<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Courier New";}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>HI MiKe,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>I have not, but we have been looking into it.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Have you seen this thread:<o:p></o:p></span></p><p class=MsoNormal><a href="http://lists.freeswitch.org/pipermail/freeswitch-users/2008-May/003233.html">http://lists.freeswitch.org/pipermail/freeswitch-users/2008-May/003233.html</a><o:p></o:p></p><p class=MsoNormal>where Brian West says:<o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:black'>You need to make sure you have openssl-devel when you configure/ <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:black'>compile Sofia otherwise it's not enabled. Also their is more to it <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:black'>than "bin/gentls_cert setup"<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New";color:black'><a href="http://wiki.freeswitch.org/wiki/Tls">http://wiki.freeswitch.org/wiki/Tls</a><o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>And Helmut Kuper responds with:<o:p></o:p></p><pre><span style='color:black'>ok works now. I had to install libgnutls-dev befor running ./configure<o:p></o:p></span></pre><pre><span style='color:black'>script. TLS works with default-values of "bin/gentls_cert setup" and<o:p></o:p></span></pre><pre><span style='color:black'>"bin/gentls_cert create".<o:p></o:p></span></pre><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Hope that helps,<o:p></o:p></p><p class=MsoNormal>Sean<o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] <b>On Behalf Of </b>Mi Ke<br><b>Sent:</b> Thursday, June 21, 2012 9:17 AM<br><b>To:</b> FreeSWITCH Users Help<br><b>Subject:</b> Re: [Freeswitch-users] gateway registration using TLS<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'>Hi Sean,<br><br>It seems that setting realm port to 5061 does not set registration mode to TLS - this is how remote server sees our reg attempt:<br><br>REGISTER <a href="sip:server_ip:5061;transport=tcp">sip:server_ip:5061;transport=tcp</a> SIP/2.0<br>Via: SIP/2.0/TCP our_ip;branch=z9hG4bKXK27gKtt61X9a<br>Max-Forwards: 70<br>From: <<a href="sip:xxxx@server_ip:5061">sip:xxxx@server_ip:5061</a>>;tag=Q4ytjXN7t319Q<br>To: <<a href="sip:xxxx@server_ip:5061">sip:xxxx@server_ip:5061</a>><br>Call-ID: 29e638e8-ba6d-11e1-aa8e-e35fbde939c6<br>CSeq: 29804746 REGISTER<br>Contact: <<a href="sip:gw+xxxx@our_ip:5060;transport=tcp;gw=xxxx">sip:gw+xxxx@our_ip:5060;transport=tcp;gw=xxxx</a>><br>Expires: 3600<br>User-Agent: FreeSWITCH-mod_sofia/1.2.0-rc2<br>Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY<br>Supported: timer, precondition, path, replaces<br>Content-Length: 0<br><br>Instead of switching to TLS mode FS just sends plain unencrypted reg request to remote port 5061. After that remote server closes connection.<br><br>Have you practically succeded in placing FS into TLS registration mode?<br><br>Cheers / Mike<o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 4.0pt;margin-left:3.75pt;margin-right:0in'><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'>----- Original Message -----<o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'>From: Sean Devoy<o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'>Sent: 06/20/12 10:27 PM<o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'>To: 'FreeSWITCH Users Help'<o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'>Subject: Re: [Freeswitch-users] gateway registration using TLS<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'><o:p> </o:p></span></p><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>NO, sorry. I just saw “remote_ip_here” in the error message and thought may you actually had used that.</span><o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Sorry.</span><o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> <a href="mailto:freeswitch-users-bounces@lists.freeswitch.org">freeswitch-users-bounces@lists.freeswitch.org</a> <a href="mailto:[mailto:freeswitch-users-bounces@lists.freeswitch.org]">[mailto:freeswitch-users-bounces@lists.freeswitch.org]</a> <b>On Behalf Of </b>Mi Ke<br><b>Sent:</b> Wednesday, June 20, 2012 12:20 PM<br><b>To:</b> FreeSWITCH Users Help<br><b>Subject:</b> Re: [Freeswitch-users] gateway registration using TLS</span><o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'>Dear Sean,<br><br>It's not that bad - remote_ip, xxx and yyy are only placeholders in my example - actual config has real params ;)<br><br>Did you mean that FS will automatically use TLS <u>for registration</u> when I append :5061 to realm value ?