Wow.... fixed. TLS is working. It is looking that as default it is not included in FusionPBX (strange). So I did bootstrap and configure -C and then full rebuild and re-installation. Now my TLS posts are active and assigned. I just do not understand why it was not as default build in the FusionPBX (I was using install script - so maybe this was just excluded - but I can not belive....). So after rebuild I'm able to use TLS and all other settings. And I found that on the mailing-list archive... - bot easy to find - but sb had the same issue. BRGDS Michal On Tue, Jan 28, 2014 at 8:06 PM, Michal Borkowski - MORCOM <morcom@wiwat.pl>wrote:
Hi!
As I'm not sure if this reached the list (it was going from wrong e-mail) I'm posting this again.... sorry if it was received.
====
Hi,
I have as well another issue. I have external and internal profiles set to use TLS which is on port 52060(52080 ext), normall not TLS communication is on 52060 (52081 ext).
Unfortunately when I try to start my7 external/internal profile with TLS enabled set to TRUE I'm getting:
freeswitch@internal> sofia profile external start Reload XML [Success] external started successfully
2014-01-28 16:29:28.224889 [INFO] mod_pocketsphinx.c:644 PocketSphinx Reloaded 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 debug [0] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 sip-trace [no] 2014-01-28 16:29:28.224889 [INFO] mod_enum.c:876 ENUM Reloaded 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 sip-capture [no] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 rfc2833-pt [101] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 sip-port [52080] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 dialplan [XML] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 context [public] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 dtmf-duration [2000] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 inbound-codec-prefs [G7221@32000h,G7221@16000h,G722,PCMU,PCMA,GSM] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 outbound-codec-prefs [PCMU,PCMA,GSM] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 hold-music [local_stream://default] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 rtp-timer-name [soft] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 local-network-acl [localnet.auto] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 manage-presence [false] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 aggressive-nat-detection [true] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 inbound-codec-negotiation [generous] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 nonce-ttl [60] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 auth-calls [false] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 inbound-late-negotiation [true] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 inbound-zrtp-passthru [true] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 rtp-ip [192.168.1.30] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 sip-ip [192.168.1.30] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 ext-rtp-ip [auto-nat] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 ext-sip-ip [auto-nat] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 rtp-timeout-sec [300] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 rtp-hold-timeout-sec [1800] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 tls [true] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 tls-only [false] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 tls-bind-params [transport=tls] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 tls-sip-port [52091] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 tls-cert-dir [/usr/local/freeswitch/conf/ssl] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 tls-passphrase [] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 tls-verify-date [true] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 tls-verify-policy [none] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 tls-verify-depth [2] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 tls-verify-in-subjects [] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:3716 tls-version [tlsv1] 2014-01-28 16:29:28.224889 [NOTICE] sofia.c:4844 Started Profile external [sofia_reg_external] 2014-01-28 16:29:28.224889 [DEBUG] sofia.c:2411 Creating agent for external 2014-01-28 16:29:28.224889 [INFO] switch_time.c:1191 Timezone reloaded 530 definitions 2014-01-28 16:29:28.224889 [ERR] sofia.c:2500 Error Creating SIP UA for profile: external (sip:mod_sofia@192.168.1.30:52080) The likely causes for this are: 1) Another application is already listening on the specified address. 2) The IP the profile is attempting to bind to is not local to this system. freeswitch@internal>
And the profile is not starting. In that case for test the TLS was set to use port 52091.... What is wrong - where could be the mistake? I think there is something wrong in my settings but I'm not sure where. If the tls is set to false - external starts file. Is this trying to bind both services to the same port????
With best regards/Z pozdrowieniami
Michał Borkowski