Hello Brian, Yes it's turned on: <!-- TLS: disabled by default, set to "true" to enable --> <param *name="tls" value="true"*/> <!-- additional bind parameters for TLS --> <param name="tls-bind-params" value="transport=tls"/> <!-- Port to listen on for TLS requests. (5061 will be used if unspecified) --> <param name="tls-sip-port" value="5061"/> <!-- Location of the agent.pem and cafile.pem ssl certificates (needed for TLS server) --> <param name="tls-cert-dir" value="$${base_dir}/conf/ssl"/> <!-- TLS version ("sslv23" (default), "tlsv1"). NOTE: Phones may not work with TLSv1 --> <param name="tls-version" value="tlsv1"/> I recompiled it and checked the output for warnings and errors. This is what I found: configure: WARNING: python2.5 is unusable configure: WARNING: Your python lacks threads support, can not build mod_python config.status: WARNING: Makefile.in seems to ignore the --datarootdir setting ./configure: line 4234: AX_COMPILER_VENDOR: command not found config.status: WARNING: apr-config.in seems to ignore the --datarootdir setting /bin/bash: /usr/src/freeswitch/libs/curl/missing: No such file or directory configure: WARNING: `missing' script is too old or missing configure: WARNING: dlfcn.h: present but cannot be compiled configure: WARNING: dlfcn.h: check for missing prerequisite headers? configure: WARNING: dlfcn.h: see the Autoconf documentation configure: WARNING: dlfcn.h: section "Present But Cannot Be Compiled" configure: WARNING: dlfcn.h: proceeding with the preprocessor's result configure: WARNING: dlfcn.h: in the future, the compiler will take precedence libtool: line 121: CC: command not found config.status: WARNING: config/autoconf.mk.in seems to ignore the --datarootdir setting ./configure: line 1908: /shtool: No such file or directory configure: WARNING: dlfcn.h: accepted by the compiler, rejected by the preprocessor! configure: WARNING: dlfcn.h: proceeding with the compiler's result configure: WARNING: Touching files in directory tests/. config.status: WARNING: packages/sofia-sip-ua.pc.in seems to ignore the --datarootdir setting mod_lua_wrap.cpp: In function ‘int _wrap_CoreSession_hangup__SWIG_1(lua_State*)’: mod_lua_wrap.cpp:4563: warning: deprecated conversion from string constant to ‘char*’ sndfile.c: In function ‘sf_error’: sndfile.c:491: warning: the address of ‘sf_error’ will never be NULL libtool: link: warning: `-version-info/-version-number' is ignored for convenience libraries quiet_libtool: install: warning: relinking `mod_sofia.la' ../../../../libs/xmlrpc-c/src/method.c: In function ‘xmlrpc_methodCreate’: ../../../../libs/xmlrpc-c/src/method.c:213: note: ‘signatureP’ was declared here ../../../../libs/xmlrpc-c/src/parse_value.c: In function ‘xmlrpc_parseValue’: ../../../../libs/xmlrpc-c/src/parse_value.c:199: note: ‘valueElemP’ was declared here ../../../../libs/xmlrpc-c/src/parse_value.c:191: note: ‘nameElemP’ was declared here ../../../../libs/xmlrpc-c/src/parse_value.c:245: note: ‘keyP’ was declared here ../../../../libs/xmlrpc-c/src/parse_value.c:420: note: ‘fractionEnd’ was declared here ../../../../libs/xmlrpc-c/src/parse_value.c:419: note: ‘fraction’ was declared here ../../../../libs/xmlrpc-c/src/parse_value.c:418: note: ‘mantissaEnd’ was declared here ../../../../libs/xmlrpc-c/src/parse_value.c:417: note: ‘mantissa’ was declared here ../../../../libs/xmlrpc-c/src/parse_value.c:503: note: ‘valueDouble’ was declared here ../../../../libs/xmlrpc-c/src/system_method.c: In function ‘system_methodSignature’: ../../../../libs/xmlrpc-c/src/system_method.c:455: note: ‘signatureVP’ was declared here ../../../../libs/xmlrpc-c/src/xmlrpc_server_abyss.c: In function ‘handleXmlrpcReq’: ../../../../libs/xmlrpc-c/src/xmlrpc_server_abyss.c:474: note: ‘body’ was declared here ../../../../libs/xmlrpc-c/src/xmlrpc_server_abyss.c: