Hi, it seems like i am unable to get it done. Here is what i have done 1. created CA (Root) certificates: ./gentls_cert setup -cn pbx.freeswitch.org -alt DNS:pbx.freeswitch.org -org freeswitch.org 2. created Server Certificate: ./gentls_cert create_server -cn pbx.freeswitch.org -alt DNS:pbx.freeswitch.org -org freeswitch.org *I replaced pbx.freeswitch.org and freeswitch.org with my FS IP address in which i am listening.* 3. Enabled /internal_ssl_enable=true/ and/ ip_tls_version=tlsv1/ in vars.xml . 4. When i try to Register 3CX on TLS over port 5061, all i see is : tport_tls.c:869 tls_connect() tls_connect(0x7fbd94e7a5e0): events NEGOTIATING tport_tls.c:869 tls_connect() tls_connect(0x7fbd94e7a5e0): events NEGOTIATING tport_tls.c:958 tls_connect() tls_connect(0x7fbd94e7a5e0): TLS setup failed (error:00000001:lib(0):func(0):reason(1)) tport.c:2084 tport_close() tport_close(0x7fbd94e7a5e0): tls/59.103.76.82:56863/sips tport.c:2730 tport_wakeup_pri() tport_wakeup_pri(0x7fbd94005090): events IN tport.c:869 tport_alloc_secondary() tport_alloc_secondary(0x7fbd94005090): new secondary tport 0x7fbd94f53c70 tport_type_tls.c:603 tport_tls_accept() tport_tls_accept(0x7fbd94f53c70): new connection from tls/59.103.76.82:56864/sips. PLease help!! -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/FS-with-SSL-TLS-issues-tp75877... Sent from the freeswitch-users mailing list archive at Nabble.com.
Hi, As a first attempt try setting the organization name and the pbx name to be the same: The fully qualified DNS name of the FreeSwitch server (name, not dotted IP). Then, set the phones to register to the name and not the IP. I know that with Polycom you must use names. Try catching this connection with wireshark - maybe it will tell you some more details. __Yehavi: 2013/2/20 mehroz <mehroz.ashraf85@gmail.com>
Hi,
it seems like i am unable to get it done. Here is what i have done
1. created CA (Root) certificates: ./gentls_cert setup -cn pbx.freeswitch.org -alt DNS:pbx.freeswitch.org-org freeswitch.org
2. created Server Certificate: ./gentls_cert create_server -cn pbx.freeswitch.org -alt DNS:pbx.freeswitch.org -org freeswitch.org
*I replaced pbx.freeswitch.org and freeswitch.org with my FS IP address in which i am listening.*
3. Enabled /internal_ssl_enable=true/ and/ ip_tls_version=tlsv1/ in vars.xml .
4. When i try to Register 3CX on TLS over port 5061, all i see is : tport_tls.c:869 tls_connect() tls_connect(0x7fbd94e7a5e0): events NEGOTIATING tport_tls.c:869 tls_connect() tls_connect(0x7fbd94e7a5e0): events NEGOTIATING tport_tls.c:958 tls_connect() tls_connect(0x7fbd94e7a5e0): TLS setup failed (error:00000001:lib(0):func(0):reason(1)) tport.c:2084 tport_close() tport_close(0x7fbd94e7a5e0): tls/59.103.76.82:56863/sips tport.c:2730 tport_wakeup_pri() tport_wakeup_pri(0x7fbd94005090): events IN tport.c:869 tport_alloc_secondary() tport_alloc_secondary(0x7fbd94005090): new secondary tport 0x7fbd94f53c70 tport_type_tls.c:603 tport_tls_accept() tport_tls_accept(0x7fbd94f53c70): new connection from tls/59.103.76.82:56864/sips.
PLease help!!
-- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/FS-with-SSL-TLS-issues-tp75877... Sent from the freeswitch-users mailing list archive at Nabble.com.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Brian, In this session you adviced to use StartSSL to simplify the clients TLS connection to FS. "cat the key and the cert into agent.pem and the chain cert into cafile.pem and fire it up... " I'm already using StartSSL for my HTTPS web site and would like to use it as well for my FS server. I have the following files: In /etc/pki/tls/private/: my.key (my server domain key) my.csr In /etc/pki/tls/certs/: my.crt (generated by startssl from my.key & my.csr) ca.pem (from startssl site) sub.class1.server.ca.pem (from startssl site) I've follow your suggestion and did the following: cat my.key my.crt > agent.pem cat ca.pem sub.class1.server.ca.pem > cafile.pem. restarted the server and sucessfuly reloaded mod_sofia (no errors). I've setup FS vars&sip_prfile. I use CSipSimple with TLS/Sips config (I've verified that StartSSL is on the CA list). Unfortunatly, I keep getting this error: tport_tls.c:869 tls_connect() tls_connect(0xb780bff8): events NEGOTIATING tport_tls.c:869 tls_connect() tls_connect(0xb780bff8): events NEGOTIATING tport_tls.c:958 tls_connect() tls_connect(0xb780bff8): TLS setup failed (error:00000001:lib(0):func(0):reason(1)). Please advice how to setup the StartSSL files correctly for the client to connect over TLS. thanks Assaf -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/FS-with-SSL-TLS-issues-tp75877... Sent from the freeswitch-users mailing list archive at Nabble.com.
participants (3)
-
adahary
-
mehroz
-
Yehavi Bourvine