sent me that peer dont return certificate when i make requre_certficate=1

Attachments:

attachment.html (text/html — 244 bytes)
Screenshotfrom2020-03-0210-52-46.png (image/png — 466.7 KB)

Show replies by thread

M S

2 Mar 2 Mar

12:39 p.m.

Please read the tls module documentation, https://kamailio.org/docs/modules/devel/modules/tls.html#tls.p.require_cert… when enabled it requires client to present certificate, but client does not have one, which is the likely cause of the problem. Hope this helps. On Mon, 2 Mar 2020, 14:34 ahmed moghazy, <ahmed.m.moghazi(a)gmail.com> wrote:

...

Hello sir , when i enabled tls module in kamailio and i made the configurations in tls.cfg, kamailio always sent me that peer dont return certificate when i make requre_certficate=1 _______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

ahmed moghazy

2:25 p.m.

I put my own certficate in /res/raw/rootca.pem in linphone Sent from my iPhone

...

On Mar 2, 2020, at 7:40 PM, M S <shaheryarkh(a)gmail.com> wrote: Please read the tls module documentation, https://kamailio.org/docs/modules/devel/modules/tls.html#tls.p.require_cert… when enabled it requires client to present certificate, but client does not have one, which is the likely cause of the problem. Hope this helps.

On Mon, 2 Mar 2020, 14:34 ahmed moghazy, <ahmed.m.moghazi(a)gmail.com> wrote: Hello sir , when i enabled tls module in kamailio and i made the configurations in tls.cfg, kamailio always sent me that peer dont return certificate when i make requre_certficate=1 _______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

_______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

M S

10:53 p.m.

Dude again, RTFM! The TLS module has a quick how-to generate client and server certificates. Both must be issued by same CA and server must have all issued certificates along with CA, CRL and private key. The whole directory structure and what to put where is listed, along with how to configure kamailio. On Mon, 2 Mar 2020, 20:27 ahmed moghazy, <ahmed.m.moghazi(a)gmail.com> wrote:

...

I put my own certficate in /res/raw/rootca.pem in linphone Sent from my iPhone On Mar 2, 2020, at 7:40 PM, M S <shaheryarkh(a)gmail.com> wrote: Please read the tls module documentation, https://kamailio.org/docs/modules/devel/modules/tls.html#tls.p.require_cert… when enabled it requires client to present certificate, but client does not have one, which is the likely cause of the problem. Hope this helps. On Mon, 2 Mar 2020, 14:34 ahmed moghazy, <ahmed.m.moghazi(a)gmail.com> wrote:

_______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

ahmed moghazy

3 Mar 3 Mar

2:51 a.m.

I know that but i want voip program to be used with kamailio using tls i you could suggest one , thank you Sent from my iPhone

...

On Mar 3, 2020, at 5:54 AM, M S <shaheryarkh(a)gmail.com> wrote: Dude again, RTFM! The TLS module has a quick how-to generate client and server certificates. Both must be issued by same CA and server must have all issued certificates along with CA, CRL and private key. The whole directory structure and what to put where is listed, along with how to configure kamailio.

On Mon, 2 Mar 2020, 20:27 ahmed moghazy, <ahmed.m.moghazi(a)gmail.com> wrote: I put my own certficate in /res/raw/rootca.pem in linphone Sent from my iPhone

On Mar 2, 2020, at 7:40 PM, M S <shaheryarkh(a)gmail.com> wrote:

_______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

M S

3:50 a.m.

Any sip client will work with kamailio (as sip server) as long as it supports TLS and configured correctly. I mostly use Linphone, Xlite and some of my own sip clients that i have built over the years. You simply need to follow the quick howto in tls module documentation (as i mentioned earlier) to generate client and server certificates. Then copy client cert along with CA to sip client, provide connection and authentication info and it should work fine. For over simplified setup where you don't have client certificate or not sure how to configure one for any given sip client, you can disable "verify_certificate" option in tls module. Hope this helps. On Tue, 3 Mar 2020, 08:53 ahmed moghazy, <ahmed.m.moghazi(a)gmail.com> wrote:

...

I know that but i want voip program to be used with kamailio using tls i you could suggest one , thank you Sent from my iPhone On Mar 3, 2020, at 5:54 AM, M S <shaheryarkh(a)gmail.com> wrote: Dude again, RTFM! The TLS module has a quick how-to generate client and server certificates. Both must be issued by same CA and server must have all issued certificates along with CA, CRL and private key. The whole directory structure and what to put where is listed, along with how to configure kamailio. On Mon, 2 Mar 2020, 20:27 ahmed moghazy, <ahmed.m.moghazi(a)gmail.com> wrote:

ahmed moghazy

3:36 p.m.

I generate those certificates and i put then in linphone source code i want to enable require_certficate=1 could you help me how and where to put the certificates and linphone peer return it ? , thank you

...

