<div dir="ltr">You might want to re-comment that certs line in the sofia profile and instead start FS with -certs <span style="font-family:arial,sans-serif;font-size:12.6666669845581px">/etc/freeswitch/certs</span><div><span style="font-family:arial,sans-serif;font-size:12.6666669845581px"><br>
</span></div><div><span style="font-family:arial,sans-serif;font-size:12.6666669845581px">Also if you use the generated wss.pem, you will have to visit the socket at least once with your browser by changing wss://your.box to <a href="https://your.box:7443">https://your.box:7443</a> and connecting and agreeing to the untrusted cert dialog.</span></div>
<div><span style="font-family:arial,sans-serif;font-size:12.6666669845581px"> </span></div><div><span style="font-family:arial,sans-serif;font-size:12.6666669845581px"><br></span></div></div><div class="gmail_extra"><br><br>
<div class="gmail_quote">On Tue, May 27, 2014 at 12:19 PM, Michael Jerris <span dir="ltr"><<a href="mailto:mike@jerris.com" target="_blank">mike@jerris.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word">No, he has the dir specified, so it won't use the default.<div><div class="h5"><div><br><div><div>On May 27, 2014, at 2:37 PM, Oleg Stolyar <<a href="mailto:olegstolyar@gmail.com" target="_blank">olegstolyar@gmail.com</a>> wrote:</div>
<br><blockquote type="cite"><div dir="ltr">Jamie,<div>I believe you need to have the wss.pem file in /usr/loca/freeswitch/certs/ directory to avoid this problem.</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">
On Tue, May 27, 2014 at 6:56 AM, Jamie McClelland <span dir="ltr"><<a href="mailto:jm@mayfirst.org" target="_blank">jm@mayfirst.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">Hi all - I'm very excited to see support for websockets in 1.4.4!<br>
<br>
However, I'm having trouble getting wss working.<br>
<br>
When I enable it, by adding the following to internal.xml:<br>
<br>
<param name="wss-binding" value=":7443"/><br>
<br>
I get the following error when I reload mod_sofia:<br>
<br>
2014-05-27 09:24:47.910948 [ERR] sofia.c:2778 Error Creating SIP UA for<br>
profile: internal (<a>sip:mod_sofia@209.234.253.18:5060;transport=udp,tcp</a>)<br>
The likely causes for this are:<br>
1) Another application is already listening on the specified address.<br>
2) The IP the profile is attempting to bind to is not local to this<br>
system.<br>
<br>
When I comment out the wss line, the error goes away.<br>
<br>
Strange... 209.234.253.18 is local to the machine, and I'm specifying<br>
7443 as the wss bind IP, not 5060 (which is specified as the "sip_port"<br>
in the internal.xml file). If I change the sip_port to a different<br>
number, I get the error, but it specifies the new sip_port.<br>
<br>
Also, accordig to lsof, port 7443 is not in use.<br>
<br>
I have ws enabled without problems.<br>
<br>
Here are the only differences between my sip_profile directory and the<br>
vanilla conf one:<br>
<br>
0 paul:/etc/freeswitch# diff -ur /usr/share/freeswitch/conf/vanilla/sip_profiles/ /etc/freeswitch/sip_profiles/|less<br>
Only in /etc/freeswitch/sip_profiles/external: mfpl-voicepulse.xml<br>
diff -ur /usr/share/freeswitch/conf/vanilla/sip_profiles/internal.xml /etc/freeswitch/sip_profiles/internal.xml<br>
--- /usr/share/freeswitch/conf/vanilla/sip_profiles/internal.xml 2014-05-22 14:39:26.000000000 -0400<br>
+++ /etc/freeswitch/sip_profiles/internal.xml 2014-05-27 09:29:29.000000000 -0400<br>
@@ -196,7 +196,7 @@<br>
<!-- Port to listen on for TLS requests. (5061 will be used if unspecified) --><br>
<param name="tls-sip-port" value="$${internal_tls_port}"/><br>
<!-- Location of the agent.pem and cafile.pem ssl certificates (needed for TLS server) --><br>
- <!--<param name="tls-cert-dir" value=""/>--><br>
+ <param name="tls-cert-dir" value="/etc/freeswitch/certs"/><br>
<!-- Optionally set the passphrase password used by openSSL to encrypt/decrypt TLS private key files --><br>
<param name="tls-passphrase" value=""/><br>
<!-- Verify the date on TLS certificates --><br>
@@ -304,7 +304,7 @@<br>
<br>
<br>
<!-- uncomment for sip over websocket support --><br>
- <!--<param name="ws-binding" value=":5066"/>--><br>
+ <param name="ws-binding" value=":5066"/><br>
<br>
<!-- uncomment for sip over secure websocket support --><br>
<!-- You need wss.pem in /usr/local/freeswitch/certs for wss --><br>
<br>
Any suggestions?<br>
<br>
jamie<br>
<br>
p.s. I do have wss.pem in /etc/freeswitch/certs<span><font color="#888888"><br></font></span></blockquote></div></div></blockquote></div><br></div></div></div></div><br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr">Anthony Minessale II ♬ @anthmfs ♬ @FreeSWITCH ♬<div><br><div>☞ <a href="http://freeswitch.org/" target="_blank">http://freeswitch.org/</a> ☞ <a href="http://cluecon.com/" target="_blank">http://cluecon.com/</a> ☞ <a href="http://twitter.com/FreeSWITCH" target="_blank">http://twitter.com/FreeSWITCH</a></div>
<div><div>☞ <a href="http://irc.freenode.net" target="_blank">irc.freenode.net</a> #freeswitch ☞ <u><a href="http://freeswitch.org/g+" target="_blank">http://freeswitch.org/g+</a></u><br><br></div><div>ClueCon Weekly Development Call <br>
</div><div>☎ <a href="mailto:sip%3A888@conference.freeswitch.org" target="_blank">sip:888@conference.freeswitch.org</a> ☎ +19193869900 </div><div><br></div></div></div></div>
</div>