wss-binding is set and no wss.pem can be generated due to permissions or its utterly broken. On Mon, Sep 14, 2015 at 3:21 PM, Michael Nielsen <mic.niel84@gmail.com> wrote:
none, but I've also tried with in.
On Monday, September 14, 2015, Ítalo Rossi <italo@freeswitch.org> wrote:
What you have in your tls-verify-policy ?
Check the valid values here: https://freeswitch.org/confluence/display/FREESWITCH/Sofia+Configuration+Fil...
On Mon, Sep 14, 2015 at 10:23 AM, Michael Nielsen <mic.niel84@gmail.com> wrote:
When doing so I get the following error in fs_cli:
2015-09-14 08:23:24.120749 [ERR] sofia_glue.c:329 Invalid tls-verify-policy value: none
2015-09-14 08:23:24.160528 [ERR] sofia.c:2935 Error Creating SIP UA for profile: internal-ipv6 (sip:mod_sofia@[::1]:5060;transport=udp,tcp) ATTEMPT 1 (RETRY IN 5 SEC)
2015-09-14 08:23:24.180781 [ERR] sofia.c:2935 Error Creating SIP UA for profile: internal (sip:mod_sofia@159.122.89.10:5060;transport=udp,tcp) ATTEMPT 1 (RETRY IN 5 SEC)
And then sofia status only shows port 5080 running...
On Mon, Sep 14, 2015 at 9:01 AM, Michael Nielsen <mic.niel84@gmail.com> wrote:
I'm running this clean installation of FS: https://github.com/voxserv/freeswitch_conf_minimal
Everything seems to work and I would now like to add TLS and SRTP encryption - for use on public WiFi and such.
I've tried the following from this http://wiki.freeswitch.org/wiki/SIP_TLS#TLS.2C_SSL_and_SRTP_Encryption:
./gentls_cert setup -cn pbx.freeswitch.org -alt DNS:pbx.freeswitch.org -org freeswitch.org ./gentls_cert create_server -cn pbx.freeswitch.org -alt DNS:pbx.freeswitch.org -org freeswitch.org
And in vars.xml:
<X-PRE-PROCESS cmd="set" data="sip_tls_version=sslv23"/> <X-PRE-PROCESS cmd="set" data="internal_ssl_enable=true"/>
Of course with my own domain when generating certificates.
Restarting FS and trying to connect to 5061 over TLS doesn't work. Looking in fs_cli with debug 7 doesn't output anything when the client tries to connect.
How to debug or does anyone know what's wrong? My certificates are generated automatically in /usr/conf/ssl.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Ítalo Rossi italo@freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest