I don't know much about OpenSIPS but it looks to me like OpenSIPS is specifically requesting to use TLS as the transport. The Contact header you showed specifically has "transport=tls". I know that OpenSIPS is quite a versatile proxy so it would not surprise me if it is able to do what you are wanting. I would ask on the OpenSIPS mailing list for tips on how to accomplish this. Bogan (creator of OpenSIPS) knows a lot about FreeSWITCH as well. If this can be done they'll be happy to show you how. If you figure it out please come back and tell us if you had to make changes to OpenSIPS config, FreeSWITCH config, or both.

Thanks,
Michael

On Mon, Mar 25, 2013 at 4:03 PM, Chusov Alexsander <chusov.alexsandr@gmail.com> wrote:
     Hello all,

I'm trying to deploy FreeSWITCH as a back-end for Opensips (
http://wiki.freeswitch.org/wiki/Opensips ). TLS -> Opensips -> UDP ->
FreeSWITCH
TLS work fine end point is registered. But when call phone FreeSWITCH
send invite use TLS instead of UDP.

Register exsample:
172.20.0.24 - opensips
172.20.0.22 - freeswitch
172.20.0.20 - phone

    REGISTER sip:172.20.0.22:5060 SIP/2.0
    Via: SIP/2.0/UDP 172.20.0.24;branch=z9hG4bK3641.9fabd823.0;i=15
    Via: SIP/2.0/TLS
172.20.0.20:5060;received=172.20.0.20;branch=z9hG4bK1590064540;rport=47050;alias
    From: <sip:1001@172.20.0.24:5061>;tag=1518243149
    To: <sip:1001@172.20.0.24:5061>
    Call-ID: 1616382919-5060-1@BHC.CA.A.CA
    CSeq: 2505 REGISTER
    Contact:
<sip:1001@172.20.0.20:5060;transport=tls>;reg-id=1;+sip.instance="<urn:uuid:00000000-0000-1000-8000-000B823DB6B2>"
    Authorization: Digest username="1001", realm="172.20.0.24",
nonce="102dacd4-959f-11e2-8317-67a135a6f66b",
uri="sip:172.20.0.24:5061", response="8f80bc7f8fb5fe5a895a5b39f9b5cde6",
algorithm=MD5, cnonce="12386720", qop=auth, nc=00000005
    Max-Forwards: 30
    User-Agent: Grandstream GXP1405 1.0.5.10
    Supported: path
    Expires: 300
    Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, INFO,
REFER, UPDATE, MESSAGE
    Content-Length: 0
    Path: <sip:172.20.0.24;r2=on;lr;received=sip:172.20.0.20:47050>
    X-AUTH-IP: 172.20.0.20

Call-ID:        1616382919-5060-1@BHC.CA.A.CA
User:           1001@172.20.0.22
Contact:        "user"
<sip:1001@172.20.0.20:5060;transport=tls;fs_path=%3Csip%3A172.20.0.24%3Br2%3Don%3Blr%3Breceived%3Dsip%3A172.20.0.20%3A47050%3E>
Agent:          Grandstream GXP1405 1.0.5.10
Status:         Registered(TLS)(unknown) EXP(2013-03-26 01:01:18)
EXPSECS(309)
Host:           172.20.0.22
IP:             172.20.0.24
Port:           5060
Auth-User:      1001
Auth-Realm:     172.20.0.24
MWI-Account:    1001@172.20.0.22


sofia/internal/sip:1001@172.20.0.20:5060;transport=tls;fs_path=%3Csip%3A172.20.0.24%3Br2%3Don%3Blr%3Breceived%3Dsip%3A172.20.0.20%3A47050%3E

I'm not familiar with C + + to test made small changes I understand it's
not right but it works
in src/mod/endpoints/mod_sofia/sofia_glue.c  1233, 1348  change

         } else if (!strncasecmp(str, "tls", 3)) {
                 return SOFIA_TRANSPORT_TCP_TLS;
         }

to
         } else if (!strncasecmp(str, "tls", 3)) {
                 return SOFIA_TRANSPORT_UDP;
         }



Can anyone tell how to configure FreeSWITCH for normal UDP->TLS TLS->UDP
work. Or maybe I'm doing something wrong?


Sorry for my english




_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--
Michael S Collins
Twitter: @mercutioviz
http://www.FreeSWITCH.org
http://www.ClueCon.com
http://www.OSTAG.org