VERSION="16.04.6 LTS (Xenial Xerus)" ~# dpkg -l | grep openssl ii libcurl4-openssl-dev:amd64 7.47.0-1ubuntu2.14 amd64 development files and documentation for libcurl (OpenSSL flavour) ii libgnutls-openssl27:amd64 3.4.10-4ubuntu1.5 amd64 GNU TLS library - OpenSSL wrapper ii libxmlsec1-openssl 1.2.20-2ubuntu4 amd64 Openssl engine for the XML security library ii openssl 1.0.2g-1ubuntu4.15 amd64 Secure Sockets Layer toolkit - cryptographic utility
But the real problem appeared on another webrtc gateway (Janus) that required TLS 1.2 minimum On Thu, Dec 12, 2019 at 3:48 PM kaiduan xie via FreeSWITCH-users < freeswitch-users@lists.freeswitch.org> wrote:
---------- Forwarded message ---------- From: kaiduan xie <kaiduanx@yahoo.ca> To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Cc: Bcc: Date: Thu, 12 Dec 2019 14:47:41 +0000 (UTC) Subject: Re: [Freeswitch-users] Upgrading DTLS What OS and version you run FS on? What is the openssl version on the box?
/Kaiduan
On Thursday, December 12, 2019, 03:29:32 a.m. CST, Mirko Brankovic < mirkobrankovic@gmail.com> wrote:
I had a same problem, and I see you can set it in vars.conf:
https://github.com/signalwire/freeswitch/blob/master/conf/vanilla/vars.xml#L... but since we have a custom module, it didn't work for me, so I replaced OpenSSL with BorringSSL and fixed it that way :D
On Wed, Dec 11, 2019 at 10:05 PM Nathan Stratton <nathan@robotics.net> wrote:
Seeing this error on FreeSWITCH 1.10.1
2019-12-11 00:19:34.288375 [ERR] switch_rtp.c:3266 video Handshake failure 1. This may happen when you use legacy DTLS v1.0 (legacyDTLS channel var is set) but endpoint requires DTLS v1.2.
Any idea how to upgrade DTLS to 1.2? I could not find much with a google search.
<> nathan stratton
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
-- Regards, Mirko _________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
---------- Forwarded message ---------- From: kaiduan xie via FreeSWITCH-users < freeswitch-users@lists.freeswitch.org> To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Cc: Bcc: Date: Thu, 12 Dec 2019 06:48:21 -0800 (PST) Subject: Re: [Freeswitch-users] Upgrading DTLS _________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
-- Regards, Mirko
Looks like your SSL version is old. #if OPENSSL_VERSION_NUMBER >= 0x10100000 https://github.com/signalwire/freeswitch/blob/master/src/switch_rtp.c#L3757 The following is the SSL version on 16.0.4 Ubuntu. ~:/usr/include/openssl$ grep -R VERSION_NUMBER . -n ./crypto.h:152:# define SSLEAY_VERSION_NUMBER OPENSSL_VERSION_NUMBER ./ssl.h:2868:# define SSL_R_BAD_PROTOCOL_VERSION_NUMBER 116 ./ssl.h:3164:# define SSL_R_WRONG_VERSION_NUMBER 267 ./pem.h:589:# define PEM_R_BAD_VERSION_NUMBER 117 ./opensslv.h:33:# define OPENSSL_VERSION_NUMBER 0x1000207fL ./opensslv.h:83: * The current library version is stored in the macro SHLIB_VERSION_NUMBER, ./opensslv.h:91:# define SHLIB_VERSION_NUMBER "1.0.0" :/usr/include/openssl$ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 16.04.5 LTS Release: 16.04 Codename: xenial On Thursday, December 12, 2019, 09:00:42 a.m. CST, Mirko Brankovic <mirkobrankovic@gmail.com> wrote: VERSION="16.04.6 LTS (Xenial Xerus)" ~# dpkg -l | grep openssl ii libcurl4-openssl-dev:amd64 7.47.0-1ubuntu2.14 amd64 development files and documentation for libcurl (OpenSSL flavour) ii libgnutls-openssl27:amd64 3.4.10-4ubuntu1.5 amd64 GNU TLS library - OpenSSL wrapper ii libxmlsec1-openssl 1.2.20-2ubuntu4 amd64 Openssl engine for the XML security library ii openssl 1.0.2g-1ubuntu4.15 amd64 Secure Sockets Layer toolkit - cryptographic utility But the real problem appeared on another webrtc gateway (Janus) that required TLS 1.2 minimum On Thu, Dec 12, 2019 at 3:48 PM kaiduan xie via FreeSWITCH-users <freeswitch-users@lists.freeswitch.org> wrote: ---------- Forwarded message ---------- From: kaiduan xie <kaiduanx@yahoo.ca> To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Cc: Bcc: Date: Thu, 12 Dec 2019 14:47:41 +0000 (UTC) Subject: Re: [Freeswitch-users] Upgrading DTLS What OS and version you run FS on? What is the openssl version on the box? /Kaiduan On Thursday, December 12, 2019, 03:29:32 a.m. CST, Mirko Brankovic <mirkobrankovic@gmail.com> wrote: I had a same problem, and I see you can set it in vars.conf:https://github.com/signalwire/freeswitch/blob/master/conf/vanilla/vars.xml#L... but since we have a custom module, it didn't work for me, so I replaced OpenSSL with BorringSSL and fixed it that way :D On Wed, Dec 11, 2019 at 10:05 PM Nathan Stratton <nathan@robotics.net> wrote: Seeing this error on FreeSWITCH 1.10.1 2019-12-11 00:19:34.288375 [ERR] switch_rtp.c:3266 video Handshake failure 1. This may happen when you use legacy DTLS v1.0 (legacyDTLS channel var is set) but endpoint requires DTLS v1.2. Any idea how to upgrade DTLS to 1.2? I could not find much with a google search.
<> nathan stratton_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform. Join our online community to chat in real time https://signalwire.community Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com -- Regards,Mirko_________________________________________________________________________ The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform. Join our online community to chat in real time https://signalwire.community Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com ---------- Forwarded message ---------- From: kaiduan xie via FreeSWITCH-users <freeswitch-users@lists.freeswitch.org> To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Cc: Bcc: Date: Thu, 12 Dec 2019 06:48:21 -0800 (PST) Subject: Re: [Freeswitch-users] Upgrading DTLS _________________________________________________________________________ The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform. Join our online community to chat in real time https://signalwire.community Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com -- Regards,Mirko_________________________________________________________________________ The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform. Join our online community to chat in real time https://signalwire.community Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
participants (2)
-
kaiduan xie
-
Mirko Brankovic