[SR-Users] Fwd: Re: Fwd: Re: Kamailio and NAPTR lookup with TLS

[Matteo Campana]

 Hi Daniel,
I have followed your instruction (I'm using kamailio 1.5) and before the
t_relay("0x05") statement I've setted:

$du="sip:" + $rd + ";transport=tls";

but I get the following mesasge:

Jul 14 15:17:55 OVSIPP /usr/local/sbin/kamailio[7790] Request leaving server, *D_-URI='sip:garr.it;transport=tls'_* - M=INVITE RURI=sip:xxx at garr.it 
F=sip:yyyyy at sip.mydomqin.it:5066 T=sip:123456789 at sip.mydomain.it:5066
Jul 14 15:17:55 OVSIPP /usr/local/sbin/kamailio[7790]: CRITICAL:core:mk_proxy: could not resolve hostname: "garr.it"
Jul 14 15:17:55 OVSIPP /usr/local/sbin/kamailio[7790]: ERROR:tm:uri2proxy: bad host name in URI <sip:garr.it;transport=tls>
Jul 14 15:17:55 OVSIPP /usr/local/sbin/kamailio[7790]: ERROR:tm:t_forward_nonack: failure to add branches



Therefore I would like to use information  about TLS connection (tls
port?) got from NAPTR record.
Doesn't it possible with kamailio 1.5 ?

Many thanks,

Daniel



Il 08/07/2010 18.12, Matteo Campana ha scritto:
>
>
> -------- Messaggio originale --------
> Oggetto: 	Re: [SR-Users] Kamailio and NAPTR lookup with TLS
> Data: 	Thu, 08 Jul 2010 18:10:35 +0200
> Mittente: 	Daniel-Constantin Mierla <miconda at gmail.com>
> A: 	matteo.campana at klarya.it
> CC: 	sr-users at lists.sip-router.org
>
>
>
> Hello,
>
> On 7/8/10 5:59 PM, Matteo Campana wrote:
> >
> > Hi all,
> > I'm using kamailio 1.5 with TLS module.
> > I need to make ENUM query and get NAPTR record.
> > > From NAPTR lookup, I'd like to relay my SIP Invite with tls protocol.
> >
> > How can I tell Kamailio to use TLS protocol ( instead of udp) after NAPTR lookup ?
> >
> > I've try to set :
> >
> > dns_tls_pref=1
> > dns_udp_pref=2
> > dns_tcp_pref=3
> >
> > in the general section of kamailio.cfg, but I get a parse error.
> >
> >    
> these parameters were introduced in kamailio with version 3.0.
>
> If you need TLS then it is recommended to use 3.0 anyhow, it is a far 
> better implementation. That will make the life easier to migrate to 
> upcoming 3.1 that will bring asynchronous TLS.
>
> No matter what you have in R-URI, you can force TLS via setting outbound 
> proxy address to be a TLS uri:
>
> $du = "sip:__ip_or_host__;transport=tls";
> t_relay();
>
> The IP or host you can take from R-URI without any problem via PV $rd. 
> Other option is to use function from tm - t_relay_to_tls():
>
> http://kamailio.org/docs/modules/stable/modules/tm.html#t_relay_to_udp
>
> Cheers,
> Daniel
>
> -- 
> Daniel-Constantin Mierla
> http://www.asipto.com/
>
>   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20100714/2b334228/attachment.htm>