May 2022 - FreeSWITCH-users - FreeSWITCH Mailing Lists

SIP TLS - Certificate Revocation List (CRL checks)
by Weber, Thomas 04 May '22

04 May '22

Hi We have configured FreeSWITCH to use TLS (SIPS/SRTP). This works fine except that no CRL checks seem to be performed on certificates. There does not seem to be a way to turn on CRL checks. Is this correct? If so, is there a specific reason why this has not been implemented? The TLS implementation is based on OpenSSL, so support for CRL checking should be relatively easy. Thanks for your help Thomas Wichtiger Hinweis: Diese E-Mail kann Betriebs- oder Geschäftsgeheimnisse oder sonstige vertrauliche Informationen enthalten. Sollten Sie diese E-Mail irrtümlich erhalten haben, ist Ihnen eine Kenntnisnahme des Inhalts, eine Vervielfältigung oder Weitergabe der E-Mail ausdrücklich untersagt. Bitte benachrichtigen Sie uns und vernichten Sie die empfangene E-Mail. Vielen Dank. Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal. Thank you for your cooperation.

1 0

Java esl-client repository bugs and status
by Yusuf KALAY 02 May '22

02 May '22

Hi all We are using FreeSWITCH for a long time. And there is a known issue with the java client library. But seems the repository is abandoned or not maintained anymore. I opened a PR for the two biggest known issues from Github. And I want to review from someone. Who is authorized for that? How do we progress the fix for the known issues on that repository? Thanks Yusuf

2 1

Genesys Cloud SIP integration with TLS fails with multiple retransmissions when siptrace on
by Unai Rodriguez 01 May '22

01 May '22

Dear List, We are experiencing failures with connection resets and multiple retransmissions when receiving traffic from Genesys Cloud SIP trunk on FreeSWITCH v1.10.5 and v1.10.7 once we run “sofia global siptrace on” on fs_cli as this tcpdump shows: https://www.dropbox.com/s/4ozkv38scykxvmt/fs-genesys-TLS-5061-TRACES_ON.txt ========================================================= $ grep retrans fs-genesys-TLS-5061-TRACES_ON.txt nta.c:7017 _nta_incoming_timer() nta: timer G fired, retransmitting 200 reply nta.c:7017 _nta_incoming_timer() nta: timer G fired, retransmitting 200 reply nta.c:7017 _nta_incoming_timer() nta: timer G fired, retransmitting 200 reply nta.c:7017 _nta_incoming_timer() nta: timer G fired, retransmitting 200 reply ========================================================= If we turn the sip traces off or use TCP or UDP (without TLS) it works fine. Also our setup works with Genesys on prem and pretty much any other contact centres we came across. This is turning into a blocker for us, is there a way to accelerate resolution? We’ve created it here too: https://github.com/freeswitch/sofia-sip/issues/124 Thank you With best wishes, Unai Rodriguez

1 0