[Devel] minisip openser tls

[Klaus Darilion]

Try to use ssldump to debug the TLS request sent from the client to the 
server.

regards
klaus

merdal at comcast.net wrote:
> Hi Klaus,
>  
> I could not get any tls_method to work.  Minisip error message does not 
> change.  Openser error messages for each method are listed below:
> with tls_method=SSLv2:
> " 
> tls_accept: Error in SSL:
>  3(8332) tls_error: error:140EC0AF:SSL routines:SSL2_READ_INTERNAL:non 
> sslv2 initial packet
> "
> with tls_method=SSLv3 or tls_method=TLSv1:
> "
> 3(8386) tls_accept: Error in SSL:
>  3(8386) tls_error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong 
> version number
> "
> With tls_method=SSLv23:
> "
>  3(8403) tls_accept: Error in SSL:
>  3(8403) tls_error: error:140760FC:SSL 
> routines:SSL23_GET_CLIENT_HELLO:unknown protocol
> "
>  
> 
> I am using openser-1.0.0-tls_src.tar.gz  and minisip beta 
> release( minisip-0.7.0.tar.gz, libmutil-0.3.0.tar.gz, 
> libmnetutil-0.3.0.tar.gz, libmikey-0.4.0.tar.gz, libmsip-0.3.0.tar.gz)
>  
> Thanks,
> -Muhammet
>  
> 
>     -------------- Original message --------------
>     From: Klaus Darilion <klaus.mailinglists at pernau.at>
> 
>      > merdal at comcast.net wrote:
>      > > Hi,
>      > > I am trying to use openser as a proxy and use TLS between
>     openser and
>      > > minisip. I am using textui. Does anybody have a .minisip.conf file
>      > > that I can use as a reference for this?
>      > > The sniffer shows encrypted TCP packets, but the REGISTER
>     request is not
>      > > encrypted.
>      > >
>      > > Following error appears on minisip console:
>      > > "Some error occured while reading from StreamSocket"
>      > >
>      > > Following error appears on the openser console:
>      > > "
>      > > 3(32299) tls_accept: Error in SSL:
>      > > 3(32299) tls_error: error:1408F10B:SSL
>     routines:SSL3_GET_RECORD:wrong
>      > > version number
>      >
>      > This sounds like a version mismatch. I do not know what version
>     minisip
>      > is using. Try in openser if one of these works:
>      >
>      > tls_method = SSLv2
>      > tls_method = SSLv23
>      > tls_method = SSLv3
>      > tls_method = TLSv1
>      >
>      > regards
>      > klaus