Hi All, I cannot seem to get TLS running on the sofia "internal" profile. Any assistance would be appreciated. I'm running FreeSWITCH Version 1.2.0-rc2+git~20120808T025758Z~9ac586adc8 (1.2.0-rc2; git at commit 9ac586adc8 on Wed, 08 Aug 2012 02:57:58 Z) on Ubuntu 12.04 LTS. When I set internal_ssl_enable=true, and reload the sofia internal profile, I get the "usual" error: 2012-08-09 00:34:14.174431 [ERR] sofia.c:2289 Error Creating SIP UA for profile: internal <!-- SIP Profile: Internal --><X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/><X-PRE-PROCESS cmd="set" data="internal_sip_port=5060"/><X-PRE-PROCESS cmd="set" data="internal_tls_port=5061"/><X-PRE-PROCESS cmd="set" data="internal_ssl_enable=true"/><X-PRE-PROCESS cmd="set" data="internal_ssl_dir=$${base_dir}/conf/ssl"/> I verified that the OpenSSL development libraries were installed (Ubuntu package libssl-dev) and looked for references to ssl in the output from the compilation process and saw this: "checking for openssl... yes checking openssl_CFLAGS... checking openssl_LIBS... -lssl -lcrypto adding "-DHAVE_OPENSSL" to SWITCH_AM_CFLAGS" ... "checking OpenSSL options with pkg-config... found checking for gdi32... no checking for CRYPTO_lock in -lcrypto... yes checking for SSL_connect in -lssl... yes checking openssl/x509.h usability... yes checking openssl/x509.h presence... yes checking for openssl/x509.h... yes checking openssl/rsa.h usability... yes checking openssl/rsa.h presence... yes checking for openssl/rsa.h... yes checking openssl/crypto.h usability... yes checking openssl/crypto.h presence... yes checking for openssl/crypto.h... yes checking openssl/pem.h usability... yes checking openssl/pem.h presence... yes checking for openssl/pem.h... yes checking openssl/ssl.h usability... yes checking openssl/ssl.h presence... yes checking for openssl/ssl.h... yes checking openssl/err.h usability... yes checking openssl/err.h presence... yes checking for openssl/err.h... yes checking openssl/pkcs12.h usability... yes checking openssl/pkcs12.h presence... yes checking for openssl/pkcs12.h... yes checking for ENGINE_init... yes checking openssl/engine.h usability... yes checking openssl/engine.h presence... yes checking for openssl/engine.h... yes checking for ENGINE_load_builtin_engines... yes checking for RAND_status... yes checking for RAND_screen... no checking for RAND_egd... yes checking for CRYPTO_cleanup_all_ex_data... yes checking for "/dev/urandom"... yes checking CA cert bundle install path... ${prefix}/share/curl/curl-ca-bundle.crt checking for inflateEnd in -lz... yes" Is there anything else I should be checking. Does freeswitch send logs anywhere other than ../freeswitch/log/ ?
Turn on sofia tport logging it will tell you what its unable to setup the TLS connection. ~Mitch On Wed, Aug 8, 2012 at 10:09 PM, R W <wingcomm@hotmail.com> wrote:
Hi All,
I cannot seem to get TLS running on the sofia "internal" profile. Any assistance would be appreciated.
I'm running FreeSWITCH Version 1.2.0-rc2+git~20120808T025758Z~9ac586adc8 (1.2.0-rc2; git at commit 9ac586adc8 on Wed, 08 Aug 2012 02:57:58 Z) on Ubuntu 12.04 LTS.
When I set internal_ssl_enable=true, and reload the sofia internal profile, I get the "usual" error:
2012-08-09 00:34:14.174431 [ERR] sofia.c:2289 Error Creating SIP UA for profile: internal
<!-- SIP Profile: Internal --> <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/> <X-PRE-PROCESS cmd="set" data="internal_sip_port=5060"/> <X-PRE-PROCESS cmd="set" data="internal_tls_port=5061"/> <X-PRE-PROCESS cmd="set" data="internal_ssl_enable=true"/> <X-PRE-PROCESS cmd="set" data="internal_ssl_dir=$${base_dir}/conf/ssl"/>
I verified that the OpenSSL development libraries were installed (Ubuntu package libssl-dev) and looked for references to ssl in the output from the compilation process and saw this:
"checking for openssl... yes
checking openssl_CFLAGS...
checking openssl_LIBS... -lssl -lcrypto
adding "-DHAVE_OPENSSL" to SWITCH_AM_CFLAGS"
...
