<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">The "none" option for the policy is
part of the old standard config, no idea why it doesn't work
(anymore?). Seen that error a lot, but it never prevented the
profile from setting up the socket.<br>
<br>
You sure none of these ports are already in use? (netstat -lpn)
Does the box have an IPv6 interface? Is 159.122.89.10 configured
on any interface?<br>
<br>
If you did not get this error and the SIP profiles were loading
properly before your TLS changes, revert and do it step by step.
You can issue a "reload mod_sofia" to test the new config without
restarting FS.<br>
<br>
<br>
On 14.09.2015 17:21, Michael Nielsen wrote:<br>
</div>
<blockquote
cite="mid:CAKLKb5kCBuUwLrp3bqG6bnSRHhEdUkR2OT-Q_gB4sRrkvMBhBQ@mail.gmail.com"
type="cite">none, but I've also tried with in. <br>
<br>
On Monday, September 14, 2015, Ítalo Rossi <<a
moz-do-not-send="true" href="mailto:italo@freeswitch.org"><a class="moz-txt-link-abbreviated" href="mailto:italo@freeswitch.org">italo@freeswitch.org</a></a>>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div>What you have in your tls-verify-policy ?</div>
<div><br>
</div>
Check the valid values here: <a moz-do-not-send="true"
href="https://freeswitch.org/confluence/display/FREESWITCH/Sofia+Configuration+Files#SofiaConfigurationFiles-Settings"
target="_blank">https://freeswitch.org/confluence/display/FREESWITCH/Sofia+Configuration+Files#SofiaConfigurationFiles-Settings</a><br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Sep 14, 2015 at 10:23 AM,
Michael Nielsen <span dir="ltr"><<a
moz-do-not-send="true"
href="javascript:_e(%7B%7D,'cvml','mic.niel84@gmail.com');"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:mic.niel84@gmail.com">mic.niel84@gmail.com</a></a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">When doing so I get the following error in
fs_cli:
<div><br>
</div>
<div>
<p
style="margin:0px;font-size:10px;font-family:Monaco;color:rgb(195,55,32);background-color:rgb(0,0,0)">2015-09-14
08:23:24.120749 [ERR] sofia_glue.c:329 Invalid
tls-verify-policy value: none</p>
</div>
<div>
<p
style="margin:0px;font-size:10px;font-family:Monaco;color:rgb(195,55,32);background-color:rgb(0,0,0)">2015-09-14
08:23:24.160528 [ERR] sofia.c:2935 Error Creating
SIP UA for profile: internal-ipv6
(<a class="moz-txt-link-freetext" href="sip:mod_sofia@">sip:mod_sofia@</a>[::1]:5060;transport=udp,tcp) ATTEMPT
1 (RETRY IN 5 SEC)</p>
<p
style="margin:0px;font-size:10px;font-family:Monaco;color:rgb(195,55,32);background-color:rgb(0,0,0)">2015-09-14
08:23:24.180781 [ERR] sofia.c:2935 Error Creating
SIP UA for profile: internal
(<a class="moz-txt-link-freetext" href="sip:mod_sofia@159.122.89.10:5060;transport=udp,tcp">sip:mod_sofia@159.122.89.10:5060;transport=udp,tcp</a>)
ATTEMPT 1 (RETRY IN 5 SEC)</p>
</div>
<div><br>
</div>
<div>And then sofia status only shows port 5080
running...</div>
</div>
<div>
<div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Sep 14, 2015 at
9:01 AM, Michael Nielsen <span dir="ltr"><<a
moz-do-not-send="true"
href="javascript:_e(%7B%7D,'cvml','mic.niel84@gmail.com');"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:mic.niel84@gmail.com">mic.niel84@gmail.com</a></a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0
0 .8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div dir="ltr">I'm running this clean
installation of FS:
<div><a moz-do-not-send="true"
href="https://github.com/voxserv/freeswitch_conf_minimal"
target="_blank">https://github.com/voxserv/freeswitch_conf_minimal</a><br>
</div>
<div><br>
</div>
<div>Everything seems to work and I would now
like to add TLS and SRTP encryption - for
use on public WiFi and such.</div>
<div><br>
</div>
<div>I've tried the following from this <a
moz-do-not-send="true"
href="http://wiki.freeswitch.org/wiki/SIP_TLS#TLS.2C_SSL_and_SRTP_Encryption"