In function ‘xmlrpc_server_abyss_create’: ../../../../libs/xmlrpc-c/src/xmlrpc_server_abyss.c:894: note: ‘socketFd’ was declared here ../../../../libs/xmlrpc-c/src/xmlrpc_server_abyss.c:893: note: ‘portNumber’ was declared here Is there anything special I have to take care aout? I also grepped the ./configure and make output for "tls" and received the following: config.status: creating scripts/gentls_cert checking for libgnutls-config... /usr/bin/libgnutls-config checking for libgnutls - version >= 0.1.0... yes It also compiles tport_type_tls.o and tport_type_tls.o When I grep for "ssl" I received the following: checking for SSL_connect in -lssl... yes checking openssl/x509.h usability... yes checking openssl/x509.h presence... yes checking for openssl/x509.h... yes checking openssl/rsa.h usability... yes checking openssl/rsa.h presence... yes checking for openssl/rsa.h... yes checking openssl/crypto.h usability... yes checking openssl/crypto.h presence... yes checking for openssl/crypto.h... yes checking openssl/pem.h usability... yes checking openssl/pem.h presence... yes checking for openssl/pem.h... yes checking openssl/ssl.h usability... yes checking openssl/ssl.h presence... yes checking for openssl/ssl.h... yes checking openssl/err.h usability... yes checking openssl/err.h presence... yes checking for openssl/err.h... yes checking openssl/pkcs12.h usability... yes checking openssl/pkcs12.h presence... yes checking for openssl/pkcs12.h... yes checking openssl/engine.h usability... yes checking openssl/engine.h presence... yes checking for openssl/engine.h... yes config.status: creating packages/Linux/RPM/curl-ssl.spec checking for openssl... yes checking openssl_CFLAGS... checking openssl_LIBS... -lssl -lcrypto gcc -Wall -DSU_DEBUG=0 -g -ggdb -o stunc stunc.o ./.libs/libstun.a ../sresolv/.libs/libsresolv.a ../su/.libs/libsu.a -lssl -lcrypto -lrt -lpthread gcc -Wall -DSU_DEBUG=0 -g -ggdb -o sip-options sip-options.o ../libsofia-sip-ua/.libs/libsofia-sip-ua.a -lssl -lcrypto -lrt -lpthread gcc -Wall -DSU_DEBUG=0 -g -ggdb -o sip-date sip-date.o ../libsofia-sip-ua/.libs/libsofia-sip-ua.a -lssl -lcrypto -lrt -lpthread gcc -Wall -DSU_DEBUG=0 -g -ggdb -o sip-dig sip-dig.o ../libsofia-sip-ua/.libs/libsofia-sip-ua.a -lssl -lcrypto -lrt -lpthread gcc -shared .libs/mod_sofia_la-mod_sofia.o .libs/mod_sofia_la-sofia.o .libs/mod_sofia_la-sofia_glue.o .libs/mod_sofia_la-sofia_presence.o .libs/mod_sofia_la-sofia_reg.o -Wl,--whole-archive /usr/src/freeswitch/libs/sofia-sip/libsofia-sip-ua/.libs/libsofia-sip-ua.a -Wl,--no-whole-archive -Wl,--rpath -Wl,/usr/local/freeswitch/lib -L/usr/local/freeswitch/lib -lfreeswitch -lssl -lcrypto -lrt -lpthread -lncurses -Wl,-soname -Wl,mod_sofia.so -o .libs/mod_sofia.so root@freeswitch:/var/log# So it seems that in fact he tries to use ssl. But I still receive 2008-08-03 18:57:32 [NOTICE] sofia.c:1883 config_sofia() Started Profile internal [sofia_reg_internal] 2008-08-03 18:57:32 [DEBUG] sofia.c:522 sofia_profile_thread_run() Creating agent for internal 2008-08-03 18:57:32 [*ERR] sofia.c:552 sofia_profile_thread_run() Error Creating SIP UA for profile: internal* Best regards Peter Brian West schrieb:
Did you turn tls on the profile on?
/b
Sent from my iPhone
On Aug 3, 2008, at 6:44 AM, Peter P GMX <Prometheus001@gmx.net> wrote:
If have done this but again the same result.
Is there any way to enhance the output in the log (currently loglevel is debug) or to determine if freeswitch was compiled correctly with TLS? At least if I grep the freeswitch binary with tls there is no occurence.
Best regards Peter
Brian West schrieb:
Make sure you install OpenSSL-Dev packages and ./configure again.
/b
On Aug 2, 2008, at 10:54 AM, Peter P GMX wrote:
Any hints how to continue?
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org