[OpenSER-Users] Openser-tls - Registration Error: 503

Klaus Darilion klaus.mailinglists at pernau.at
Mon Nov 26 11:49:12 CET 2007


watch openser's log file and use "ssldump" to find out if the TLS 
connection is set up properly, or if not, find out which side closes the 
TLs connection due to an error!

First guess: have you imported openser's TLS certificate into Windows' 
certificate store (e.g. via Internet Explorer)? This certificate store 
will be used by eyebeam.

klaus

Marcio Ribeiro schrieb:
> Hi,
> i'm using openser-tls 1.0.1, and i intend to estabilish a security call 
> between 2 users agents. When using eyeBeam 1.5.6 in the automatic mode
> i can register and make calls, no problem. But when i choose TLS in the 
> softphone i always get Registration Error: 503 - Service Unavailable.
> the eyeBeam log shows:
> 
> [07-11-24]13:01:01.386 | Info (debug) RESIP:TRANSPORT | "Adding message 
> to tx buffer to: [ V4 xxx.xx.xx.xxx:5061 TLS target domain=xxx.xx.xx.xxx 
> received on: Transport: [ V4 0.0.0.0:35085 <http://0.0.0.0:35085> TLS 
> target domain=unspecified connectionId=0 ] connectionId=0 ]" | 
> [07-11-24]13:01:01.487 | Info (debug) RESIP:TRANSPORT | "Processing 
> write for [ V4 xxx.xx.xx.xxx:5061 TLS target domain=xxx.xx.xx.xxx 
> received on: Transport: [ V4 0.0.0.0:35085 <http://0.0.0.0:35085> TLS 
> target domain=unspecified connectionId=0 ] connectionId=0 ]" |
> [07-11-24]13:01:01.487 | Info (debug) RESIP:TRANSPORT | "Creating 
> fd=1660 V4/TCP" |
> [07-11-24]13:01:01.487 | Info (debug) RESIP:TRANSPORT | "Opening new 
> connection to [ V4 xxx.xx.xx.xxx:5061 TLS target domain=xxx.xx.xx.xxx 
> received on: Transport: [ V4 0.0.0.0:35085 <http://0.0.0.0:35085> TLS 
> target domain=unspecified connectionId=0 ] connectionId=0 ]" |
> [07-11-24]13:01:01.488 | Info (debug) RESIP:TRANSPORT | 
> "ConnectionBase::ConnectionBase, who: [ V4 xxx.xx.xx.xxx:5061 TLS target 
> domain= xxx.xx.xx.xxx received on: Transport: [ V4 0.0.0.0:35085 
> <http://0.0.0.0:35085> TLS target domain=unspecified connectionId=0 ] 
> connectionId=0 ] 024AA840" |
> [07-11-24]13:01:01.488 | Info (more) RESIP:TRANSPORT | "Creating TLS 
> connection for domain  [ V4 xxx.xx.xx.xxx:5061 TLS target 
> domain=xxx.xx.xx.xxx received on: Transport: [ V4 0.0.0.0:35085 
> <http://0.0.0.0:35085> TLS target domain=unspecified connectionId=0 ] 
> connectionId=0 ] on 1660" |
> [07-11-24]13:01: 01.488 | Info (debug) RESIP:TRANSPORT | "Trying to form 
> TLS connection - acting as client" |
> [07-11-24]13:01:02.405 | Info (more) RESIP:TRANSPORT | "Exception 
> writing to socket 1660 code: 10061; closing connection" |
> [07-11-24]13:01:02.406 | Info (debug) RESIP:TRANSPORT | 
> "ConnectionBase::~ConnectionBase 024AA840" |
> [07-11-24]13:01:02.406 | Info (more) RESIP:TRANSACTION | "Sending 
> ConnectionTerminated 4 to TUs" |
> [07-11-24]13:01:02.406 | Info (more) RESIP:TRANSACTION | "Try sending 
> request to a different dns result" |
> [07-11-24]13:01:02.406 | Info (more) RESIP:TRANSACTION | "Ran out of dns 
> entries for xxx.xx.xx.xxx . Send 503" |
> [07-11-24]13:01:02.406 | Info (debug) RESIP | 
> "Helper::makeResponse(SipReq:  REGISTER xxx.xx.xx.xxx 
> tid=a1596d01462f2d03 cseq=REGISTER contact=marcio at yyy.yy.yy.yy:35085 / 1 
> from(tu) code=503 reason=" |
> [07-11-24]13:01:02.408 | Warning (min) RESIP:DNS | "local hostname does 
> not contain a domain part" |
> [07-11-24]13:01:02.408 | Info (debug) RESIP:TRANSACTION | "Send to TU: 
> TU: DialogUsageManager size=1 SIP/2.0 503 Service Unavailable
> Via: SIP/2.0/TLS 
> yyy.yy.yy.yy:35085;branch=z9hG4bK-d87543-a1596d01462f2d03-1--d87543-;rport
> To: ""Marcio""<sip:marcio at xxx.xx.xx.xxx 
> <mailto:sip:marcio at xxx.xx.xx.xxx>>;tag=b76ee406
> From: ""Marcio""<sip:marcio at xxx.xx.xx.xxx 
> <mailto:sip:marcio at xxx.xx.xx.xxx>>;tag=bf4bff41
> Call-ID: 507d385424726b5fOGFmYzRkOTMwZjFmOTNjNzkyYmE1MjI4MDY0YzAwNzg.
> CSeq: 1 REGISTER
> Warning: 499 DUMNONIA """"
> Content-Length: 0
> 
> searching on google doesn't give-me much stuf about this. I really need 
> to implement secure communication... the softphone doesn't matter.
> I have no idea of what to do, and i really need help...
> 
> thanks,
> 
> Marcio Ribeiro
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Users mailing list
> Users at lists.openser.org
> http://lists.openser.org/cgi-bin/mailman/listinfo/users




More information about the sr-users mailing list