[SR-Users] Enable session_id in ServerHello for TLS

Kristijan Vrban vrban.lkml at googlemail.com
Sun Mar 11 01:28:27 CET 2012


Hello, how to tell that Kamailio should juse a session_id for tls ?
See ssldump output below. I reckon that this is the reason the
client i use end with "handshake_failure". Because when is use
opensips, there is the session_id, and it's working.

Kristijan

2 1  0.0228 (0.0228)  C>S  Handshake
      ClientHello
        Version 3.1
        cipher suites
        TLS_RSA_WITH_RC4_128_MD5
        TLS_RSA_WITH_RC4_128_SHA
        TLS_RSA_WITH_NULL_MD5
        TLS_RSA_WITH_NULL_SHA
        TLS_DH_anon_WITH_3DES_EDE_CBC_SHA
        TLS_DH_anon_WITH_RC4_128_MD5
        TLS_RSA_WITH_DES_CBC_SHA
        TLS_RSA_EXPORT1024_WITH_RC4_56_SHA
        TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA
        TLS_DH_anon_WITH_DES_CBC_SHA
        compression methods
                  NULL
1    0.0519 (0.0519)  C>S  TCP FIN
2 2  0.0432 (0.0204)  S>C  Handshake
      ServerHello
        Version 3.1
        session_id[0]=

        cipherSuite         TLS_RSA_WITH_RC4_128_MD5
        compressionMethod                   NULL
2 3  0.0432 (0.0000)  S>C  Handshake
      Certificate
2 4  0.0432 (0.0000)  S>C  Handshake
      ServerHelloDone
2 5  0.0452 (0.0020)  C>S  Alert
    level           fatal
    value           handshake_failure
1    0.0744 (0.0225)  S>C  TCP FIN
2    0.0681 (0.0228)  S>C  TCP FIN



More information about the sr-users mailing list