You may be able to pull more info from the connection's entry on the Network tab of the developer's console. In normal circumstances, it should show a HTTP response code of 101 and a negotiation response like:

Connection:Upgrade
Sec-WebSocket-Accept:oVcPX2zhUVgae46nZWQT3WyOOQ0=
Upgrade:websocket

I bet the latter is not coming through since the connection is reset.

If you cannot get any relevant info from this angle, I think a packet capture is the next step.

-C

On 10 July 2014 17:07, Javier Menendez <menendez.garcia@gmail.com> wrote:

Thanks ciprian,

I am trying to debug this with chrome, I tryed to make a raw websocket connection
 conn = new WebSocket("wss://myhost:10081")

and I got a readyState 3. that's all I can debug :/

If I access to https://myhost:10081/ it says verified, and its green...

On Thu, Jul 10, 2014 at 5:40 PM, Ciprian Dosoftei <ciprian.dosoftei@gmail.com> wrote:

Javier,

It looks like the client is resetting the connection, it may after all be a SSL issue.

Best way to start debugging is to pop up the developer console (I use Chrome and it never disappoints me when it comes down to tracking down issues) and see what's unusual with that WSS connection.

-Ciprian

On 10 July 2014 12:27, Javier Menendez <menendez.garcia@gmail.com> wrote:

Hi,

I am trying to get the wss connection work, tried everything and still doesn't work, I don't think it is a certificate problem because if I try this manually:

curl -v https://myhost.com:10081/ -H "Upgrade: WebSocket" -H "Connection: Upgrade" -H "Sec-WebSocket-Protocol: sip" -H "Sec-WebSocket-Key: +LLGYSDSKelND6UVF9z71w==" -H "Sec-WebSocket-Version: 13"
* About to connect() to myhost.com port 10081 (#0)
*   Trying X.X.X.X... connected
* Connected to myhost.com (X.X.X.X) port 10081 (#0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using AES256-SHA
* Server certificate:
*      subject: OU=Domain Control Validated; CN=myhost.com
*      start date: 2014-06-16 10:09:42 GMT
*      expire date: 2016-06-07 11:02:46 GMT
*      subjectAltName: myhost.com matched
*      issuer: C=US; ST=Arizona; L=Scottsdale; O=GoDaddy.com, Inc.; OU=http://certs.godaddy.com/repository/; CN=Go Daddy Secure Certificate Authority - G2
*      SSL certificate verify ok.
> GET / HTTP/1.1
> User-Agent: curl/7.21.0 (i486-pc-linux-gnu) libcurl/7.19.7 OpenSSL/0.9.8o zlib/1.2.3.3 libidn/1.15
> Host: myhost.com:10081
> Accept: */*
> Upgrade: WebSocket
> Connection: Upgrade
> Sec-WebSocket-Protocol: sip
> Sec-WebSocket-Key: +LLGYSDSKelND6UVF9z71w==
> Sec-WebSocket-Version: 13
>
< HTTP/1.1 101 Switching Protocols
< Upgrade: websocket
< Connection: Upgrade
< Sec-WebSocket-Accept: CQsVOMdurBA

so it seems to work, but if I try with jssip or sipml5 library I got this trace log and the socket gets disconnected within half second

freeswitch@internal> tport.c:2749 tport_wakeup_pri() tport_wakeup_pri(0x7f2198004f20): events IN
tport.c:862 tport_alloc_secondary() tport_alloc_secondary(0x7f2198004f20): new secondary tport 0x7f21980afb20
tport.c:2640 tport_accept() tport_accept(0x7f21980afb20): new connection from wss/130.117.88.33:62056/sips
tport.c:2773 tport_wakeup() tport_wakeup(0x7f21980afb20): events IN
tport.c:2864 tport_recv_event() tport_recv_event(0x7f21980afb20)
tport.c:2296 tport_set_secondary_timer() tport(0x7f21980afb20): reset timer
tport.c:2773 tport_wakeup() tport_wakeup(0x7f21980afb20): events IN HUP ERR
nta.c:2719 agent_tp_error() nta_agent: tport: Conexión reinicializada por la máquina remota
tport.c:2090 tport_close() tport_close(0x7f21980afb20): wss/130.117.88.33:62056/sips

I am using last version from git and I also tried with 1.4 versions.

I have accept-blind-auth and accept-blind-reg to true, any clue?

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

--
Best Regards,
Ciprian Dosoftei

The information transmitted is intended only for the addressee and may contain privileged and/or confidential material. If you are not the intended recipient, kindly contact the sender and delete the message.

Any disclosure, distribution or copying of this message is strictly prohibited without the expressed permission of the sender.

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

--
Best Regards,
Ciprian Dosoftei

The information transmitted is intended only for the addressee and may contain privileged and/or confidential material. If you are not the intended recipient, kindly contact the sender and delete the message.

Any disclosure, distribution or copying of this message is strictly prohibited without the expressed permission of the sender.

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org