[Devel] minisip openser tls

[merdal at comcast.net]

Hi Klaus,

I could not get any tls_method to work.  Minisip error message does not change.  Openser error messages for each method are listed below:
with tls_method=SSLv2:
" 
tls_accept: Error in SSL:
 3(8332) tls_error: error:140EC0AF:SSL routines:SSL2_READ_INTERNAL:non sslv2 initial packet
"
with tls_method=SSLv3 or tls_method=TLSv1:
"
3(8386) tls_accept: Error in SSL:
 3(8386) tls_error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
"
With tls_method=SSLv23:
"
 3(8403) tls_accept: Error in SSL:
 3(8403) tls_error: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol
"


I am using openser-1.0.0-tls_src.tar.gz  and minisip beta release( minisip-0.7.0.tar.gz, libmutil-0.3.0.tar.gz, libmnetutil-0.3.0.tar.gz, libmikey-0.4.0.tar.gz, libmsip-0.3.0.tar.gz)

Thanks,
-Muhammet

-------------- Original message -------------- 
From: Klaus Darilion <klaus.mailinglists at pernau.at> 

> merdal at comcast.net wrote: 
> > Hi, 
> > I am trying to use openser as a proxy and use TLS between openser and 
> > minisip. I am using textui. Does anybody have a .minisip.conf file 
> > that I can use as a reference for this? 
> > The sniffer shows encrypted TCP packets, but the REGISTER request is not 
> > encrypted. 
> > 
> > Following error appears on minisip console: 
> > "Some error occured while reading from StreamSocket" 
> > 
> > Following error appears on the openser console: 
> > " 
> > 3(32299) tls_accept: Error in SSL: 
> > 3(32299) tls_error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong 
> > version number 
> 
> This sounds like a version mismatch. I do not know what version minisip 
> is using. Try in openser if one of these works: 
> 
> tls_method = SSLv2 
> tls_method = SSLv23 
> tls_method = SSLv3 
> tls_method = TLSv1 
> 
> regards 
> klaus 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://openser.org/pipermail/devel/attachments/20060127/69a0a856/attachment.html