On Mar 3, 2020, at 10:52 AM, M S <shaheryarkh(a)gmail.com> wrote: Any sip client will work with kamailio (as sip server) as long as it supports TLS and configured correctly. I mostly use Linphone, Xlite and some of my own sip clients that i have built over the years. You simply need to follow the quick howto in tls module documentation (as i mentioned earlier) to generate client and server certificates. Then copy client cert along with CA to sip client, provide connection and authentication info and it should work fine. For over simplified setup where you don't have client certificate or not sure how to configure one for any given sip client, you can disable "verify_certificate" option in tls module. Hope this helps.

On Tue, 3 Mar 2020, 08:53 ahmed moghazy, <ahmed.m.moghazi(a)gmail.com> wrote: I know that but i want voip program to be used with kamailio using tls i you could suggest one , thank you Sent from my iPhone

On Mar 3, 2020, at 5:54 AM, M S <shaheryarkh(a)gmail.com> wrote:

On Mon, 2 Mar 2020, 20:27 ahmed moghazy, <ahmed.m.moghazi(a)gmail.com> wrote: I put my own certficate in /res/raw/rootca.pem in linphone Sent from my iPhone >> On Mar 2, 2020, at 7:40 PM, M S <shaheryarkh(a)gmail.com> wrote: >> > > Please read the tls module documentation, > > https://kamailio.org/docs/modules/devel/modules/tls.html#tls.p.require_cert… > > when enabled it requires client to present certificate, but client does not have one, which is the likely cause of the problem. > > Hope this helps. > > >> On Mon, 2 Mar 2020, 14:34 ahmed moghazy, <ahmed.m.moghazi(a)gmail.com> wrote: >> Hello sir , >> when i enabled tls module in kamailio and i made the configurations in tls.cfg, >> kamailio always sent me that peer dont return certificate when i make requre_certficate=1 >> _______________________________________________ >> Kamailio (SER) - Users Mailing List >> sr-users(a)lists.kamailio.org >> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users > _______________________________________________ > Kamailio (SER) - Users Mailing List > sr-users(a)lists.kamailio.org > https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

_______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

ahmed moghazy

10 Mar 10 Mar

3:52 p.m.

If i want to make users in groups for example two Groups group A and group B and each group has 4 users but users in group A couldn't Call users in group B?

...

On Mar 3, 2020, at 10:36 PM, ahmed moghazy <ahmed.m.moghazi(a)gmail.com> wrote: I generate those certificates and i put then in linphone source code i want to enable require_certficate=1 could you help me how and where to put the certificates and linphone peer return it ? , thank you >> On Mar 3, 2020, at 10:52 AM, M S <shaheryarkh(a)gmail.com> wrote: >> > > Any sip client will work with kamailio (as sip server) as long as it supports TLS and configured correctly. I mostly use Linphone, Xlite and some of my own sip clients that i have built over the years. > > You simply need to follow the quick howto in tls module documentation (as i mentioned earlier) to generate client and server certificates. Then copy client cert along with CA to sip client, provide connection and authentication info and it should work fine. > > For over simplified setup where you don't have client certificate or not sure how to configure one for any given sip client, you can disable "verify_certificate" option in tls module. > > Hope this helps. > > >> On Tue, 3 Mar 2020, 08:53 ahmed moghazy, <ahmed.m.moghazi(a)gmail.com> wrote: >> I know that but i want voip program to be used with kamailio using tls i you could suggest one , thank you >> >> Sent from my iPhone >> >>>> On Mar 3, 2020, at 5:54 AM, M S <shaheryarkh(a)gmail.com> wrote: >>>> >>> >>> Dude again, RTFM! >>> >>> The TLS module has a quick how-to generate client and server certificates. Both must be issued by same CA and server must have all issued certificates along with CA, CRL and private key. The whole directory structure and what to put where is listed, along with how to configure kamailio. >>> >>> >>>> On Mon, 2 Mar 2020, 20:27 ahmed moghazy, <ahmed.m.moghazi(a)gmail.com> wrote: >>>> I put my own certficate in /res/raw/rootca.pem in linphone >>>> >>>> Sent from my iPhone >>>> >>>>>> On Mar 2, 2020, at 7:40 PM, M S <shaheryarkh(a)gmail.com> wrote: >>>>>> >>>>> >>>>> Please read the tls module documentation, >>>>> >>>>> https://kamailio.org/docs/modules/devel/modules/tls.html#tls.p.require_cert… >>>>> >>>>> when enabled it requires client to present certificate, but client does not have one, which is the likely cause of the problem. >>>>> >>>>> Hope this helps. >>>>> >>>>> >>>>>> On Mon, 2 Mar 2020, 14:34 ahmed moghazy, <ahmed.m.moghazi(a)gmail.com> wrote: >>>>>> Hello sir , >>>>>> when i enabled tls module in kamailio and i made the configurations in tls.cfg, >>>>>> kamailio always sent me that peer dont return certificate when i make requre_certficate=1 >>>>>> _______________________________________________ >>>>>> Kamailio (SER) - Users Mailing List >>>>>> sr-users(a)lists.kamailio.org >>>>>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users >>>>> _______________________________________________ >>>>> Kamailio (SER) - Users Mailing List >>>>> sr-users(a)lists.kamailio.org >>>>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users >>>> _______________________________________________ >>>> Kamailio (SER) - Users Mailing List >>>> sr-users(a)lists.kamailio.org >>>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users >>> _______________________________________________ >>> Kamailio (SER) - Users Mailing List >>> sr-users(a)lists.kamailio.org >>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users >> _______________________________________________ >> Kamailio (SER) - Users Mailing List >> sr-users(a)lists.kamailio.org >> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users > _______________________________________________ > Kamailio (SER) - Users Mailing List > sr-users(a)lists.kamailio.org > https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

