[SR-Users] Question about the Secsipid module

Daniel-Constantin Mierla miconda at gmail.com
Tue Sep 27 16:50:04 CEST 2022


Hello,

I just tested with git master branch using:

secsipid_check_identity("");

and started fine. Maybe is something else wrong in your config.

Cheers,
Daniel

On 27.09.22 13:58, Володимир Іванець wrote:
> Hello Daniel,
>
> Sorry for the delayed response. I can confirm that I get the "unknown
> command, missing loadmodule?" error when using an empty parameter /if
> (secsipid_check_identity(""))/.
>
> And thank you for the clarification about the file with the certificate.
>
> пн, 26 вер. 2022 р. о 19:50 Daniel-Constantin Mierla
> <miconda at gmail.com> пише:
>
>     Hello,
>
>     secsipid_check_identity("") should be ok, because the parameter is
>     empty, but secsipid_check_identity() is not ok, because is no
>     parameter.
>
>     Isn't it working when you have secsipid_check_identity("")?
>
>     It has to be one certificate, which corresponds to the key that
>     was used to generate the identity header. The function does not
>     expect many certificates and loop to see if one of them
>     corresponds to the key.
>
>     Cheers,
>     Daniel
>
>     On 26.09.22 17:53, Володимир Іванець wrote:
>>     Hello Daniel!
>>
>>     I started with a simpler configuration: /if
>>     (secsipid_check_identity()) {/ and /if
>>     (secsipid_check_identity("")) {/ - according to documentation:
>>     /If the parameter is empty, the function is downloading the key
>>     using the URL from "info" parameter of the Identity header, using
>>     the value od "timeout" parameter to limit the download time./ If
>>     this matters, I did not configure modparam "expire" and "timeout".
>>
>>     When I called secsipid_check_identity with a path to the
>>     certificate, Kamailio started as expected.
>>
>>     Is there something else I need to do or the
>>     function /secsipid_check_identity/ must receive a path to
>>     certificate as parameter? Also, is it safe to assume that this
>>     file can contain multiple certificates?
>>
>>     Thank you very much!
>>
>>     пн, 26 вер. 2022 р. о 17:36 Daniel-Constantin Mierla
>>     <miconda at gmail.com> пише:
>>
>>         Hello,
>>
>>         maybe the function is provided with invalid parameters?
>>         What's the line 47 in the file?
>>
>>         Cheers,
>>         Daniel
>>
>>         On 26.09.22 15:54, Володимир Іванець wrote:
>>>         Hello everyone!
>>>
>>>         I'm testing calls with STIR/SHAKEN with a Secsipid module on
>>>         a Kamailio version 5.6.1 and ran into a problem. Outbound
>>>         calls work fine when the function /secsipid_add_identity/
>>>         with appropriate parameters is called. But as soon as I add
>>>         function /secsipid_check_identity/ to my configuration,
>>>         Kamilio would not start. Here is an error message I get:
>>>
>>>             /kamailio: CRITICAL: <core> [core/cfg.y:3791]:
>>>             yyerror_at(): parse error in config file
>>>             /etc/kamailio/include/registrar.cfg, line 47, column 39:
>>>             unknown command, missing loadmodule?/
>>>
>>>         /
>>>         /
>>>         /loadmodule "secsipid.so"/ is present and is above the
>>>         function /secsipid_check_identity/ call. Both secsipid.so
>>>         and secsipid_proc.so module files are the correct version
>>>         and present on the system.
>>>
>>>
>>>         Another question is related to the rpm package build. How do
>>>         you build additional modules? I made adjustment to
>>>         the pkg/kamailio/Makefile file. In the *cfg* section
>>>         changed /$(MAKE) -C ../../src cfg/ with /$(MAKE)
>>>         FLAVOUR=kamailio include_modules="secsipid secsipid_proc" -C
>>>         ../../src cfg/. Required modules appeared in the modules.lst
>>>         file but their rpm packages were not built.
>>>
>>>         Thank you very much!
>>>
>>>         __________________________________________________________
>>>         Kamailio - Users Mailing List - Non Commercial Discussions
>>>           * sr-users at lists.kamailio.org
>>>         Important: keep the mailing list in the recipients, do not reply only to the sender!
>>>         Edit mailing list options or unsubscribe:
>>>           * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>
>>         -- 
>>         Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com>
>>         www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda>
>>         Kamailio Advanced Training - Online
>>           Nov 7-10, 2022 (Europe Timezone)
>>           * https://www.asipto.com/sw/kamailio-advanced-training-online/
>>
>     -- 
>     Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com>
>     www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda>
>     Kamailio Advanced Training - Online
>       Nov 7-10, 2022 (Europe Timezone)
>       * https://www.asipto.com/sw/kamailio-advanced-training-online/
>
-- 
Daniel-Constantin Mierla -- www.asipto.com
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Kamailio Advanced Training - Online
  Nov 7-10, 2022 (Europe Timezone)
  * https://www.asipto.com/sw/kamailio-advanced-training-online/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20220927/980e165f/attachment.htm>


More information about the sr-users mailing list