[SR-Users] TLS - No ServerHello

Coy Cardwell coy.cardwell at gmail.com
Tue Nov 5 21:03:24 CET 2013


thanks, found the problem.
had to have Kamailio listen on "tls:IP:5061", not "tcp:IP:5061"




On Tue, Nov 5, 2013 at 2:37 PM, Fred Posner <fred at palner.com> wrote:

> There's a great debugging article posted to:
> http://www.kamailio.org/wiki/tutorials/tls/testing-and-debugging
>
>  What kind of response do you get from:
>
> openssl s_client -connect IPADDRESS:5061 -no_ssl2 -bugs
>
> Fred Posner | The Palner Group
> direct: 503-914-0999 | fax: 954-472-2896
>
>
> On 11/05/2013 02:09 PM, Coy Cardwell wrote:
>
>> Hi all.
>>
>> We are using Kamailio 4.0.4 in an Edge Proxy to Central Registrar
>> configuration.
>>
>> The system is in a functional state.
>>
>> Oddly, when we enable TLS, the Kamailio server never responds with a
>> Server Hello to the Client Hello for TLS, so a connection is never
>> established.
>>
>> Has anyone seen anything like this? There are no errors anywhere, the
>> server just never responds to the initial TLS Client Hello. We know the
>> packet arrives and is acknowledged at the TCP level.
>>
>> Just a bit stumped.
>>
>>
>> _______________________________________________
>> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
>> sr-users at lists.sip-router.org
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>>
>>
> _______________________________________________
> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
> sr-users at lists.sip-router.org
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20131105/6ece5049/attachment.html>


More information about the sr-users mailing list