Henning Westerholt

11 Mar 11 Mar

4:21 a.m.

Hello, this could be done with a database query (e.g. with sqlops module). If you are looking for a dedicated interface, there is for example the group module: https://kamailio.org/docs/modules/devel/modules/group.html Cheers, Henning -- Henning Westerholt – https://skalatan.de/blog/ Kamailio services – https://gilawa.com<https://gilawa.com/> From: sr-users <sr-users-bounces(a)lists.kamailio.org> On Behalf Of ahmed moghazy Sent: Tuesday, March 10, 2020 8:53 PM To: Kamailio (SER) - Users Mailing List <sr-users(a)lists.kamailio.org> Subject: Re: [SR-Users] (no subject) If i want to make users in groups for example two Groups group A and group B and each group has 4 users but users in group A couldn't Call users in group B? On Mar 3, 2020, at 10:36 PM, ahmed moghazy <ahmed.m.moghazi@gmail.com<mailto:ahmed.m.moghazi@gmail.com>> wrote: I generate those certificates and i put then in linphone source code i want to enable require_certficate=1 could you help me how and where to put the certificates and linphone peer return it ? , thank you On Mar 3, 2020, at 10:52 AM, M S <shaheryarkh@gmail.com<mailto:shaheryarkh@gmail.com>> wrote: Any sip client will work with kamailio (as sip server) as long as it supports TLS and configured correctly. I mostly use Linphone, Xlite and some of my own sip clients that i have built over the years. You simply need to follow the quick howto in tls module documentation (as i mentioned earlier) to generate client and server certificates. Then copy client cert along with CA to sip client, provide connection and authentication info and it should work fine. For over simplified setup where you don't have client certificate or not sure how to configure one for any given sip client, you can disable "verify_certificate" option in tls module. Hope this helps. On Tue, 3 Mar 2020, 08:53 ahmed moghazy, <ahmed.m.moghazi@gmail.com<mailto:ahmed.m.moghazi@gmail.com>> wrote: I know that but i want voip program to be used with kamailio using tls i you could suggest one , thank you Sent from my iPhone On Mar 3, 2020, at 5:54 AM, M S <shaheryarkh@gmail.com<mailto:shaheryarkh@gmail.com>> wrote: Dude again, RTFM! The TLS module has a quick how-to generate client and server certificates. Both must be issued by same CA and server must have all issued certificates along with CA, CRL and private key. The whole directory structure and what to put where is listed, along with how to configure kamailio. On Mon, 2 Mar 2020, 20:27 ahmed moghazy, <ahmed.m.moghazi@gmail.com<mailto:ahmed.m.moghazi@gmail.com>> wrote: I put my own certficate in /res/raw/rootca.pem in linphone Sent from my iPhone On Mar 2, 2020, at 7:40 PM, M S <shaheryarkh@gmail.com<mailto:shaheryarkh@gmail.com>> wrote: Please read the tls module documentation, https://kamailio.org/docs/modules/devel/modules/tls.html#tls.p.require_cert… when enabled it requires client to present certificate, but client does not have one, which is the likely cause of the problem. Hope this helps. On Mon, 2 Mar 2020, 14:34 ahmed moghazy, <ahmed.m.moghazi@gmail.com<mailto:ahmed.m.moghazi@gmail.com>> wrote: Hello sir , when i enabled tls module in kamailio and i made the configurations in tls.cfg, kamailio always sent me that peer dont return certificate when i make requre_certficate=1 _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org<mailto:sr-users@lists.kamailio.org> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org<mailto:sr-users@lists.kamailio.org> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org<mailto:sr-users@lists.kamailio.org> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org<mailto:sr-users@lists.kamailio.org> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org<mailto:sr-users@lists.kamailio.org> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org<mailto:sr-users@lists.kamailio.org> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

1536

days inactive

1545

days old

sr-users@lists.kamailio.org

Manage subscription

8 comments

3 participants

tags (0)

participants (3)

ahmed moghazy
Henning Westerholt
M S