<br><br>Thanks / MiKe</span><o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 4.0pt;margin-left:3.75pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt'><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'>----- Original Message -----<o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'>From: Sean Devoy<o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'>Sent: 06/20/12 07:03 PM<o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'>To: 'FreeSWITCH Users Help'<o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'>Subject: Re: [Freeswitch-users] gateway registration using TLS<o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Mi Ke,</span><o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>You should put your actual remote provider’s domain name or tip address in where it says “</span><span style='font-size:9.0pt;font-family:"Verdana","sans-serif";color:red'>remote_ip_here</span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>” and I assume you have entered you actual username and password where it says “yyy” and “zzz”.</span><o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>It should look SIMILAR to this, but with your provider: </span><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'><param name="realm" value="<span style='color:red'>sip.voipinnovations.com</span>:5061"/></span><o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Hope that helps,</span><o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Sean</span><o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> <a href="mailto:freeswitch-users-bounces@lists.freeswitch.org">freeswitch-users-bounces@lists.freeswitch.org</a> <a href="mailto:%5Bmailto:freeswitch-users-bounces@lists.freeswitch.org%5D">[mailto:freeswitch-users-bounces@lists.freeswitch.org]</a> <b>On Behalf Of </b>Mi Ke<br><b>Sent:</b> Wednesday, June 20, 2012 11:46 AM<br><b>To:</b> Freeswitch Users<br><b>Subject:</b> [Freeswitch-users] gateway registration using TLS</span><o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'>Hi All,<br><br>Is it possible to explicitly tell sofia to register as a client using TLS? Here's my TLS-related part of sofia config:<br><br> <profiles><br> <profile name="external"><br> <domains><br> <domain name="all" alias="true" parse="false"/><br> </domains><br> <gateways><br> <gateway name="xxx"><br> <param name="register" value="true"/><br> <param name="username" value="yyy"/><br> <param name="realm" value="<span style='color:red'>remote_ip_here</span>:5061"/><br> <param name="password" value="zzz"/><br> <param name="register-transport" value="tcp"/><br> <param name="expire-seconds" value="3600"/><br> <param name="retry-seconds" value="60" /><br> </gateway><br> </gateways><br> <settings><br> ...<br> <param name="context" value="external"/><br> <param name="sip-port" value="5060"/><br> <param name="tls" value="true"/><br> <param name="tls-only" value="false"/><br> <param name="tls-bind-params" value="transport=tls"/><br> <param name="contact-params" value="tport=tcp"/><br> <param name="tls-version" value="sslv23"/><br> <param name="tls-cert-dir" value="/usr/local/freeswitch/conf/ssl"/><br> <param name="tls-sip-port" value="5061"/><br> <param name="dialplan" value="XML"/><br> ...<br><br> </settings><br> </profile><br> </profiles><br><br>But that does not work...<br><br>tport_connected( </span><o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><div id=":10l"><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'>0x7f9b44014110): events CONNECTED<br>tport_send_event(0x7f9b44014110) - ready to send to (tcp/<a href="http://212.58.166.54:5061" target="_blank">remote_ip_here:5061</a>)<br>tport_vsend(0x7f9b44014110): 600 bytes of 600 to tcp/<a href="http://212.58.166.54:5061" target="_blank">remote_ip_here:5061</a><br>tport_vsend returned 600<br>tport_set_events(0x7f9b44014110): events IN<br>tport(0x7f9b44014110): reset timer<br>tport_wakeup(0x7f9b44014110): events IN HUP ERR<br>tport_release(0x7f9b44014110): 0x7f9b4401a460 by 0x7f9b4402ca70 with (nil)<br><span style='background:#FF6666'>nta: REGISTER (29733430): Connection reset by peer (104) with tcp/[remote_ip_here]:5061</span><br><span style='background:#FF6666'>nua(0x7f9b440196a0): event r_register 503 Service Unavailable</span> </span><o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p></div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><br><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'>Any ideas what I'm doing wrong?<br><br>Thanks / MiKe</span><o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p></div></div></div></blockquote><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p></div></div></blockquote><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p></div></body></html>