"checking OpenSSL options with pkg-config... found
checking for gdi32... no
checking for CRYPTO_lock in -lcrypto... yes
checking for SSL_connect in -lssl... yes
checking openssl/x509.h usability... yes
checking openssl/x509.h presence... yes
checking for openssl/x509.h... yes
checking openssl/rsa.h usability... yes
checking openssl/rsa.h presence... yes
checking for openssl/rsa.h... yes
checking openssl/crypto.h usability... yes
checking openssl/crypto.h presence... yes
checking for openssl/crypto.h... yes
checking openssl/pem.h usability... yes
checking openssl/pem.h presence... yes
checking for openssl/pem.h... yes
checking openssl/ssl.h usability... yes
checking openssl/ssl.h presence... yes
checking for openssl/ssl.h... yes
checking openssl/err.h usability... yes
checking openssl/err.h presence... yes
checking for openssl/err.h... yes
checking openssl/pkcs12.h usability... yes
checking openssl/pkcs12.h presence... yes
checking for openssl/pkcs12.h... yes
checking for ENGINE_init... yes
checking openssl/engine.h usability... yes
checking openssl/engine.h presence... yes
checking for openssl/engine.h... yes
checking for ENGINE_load_builtin_engines... yes
checking for RAND_status... yes
checking for RAND_screen... no
checking for RAND_egd... yes
checking for CRYPTO_cleanup_all_ex_data... yes
checking for "/dev/urandom"... yes
checking CA cert bundle install path... ${prefix}/share/curl/curl-ca-bundle.crt
checking for inflateEnd in -lz... yes"
Is there anything else I should be checking. Does freeswitch send logs anywhere other than ../freeswitch/log/ ?
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Mitch, Thank you! I enabled logging and found my CA cert file misnamed. Re-naming it fixed the problem! -Rob
From: mitch.capper@gmail.com Date: Thu, 9 Aug 2012 09:33:28 -0700 To: freeswitch-users@lists.freeswitch.org Subject: Re: [Freeswitch-users] TLS on FreeSwitch not Working
Turn on sofia tport logging it will tell you what its unable to setup the TLS connection.
~Mitch
On Wed, Aug 8, 2012 at 10:09 PM, R W <wingcomm@hotmail.com> wrote:
Hi All,
I cannot seem to get TLS running on the sofia "internal" profile. Any assistance would be appreciated.
I'm running FreeSWITCH Version 1.2.0-rc2+git~20120808T025758Z~9ac586adc8 (1.2.0-rc2; git at commit 9ac586adc8 on Wed, 08 Aug 2012 02:57:58 Z) on Ubuntu 12.04 LTS.
When I set internal_ssl_enable=true, and reload the sofia internal profile, I get the "usual" error:
2012-08-09 00:34:14.174431 [ERR] sofia.c:2289 Error Creating SIP UA for profile: internal
<!-- SIP Profile: Internal --> <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/> <X-PRE-PROCESS cmd="set" data="internal_sip_port=5060"/> <X-PRE-PROCESS cmd="set" data="internal_tls_port=5061"/> <X-PRE-PROCESS cmd="set" data="internal_ssl_enable=true"/> <X-PRE-PROCESS cmd="set" data="internal_ssl_dir=$${base_dir}/conf/ssl"/>
I verified that the OpenSSL development libraries were installed (Ubuntu package libssl-dev) and looked for references to ssl in the output from the compilation process and saw this:
"checking for openssl... yes
checking openssl_CFLAGS...
checking openssl_LIBS... -lssl -lcrypto
adding "-DHAVE_OPENSSL" to SWITCH_AM_CFLAGS"
...
"checking OpenSSL options with pkg-config... found
checking for gdi32... no
checking for CRYPTO_lock in -lcrypto... yes
checking for SSL_connect in -lssl... yes
checking openssl/x509.h usability... yes
checking openssl/x509.h presence... yes
checking for openssl/x509.h... yes
checking openssl/rsa.h usability... yes
checking openssl/rsa.h presence... yes
checking for openssl/rsa.h... yes
checking openssl/crypto.h usability... yes
checking openssl/crypto.h presence... yes
checking for openssl/crypto.h... yes
checking openssl/pem.h usability... yes
checking openssl/pem.h presence... yes
checking for openssl/pem.h... yes
checking openssl/ssl.h usability... yes
checking openssl/ssl.h presence... yes
checking for openssl/ssl.h... yes
checking openssl/err.h usability... yes
checking openssl/err.h presence... yes
checking for openssl/err.h... yes
checking openssl/pkcs12.h usability... yes
checking openssl/pkcs12.h presence... yes
checking for openssl/pkcs12.h... yes
checking for ENGINE_init... yes
checking openssl/engine.h usability... yes
checking openssl/engine.h presence... yes
checking for openssl/engine.h... yes
checking for ENGINE_load_builtin_engines... yes
checking for RAND_status... yes
checking for RAND_screen... no
checking for RAND_egd... yes
checking for CRYPTO_cleanup_all_ex_data... yes
checking for "/dev/urandom"... yes
checking CA cert bundle install path... ${prefix}/share/curl/curl-ca-bundle.crt
checking for inflateEnd in -lz... yes"
Is there anything else I should be checking. Does freeswitch send logs anywhere other than ../freeswitch/log/ ?
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Please add to jira into field "Component\s" value mod_rtmp. Thx -- Best Regards, Vadim F.
And mod_snom please :) -----Ursprüngliche Nachricht----- Von: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] Im Auftrag von vaad.fabi@gmail.com Gesendet: Dienstag, 14. August 2012 08:51 An: anthony.minessale@gmail.com Cc: freeswitch-users@lists.freeswitch.org Betreff: [Freeswitch-users] jira improvements Please add to jira into field "Component\s" value mod_rtmp. Thx -- Best Regards, Vadim F. _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com Join Us At ClueCon - Aug 7-9, 2012 FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (4)
-
Gerald Weber
-
Mitch Capper
-
R W
-
vaad.fabi＠gmail.com