Thanks Stefan, that’s a huge help - hadn’t crossed my mind it could be a cert error, given the description. I’m currently using letsencrypt’s certbot to download the certs and symbolic linking to them. Maybe I should just try the generator that the docs recommend, but am wondering if that will present the non-valid CA issues one gets with web browsers (I’m not all that clear on whether this applies to SIP clients or not?!)...
On 20 Mar 2017, at 15:36, Stefan Davids <freeswitch@stefan.davids.uk.net> wrote:
For what it's worth I've had this error when freeswitch couldn't open the required certificates for SSL.
Turning up the freeswitch logging revealed the system call to open the certicate was failing with no such file...
On Fri, March 17, 2017 8:25 pm, Rick Jarvis wrote:
also, the thing thatâs really bugging me ATM is that if I enable TLS, just by setting the following:
<X-PRE-PROCESS cmd="set" data="internal_ssl_enable=true"/>
I get:
2017-03-17 20:22:05.762756 [ERR] sofia.c:2863 Error Creating SIP UA for profile: internal (sip:mod_sofia@12.34.56.78:5060;transport=udp,tcp) The likely causes for this are: 1) Another application is already listening on the specified address. 2) The IP the profile is attempting to bind to is not local to this system.
Yet the TLS port is set to 5061, so how can this be?
On 17 Mar 2017, at 19:32, Sergey Safarov <s.safarov@gmail.com> wrote:
Try NAPTR and SRV records. In this case required only one certificate. Requirements sip clients must support NAPRT or SRV records for TLS connection
пÑ, 17 маÑÑа 2017, 22:28 Rick Jarvis <rick@magicmail.mooo.com <mailto:rick@magicmail.mooo.com>>: Trying to get my head around setting TLS up. I have one internal sip profile, but multiple domains & dialplans.
If I want to enable TLS on multiple domains, I think Iâm right in saying that I will then need multiple sip profiles, in order to set the TLS up in each?
I guess my confusion comes from understanding the difference between domains, profiles and sip profiles. Iâm not even sure exactly what question Iâm asking here, so apologies!
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org