[SR-Users] Question about the Secsipid module

Daniel-Constantin Mierla miconda at gmail.com
Mon Sep 26 18:50:27 CEST 2022


Hello,

secsipid_check_identity("") should be ok, because the parameter is
empty, but secsipid_check_identity() is not ok, because is no parameter.

Isn't it working when you have secsipid_check_identity("")?

It has to be one certificate, which corresponds to the key that was used
to generate the identity header. The function does not expect many
certificates and loop to see if one of them corresponds to the key.

Cheers,
Daniel

On 26.09.22 17:53, Володимир Іванець wrote:
> Hello Daniel!
>
> I started with a simpler configuration: /if
> (secsipid_check_identity()) {/ and /if (secsipid_check_identity(""))
> {/ - according to documentation: /If the parameter is empty, the
> function is downloading the key using the URL from "info" parameter of
> the Identity header, using the value od "timeout" parameter to limit
> the download time./ If this matters, I did not configure modparam
> "expire" and "timeout".
>
> When I called secsipid_check_identity with a path to the certificate,
> Kamailio started as expected.
>
> Is there something else I need to do or the
> function /secsipid_check_identity/ must receive a path to certificate
> as parameter? Also, is it safe to assume that this file can contain
> multiple certificates?
>
> Thank you very much!
>
> пн, 26 вер. 2022 р. о 17:36 Daniel-Constantin Mierla
> <miconda at gmail.com> пише:
>
>     Hello,
>
>     maybe the function is provided with invalid parameters? What's the
>     line 47 in the file?
>
>     Cheers,
>     Daniel
>
>     On 26.09.22 15:54, Володимир Іванець wrote:
>>     Hello everyone!
>>
>>     I'm testing calls with STIR/SHAKEN with a Secsipid module on a
>>     Kamailio version 5.6.1 and ran into a problem. Outbound calls
>>     work fine when the function /secsipid_add_identity/ with
>>     appropriate parameters is called. But as soon as I add function
>>     /secsipid_check_identity/ to my configuration, Kamilio would not
>>     start. Here is an error message I get:
>>
>>         /kamailio: CRITICAL: <core> [core/cfg.y:3791]: yyerror_at():
>>         parse error in config file
>>         /etc/kamailio/include/registrar.cfg, line 47, column 39:
>>         unknown command, missing loadmodule?/
>>
>>     /
>>     /
>>     /loadmodule "secsipid.so"/ is present and is above the
>>     function /secsipid_check_identity/ call. Both secsipid.so
>>     and secsipid_proc.so module files are the correct version and
>>     present on the system.
>>
>>
>>     Another question is related to the rpm package build. How do you
>>     build additional modules? I made adjustment to
>>     the pkg/kamailio/Makefile file. In the *cfg* section
>>     changed /$(MAKE) -C ../../src cfg/ with /$(MAKE) FLAVOUR=kamailio
>>     include_modules="secsipid secsipid_proc" -C ../../src cfg/.
>>     Required modules appeared in the modules.lst file but their rpm
>>     packages were not built.
>>
>>     Thank you very much!
>>
>>     __________________________________________________________
>>     Kamailio - Users Mailing List - Non Commercial Discussions
>>       * sr-users at lists.kamailio.org
>>     Important: keep the mailing list in the recipients, do not reply only to the sender!
>>     Edit mailing list options or unsubscribe:
>>       * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
>     -- 
>     Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com>
>     www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda>
>     Kamailio Advanced Training - Online
>       Nov 7-10, 2022 (Europe Timezone)
>       * https://www.asipto.com/sw/kamailio-advanced-training-online/
>
-- 
Daniel-Constantin Mierla -- www.asipto.com
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Kamailio Advanced Training - Online
  Nov 7-10, 2022 (Europe Timezone)
  * https://www.asipto.com/sw/kamailio-advanced-training-online/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20220926/6eacadbf/attachment.htm>


More information about the sr-users mailing list