I am trying to make a TLS gateway working with my freeswitch. But it fails with Service Unavailable [503]. Though I am perfectly able to make TLS calls between phones. Only gateway is not working. I am populating gateway configuration using lua.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<document type="freeswitch/xml">
<section name="configuration">
<configuration name="sofia.conf" description="sofia Endpoint">
<global_settings>
<param name="log-level" value="0"/>
<param name="debug-presence" value="0"/>
</global_settings>
<profiles>
<profile name="external">
<aliases>
</aliases>
<gateways>
<gateway name="ab345b4c-b961-4d3a-97a9-f227b52a7240">
<param name="password" value="XXXXXXXXXXX"/>
<param name="proxy" value="203.134.5.10"/>
<param name="expire-seconds" value="800"/>
<param name="register" value="true"/>
<param name="register-transport" value="tls"/>
<param name="contact-params" value="transport=tls"/>
<param name="retry-seconds" value="30"/>
<param name="context" value="public"/>
<variables>
</variables>
</gateway>
</gateways>
<domains>
<!-- indicator to parse the directory for domains with parse="true" to get gateways-->
<!--<domain name="$${domain}" parse="true"/>-->
<!-- indicator to parse the directory for domains with parse="true" to get gateways and alias every domain to this profile -->
<!--<domain name="all" alias="true" parse="true"/>-->
<domain name="all" alias="false" parse="false"/>
</domains>
<settings>
<param name="caller-id-type" value="pid"/>
<param name="sip-trace" value="no"/>
<param name="sip-capture" value="no"/>
<param name="rfc2833-pt" value="101"/>
<param name="sip-port" value="5080"/>
<param name="dialplan" value="XML"/>
<param name="context" value="public"/>
<param name="dtmf-type" value="rfc2833"/>
<param name="dtmf-duration" value="2000"/>
<param name="inbound-codec-prefs" value="G7221@32000h,G7221@16000h,G722,PCMU,PCMA,GSM"/>
<param name="outbound-codec-prefs" value="PCMU,PCMA,GSM"/>
<param name="hold-music" value="local_stream://default"/>
<param name="zrtp-passthru" value="true"/>
<param name="rtp-timer-name" value="soft"/>
<param name="local-network-acl" value="localnet.auto"/>
<param name="manage-presence" value="false"/>
<param name="inbound-codec-negotiation" value="generous"/>
<param name="nonce-ttl" value="60"/>
<param name="auth-calls" value="false"/>
<param name="rtp-ip" value="124.40.187.231"/>
<param name="sip-ip" value="124.40.187.231"/>
<param name="ext-rtp-ip" value="124.40.187.231"/>
<param name="ext-sip-ip" value="124.40.187.231"/>
<param name="rtp-timeout-sec" value="300"/>
<param name="rtp-hold-timeout-sec" value="1800"/>
<param name="tls" value="true"/>
<param name="tls-only" value="false"/>
<param name="tls-bind-params" value="transport=tls"/>
<param name="tls-sip-port" value="5081"/>
<param name="tls-cert-dir" value="/etc/freeswitch/ssl"/>
<param name="tls-passphrase" value=""/>
<param name="tls-verify-date" value="true"/>
<param name="tls-verify-depth" value="2"/>
<param name="tls-verify-in-subjects" value=""/>
<param name="tls-version" value="tlsv1"/>
<param name="debug" value="0"/>
<param name="user-agent-string" value="FreeSWITCH"/>
</settings>
</profile>
</profiles>
</configuration>
</section>
</document>