sips: should not make a difference, however.. take a look at bind-params and tls-bind-params https://wiki.freeswitch.org/wiki/Sofia.conf.xml On Mar 25, 2014, at 1:15 PM, JP <jaykris@gmail.com> wrote:
Is there any way to specify the full contact header in a UA profile that the SIP stack will use when formulating messages? Specifically, have it use "sips" instead of "sip" as the protocol scheme?
I'm trying to establish an INVITE dialog between 2 FreeSWITCH servers using a client authenticated TLS handshake.
To accomplish this, I've created 2 UA profiles on both servers - one to fulfill the role of the UAC (i.e. tls-uac.xml) and one to implement the UAS (i.e. tls-uas.xml). Here are the relevant parameters from both profiles:
tls-uac.xml:
<param name="sip-port" value="5081"/>
<param name="tls" value="true"/>
<param name="tls-only" value="true"/>
<param name="tls-sip-port" value="5082"/>
<param name="tls-cert-dir" value="$${base_dir}/conf/tls/uac"/>
tls-uas.xml:
<param name="sip-port" value="5081"/>
<param name="tls" value="true"/>
<param name="tls-only" value="true"/>
<param name="tls-sip-port" value="5081"/>
<param name="tls-cert-dir" value="$${base_dir}/conf/tls/uas"/>
The problem already starts when "tls-uac" sends a non-secure SIP URI in the contact header of its initial INVITE request (i.e. sip:mod_sofia@10.191.210.150:5081). But the more immediate issue is that "tls-uas" also responds with a non-secure SIP URI in the contact header of its final response (i.e. sip:14086805675@10.191.210.151:5081;transport=udp). This causes "tls-uac" to send its ACK to the right port number (i.e. 5081) but on the wrong transport (i.e. UDP instead of TCP/TLS).
I've seen in the FS documentation that there are ways to manipulate the contact header through the dial plan, but I'd really prefer not to do it this way. Any suggestions?
Thanks
JP
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org