target="_blank"><a class="moz-txt-link-freetext" href="http://wiki.freeswitch.org/wiki/SIP_TLS#TLS.2C_SSL_and_SRTP_Encryption">http://wiki.freeswitch.org/wiki/SIP_TLS#TLS.2C_SSL_and_SRTP_Encryption</a></a>:</div>
<div><br>
</div>
<div>
<pre style="font-family:monospace,Courier;padding:1em;border:1px dashed rgb(47,111,171);color:rgb(0,0,0);background-color:rgb(249,249,249);line-height:1.3em;font-size:13px">./gentls_cert setup -cn <a moz-do-not-send="true" href="http://pbx.freeswitch.org" target="_blank">pbx.freeswitch.org</a> -alt DNS:<a moz-do-not-send="true" href="http://pbx.freeswitch.org" target="_blank">pbx.freeswitch.org</a> -org <a moz-do-not-send="true" href="http://freeswitch.org" target="_blank">freeswitch.org</a>
./gentls_cert create_server -cn <a moz-do-not-send="true" href="http://pbx.freeswitch.org" target="_blank">pbx.freeswitch.org</a> -alt DNS:<a moz-do-not-send="true" href="http://pbx.freeswitch.org" target="_blank">pbx.freeswitch.org</a> -org <a moz-do-not-send="true" href="http://freeswitch.org" target="_blank">freeswitch.org</a>
</pre>
</div>
<div>And in vars.xml:</div>
<div>
<pre style="font-family:monospace,Courier;padding:1em;border:1px dashed rgb(47,111,171);color:rgb(0,0,0);background-color:rgb(249,249,249);line-height:1.3em;font-size:13px"><X-PRE-PROCESS cmd="set" data="sip_tls_version=sslv23"/>
<X-PRE-PROCESS cmd="set" data="internal_ssl_enable=true"/>
</pre>
</div>
<div>Of course with my own domain when
generating certificates.</div>
<div><br>
</div>
<div>Restarting FS and trying to connect to
5061 over TLS doesn't work.</div>
<div>Looking in fs_cli with debug 7 doesn't
output anything when the client tries to
connect.</div>
<div><br>
</div>
<div>How to debug or does anyone know what's
wrong? My certificates are generated
automatically in /usr/conf/ssl.</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a moz-do-not-send="true"
href="javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');"
target="_blank">consulting@freeswitch.org</a><br>
<a moz-do-not-send="true"
href="http://www.freeswitchsolutions.com"
rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a moz-do-not-send="true" href="http://www.freeswitch.org"
rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a moz-do-not-send="true"
href="http://confluence.freeswitch.org" rel="noreferrer"
target="_blank">http://confluence.freeswitch.org</a><br>
<a moz-do-not-send="true" href="http://www.cluecon.com"
rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a moz-do-not-send="true"
href="javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');"
target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a moz-do-not-send="true"
href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users"
rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a moz-do-not-send="true"
href="http://lists.freeswitch.org/mailman/options/freeswitch-users"
rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a moz-do-not-send="true" href="http://www.freeswitch.org"
rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div>
<div dir="ltr">Ítalo Rossi
<div><a moz-do-not-send="true"
href="javascript:_e(%7B%7D,'cvml','italo@freeswitch.org');"
target="_blank">italo@freeswitch.org</a></div>
</div>
</div>
</div>
</blockquote>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
<a class="moz-txt-link-abbreviated" href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a>
Official FreeSWITCH Sites
<a class="moz-txt-link-freetext" href="http://www.freeswitch.org">http://www.freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://confluence.freeswitch.org">http://confluence.freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://www.cluecon.com">http://www.cluecon.com</a>
FreeSWITCH-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a>
UNSUBSCRIBE:<a class="moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/options/freeswitch-users">http://lists.freeswitch.org/mailman/options/freeswitch-users</a>
<a class="moz-txt-link-freetext" href="http://www.freeswitch.org">http://www.freeswitch.org</a></pre>
</blockquote>
<br>
</body>
</html>