[SR-Users] Fwd: enable only TLS transport on kamailio 4
johnc
johnc at aktivix.org
Sun Jun 23 17:25:58 CEST 2013
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi,
I'll try and do it tonight or tomorrow night. To re-create the error I
think you would have to drop:
listen=tls:127.0.0.1:5061
and add:
listen=tls:192.168.0.1:5061
or whatever your IP was. Adding:
listen=tcp:127.0.0.1:5061 was the workaround.
Anyway, I will test this config and mine if necessary and supply trace.
Thanks.
Regards,
John
On 23/06/13 16:06, Daniel-Constantin Mierla wrote:
> OpenPGP: *Parts of the message have NOT been signed or encrypted*
>
> Hello,
>
> open an issue on bug tracker so it is not forgotten - the ling is
> on the right sidebar at kamailio.org
>
> Issue as known at some point I started to look at it with a simple
> config (pasted below), but was no crashing, then I had no time to
> get back to it. Attach the backtrace taken with gdb from coredump.
>
> Cheers, Daniel
>
> #!KAMAILIO
>
> debug=3 memdbg=5 memlog=5
>
> log_stderror=yes
>
> fork=yes children=2
>
> auto_aliases=no
>
> enable_tls=yes
>
> listen=tls:127.0.0.1:5061
>
> mpath="modules"
>
> loadmodule "mi_fifo.so" loadmodule "kex.so" loadmodule "pv.so"
> loadmodule "xlog.so" loadmodule "tls.so"
>
> modparam("mi_fifo", "fifo_name", "/tmp/kamailio_fifo")
>
> modparam("tls", "config", "../etc/tls.cfg")
>
> route { xlog("new request from $si\n"); }
>
> On 6/22/13 7:41 PM, johnc wrote:
>
> ********* *BEGIN ENCRYPTED or SIGNED PART* *********
>
> Sorted :-) either a regression or else this bug was never squashed
> http://lists.kamailio.org/pipermail/sr-users/2012-November/075642.html
>
> I did the suggested work-around:
>
> added "listen=tcp:127.0.0.1:5061" to config
>
> Where do I fill out a bug report?
>
> -------- Original Message -------- Subject: [SR-Users] enable only
> TLS transport on kamailio 4 Date: Sat, 22 Jun 2013 11:17:51 +0100
> From: johnc <johnc at aktivix.org> Reply-To: Kamailio (SER) - Users
> Mailing List <sr-users at lists.sip-router.org> To: sr >> "Kamailio
> (SER) - Users Mailing List" <sr-users at lists.sip-router.org>
>
> Hi,
>
> I wish to enable only TLS transport listening on port 5061 for
> domain xyz.com (say)
>
> What combination of the following do I need? alias= listen= port=
>
> Everything I've attempted so far has resulted in a segfault or
> kamailio failing to start. My existing configuration works fine
> for TLS if I don't try and disable any other transport.
>
> I am currently enforcing TLS via iptables as a crude hack. Any
> help would be greatly appreciated.
>
> Many thanks.
>
> Regards, John
>
>
> _______________________________________________ SIP Express Router
> (SER) and Kamailio (OpenSER) - sr-users mailing list
> sr-users at lists.sip-router.org
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>
>
> ********** *END ENCRYPTED or SIGNED PART* **********
>
> _______________________________________________ SIP Express Router
> (SER) and Kamailio (OpenSER) - sr-users mailing list
> sr-users at lists.sip-router.org
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iQIcBAEBAgAGBQJRxeHPAAoJELy1jPQ1KER7cRYQAMqxHhJs2nYE5uLarJf1BXy1
> hTp4QccRO17ak4Mz9qXFf1oFDsgOwQ7eHM7aPgmQXblFRGyAoSp0qk5vx0gaiihc
> SETs894BNNhNFchh+bJTpZLpFMzxoFs6ByoyAQhsq2I9RyA76Ol6QGIZmDWdTEq+
> qwr7O4Ijot/hy9RctS1FZfNBSF+hVabwZOqFHST4DCbx3IRjXMp8Ux1GDTnl9Z3q
> arUPnS+4CW/UQ8KIQ+6nTppWw9yPXhhIl+MENjBu8TXgiYPYrYm+BZrSa1fJfkXu
> S7PR6Aj2Tnq6pUVnUljKvryMiSgiaUkndk4JH2XCmcVwUHCivY9SS1VDCrdF36i+
> H1ooI6H+vcR68BeLg5pVAZAaGTPkt0H/okq6OiJyWC0lpPT3DZLPP2giIJCxcReb
> DMSm3tYAaanOZRHoMErbwZ8xRcpM0I4UZ8/+YC0xmL3MniwStZR6aWYpxN7SzrK6
> c/7aUaxv/K9M/uXkjcbsoTbB8StYLrMheiOCDidaUq6iU+1ZRzL0mDtBsjDA4mSr
> eh27haj3s6ZJ2ET3thKc2tIBw1f4VxM+yV44Lh/EfH+9ovo2mG8Rh9prCN3SkJyZ
> /P4vL5m0E4h/SPmUL+29SLZehgFvdV9X2O7t8n/JlbO1FKYtuTKMSzHDjwoM+KU2
> 9MxyqXVLT+cqZCLXseCo =r2U6 -----END PGP SIGNATURE-----
>
> _______________________________________________ SIP Express Router
> (SER) and Kamailio (OpenSER) - sr-users mailing list
> sr-users at lists.sip-router.org
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>
> -- Daniel-Constantin Mierla - http://www.asipto.com
> http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
>
>
> _______________________________________________ SIP Express Router
> (SER) and Kamailio (OpenSER) - sr-users mailing list
> sr-users at lists.sip-router.org
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/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=oyYi
-----END PGP SIGNATURE-----
More information about the sr-users
mailing list