Problem With TLS + Contact Header - Bug?
Greetings, I have a pretty odd issue that I have no idea how to resolve. We have a Sofia profile that is TLS only. It listens on 5061. This is with an upstream vendor and we want them to be able to send inbound calls to extensions without register. Our FS instance is sending back "transport=udp" and port 5060 in the Contact header of the 200 OK. Even though the invite is for TLS and the sip_profile is tls-only=true. I have attached a SIP trace and a copy of our external.xml sofia profile. I am thinking this is a Freeswitch bug - or maybe just an oddly documented "feature". Any help is really appreciated. In the sip-trace attached, you can see an INVITE followed by a Trying and then an OK. The OK has Contact information for transport=udp and port 5060, which is invalid, so the ACK never gets back to us and we retransmit the 200 OK until it expires. Thanks, Geoff
Thinking since nobody has any comments, I should probably open a bug report. Last call? On Fri, Jan 12, 2018 at 10:07 AM Geoff Mina <gmina@connectfirst.com> wrote:
Greetings,
I have a pretty odd issue that I have no idea how to resolve. We have a Sofia profile that is TLS only. It listens on 5061. This is with an upstream vendor and we want them to be able to send inbound calls to extensions without register.
Our FS instance is sending back "transport=udp" and port 5060 in the Contact header of the 200 OK. Even though the invite is for TLS and the sip_profile is tls-only=true. I have attached a SIP trace and a copy of our external.xml sofia profile.
I am thinking this is a Freeswitch bug - or maybe just an oddly documented "feature". Any help is really appreciated.
In the sip-trace attached, you can see an INVITE followed by a Trying and then an OK. The OK has Contact information for transport=udp and port 5060, which is invalid, so the ACK never gets back to us and we retransmit the 200 OK until it expires.
Thanks,
Geoff
-- *GEOFF MINA*Chief Executive Officer Connect First / Contact Center Solutions, Built Better. 3101 Iris Ave #200, Boulder, CO 80301 720.335.5924 <javascript:void(0);> gmina@connectfirst.com / www.connectfirst.com <http://connectfirst.com/> [image: https://docs.google.com/uc?export=download&id=0B5b6KnVfm9lJTlFrQzRVUjJ2ZVE&r...] This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager.
Try with <param name="contact-params" value="transport=tls"/> On Sun, Jan 14, 2018, 16:54 Geoff Mina <gmina@connectfirst.com> wrote:
Thinking since nobody has any comments, I should probably open a bug report.
Last call?
On Fri, Jan 12, 2018 at 10:07 AM Geoff Mina <gmina@connectfirst.com> wrote:
Greetings,
I have a pretty odd issue that I have no idea how to resolve. We have a Sofia profile that is TLS only. It listens on 5061. This is with an upstream vendor and we want them to be able to send inbound calls to extensions without register.
Our FS instance is sending back "transport=udp" and port 5060 in the Contact header of the 200 OK. Even though the invite is for TLS and the sip_profile is tls-only=true. I have attached a SIP trace and a copy of our external.xml sofia profile.
I am thinking this is a Freeswitch bug - or maybe just an oddly documented "feature". Any help is really appreciated.
In the sip-trace attached, you can see an INVITE followed by a Trying and then an OK. The OK has Contact information for transport=udp and port 5060, which is invalid, so the ACK never gets back to us and we retransmit the 200 OK until it expires.
Thanks,
Geoff
--
*GEOFF MINA*Chief Executive Officer Connect First / Contact Center Solutions, Built Better.
3101 Iris Ave #200, Boulder, CO 80301 720.335.5924 gmina@connectfirst.com / www.connectfirst.com <http://connectfirst.com/>
[image: https://docs.google.com/uc?export=download&id=0B5b6KnVfm9lJTlFrQzRVUjJ2ZVE&r...]
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Nope. No luck. I'm not matching to a gateway the way I have this configured. Maybe I need to ask the vendor to prefix the URI with gw+extension to see if I can get it to pick up the gateway configuration. The general external.xml sip_profile doesn't seem to work in this model. *GEOFF MINA*Chief Executive Officer Connect First / Contact Center Solutions, Built Better. 3101 Iris Ave #200, Boulder, CO 80301 720.335.5924 <%28720%29%20335-5924> gmina@connectfirst.com / www.connectfirst.com <http://connectfirst.com/> [image: https://docs.google.com/uc?export=download&id=0B5b6KnVfm9lJTlFrQzRVUjJ2ZVE&r...] This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. On Sun, Jan 14, 2018 at 1:56 PM, David Villasmil < david.villasmil.work@gmail.com> wrote:
Try with
<param name="contact-params" value="transport=tls"/>
On Sun, Jan 14, 2018, 16:54 Geoff Mina <gmina@connectfirst.com> wrote:
Thinking since nobody has any comments, I should probably open a bug report.
Last call?
On Fri, Jan 12, 2018 at 10:07 AM Geoff Mina <gmina@connectfirst.com> wrote:
Greetings,
I have a pretty odd issue that I have no idea how to resolve. We have a Sofia profile that is TLS only. It listens on 5061. This is with an upstream vendor and we want them to be able to send inbound calls to extensions without register.
Our FS instance is sending back "transport=udp" and port 5060 in the Contact header of the 200 OK. Even though the invite is for TLS and the sip_profile is tls-only=true. I have attached a SIP trace and a copy of our external.xml sofia profile.
I am thinking this is a Freeswitch bug - or maybe just an oddly documented "feature". Any help is really appreciated.
In the sip-trace attached, you can see an INVITE followed by a Trying and then an OK. The OK has Contact information for transport=udp and port 5060, which is invalid, so the ACK never gets back to us and we retransmit the 200 OK until it expires.
Thanks,
Geoff
--
*GEOFF MINA*Chief Executive Officer Connect First / Contact Center Solutions, Built Better.
3101 Iris Ave #200, Boulder, CO 80301 720.335.5924 gmina@connectfirst.com / www.connectfirst.com <http://connectfirst.com/>
[image: https://docs.google.com/uc?export=download&id=0B5b6KnVfm9lJTlFrQzRVUjJ2ZVE&r...]
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi, In the initial invite the contact header the tls part is missing: Contact: <sip:4640@4.3.2.1:5060> it should have sips and transport=tls otherwise it will default to sip/udp, it's probably here the cause of your issue... Since you have tls_only = true, FS shouldn't reply to the that contact or place a error message "wrong contact... or something"... did you try with last git? can you try? and if it fails open a jira so the dev team can take a look. On 01/12/2018 06:07 PM, Geoff Mina wrote:
Greetings,
I have a pretty odd issue that I have no idea how to resolve. We have a Sofia profile that is TLS only. It listens on 5061. This is with an upstream vendor and we want them to be able to send inbound calls to extensions without register.
Our FS instance is sending back "transport=udp" and port 5060 in the Contact header of the 200 OK. Even though the invite is for TLS and the sip_profile is tls-only=true. I have attached a SIP trace and a copy of our external.xml sofia profile.
I am thinking this is a Freeswitch bug - or maybe just an oddly documented "feature". Any help is really appreciated.
In the sip-trace attached, you can see an INVITE followed by a Trying and then an OK. The OK has Contact information for transport=udp and port 5060, which is invalid, so the ACK never gets back to us and we retransmit the 200 OK until it expires.
Thanks,
Geoff
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Saludos / Regards / Cumprimentos António Silva
participants (3)
-
António Silva
-
David Villasmil
-
Geoff Mina