Re: [Freeswitch-users] FreeSWITCH TLS not able to receive calls
I’m using "zoiper 1.19.7” on android, the issue appears only one I enable SRTP, for TLS only it is working very fine. The issue as shown below it keeps registering till finally zipper restart on mobile. One more point I’m configuring Zoiper without using RPORT for either SRTP or TLS. *“2014-12-01 20:57:24.003230 [NOTICE] switch_ivr_originate.c:3467 Hangup sofia/internal/sip:1000@222.248.102.244 <1000@222.248.102.244>:38614 [CS_CONSUME_MEDIA] [NO_ANSWER]"* recv 1290 bytes from tls/[222.215.195.234]:2896 at 20:56:54.344450: ------------------------------------------------------------------------ INVITE sip:1000@abc-xyz.com SIP/2.0 v: SIP/2.0/TLS 192.168.8.109:41659 ;rport;branch=z9hG4bKPjvnvRZjpAXahzIV7S8SRgS5vwKmYI9WFS;alias Max-Forwards: 70 f: <sip:1006@abc-xyz.com>;tag=weeMqzInPcNLPd6s5IX63c8be3DMvGkU t: <sip:1000@abc-xyz.com> m: <sip:1006@222.215.195.234:2896;transport=TLS;ob> i: sjprJQszC2LHvY6jRr-lm9rau9V1PlYX CSeq: 32737 INVITE Route: <sip:abc-xyz.com;transport=tls;lr> k: replaces, 100rel, timer, norefersub x: 1800 Min-SE: 90 User-Agent: CSipSimple_GT-S5830-10/r2450 Proxy-Authorization: Digest username="1006", realm="abc-xyz.com", nonce="329456ee-7994-11e4-bf79-1182ebca2429", uri="sip:1000@abc-xyz.com", response="ab3a0f2fe9207ced62eebd8c9b8c32b4", algorithm=MD5, cnonce="iLa-C.wpnBSeTQjWiXZK3H3PGYhi6EGt", qop=auth, nc=00000001 c: application/sdp l: 469 v=0 o=- 3626452487 3626452487 IN IP4 192.168.8.109 s=pjmedia c=IN IP4 192.168.8.109 t=0 0 m=audio 4000 RTP/SAVP 98 0 8 101 c=IN IP4 192.168.8.109 a=rtcp:4001 IN IP4 192.168.8.109 a=sendrecv a=rtpmap:98 SILK/16000 a=fmtp:98 useinbandfec=0 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:Vci7cNdSFTkkLnqz+qRkqCctPvRT6jIOrNc5KMbz a=crypto:2 AES_CM_128_HMAC_SHA1_32 inline:nW3ECq5YHHnrY2q5u7XZE4fvPfMOAWKQ+ehOp7zV ------------------------------------------------------------------------ send 405 bytes to tls/[222.215.195.234]:2896 at 20:56:54.344687: ------------------------------------------------------------------------ SIP/2.0 100 Trying Via: SIP/2.0/TLS 192.168.8.109:41659 ;rport=2896;branch=z9hG4bKPjvnvRZjpAXahzIV7S8SRgS5vwKmYI9WFS;alias;received=222.215.195.234 f: <sip:1006@abc-xyz.com>;tag=weeMqzInPcNLPd6s5IX63c8be3DMvGkU t: <sip:1000@abc-xyz.com> i: sjprJQszC2LHvY6jRr-lm9rau9V1PlYX CSeq: 32737 INVITE User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Content-Length: 0 send 2133 bytes to tls/[222.248.102.244]:38614 at 20:56:54.360608: ------------------------------------------------------------------------ INVITE sip:1000@222.248.102.244:38614;rinstance=98c51296f2d531cc;transport=TLS SIP/2.0 Via: SIP/2.0/TLS 176.31.245.17;branch=z9hG4bKjXZvg3cX76Krj Max-Forwards: 69 From: "Extension 1006" <sip:1006@176.31.245.17>;tag=15DcKN9tUZeaK To: < sip:1000@222.248.102.244:38614;rinstance=98c51296f2d531cc;transport=TLS> Call-ID: 0a3e07c5-f437-1232-9bba-d2ab2784dc6a CSeq: 68395843 INVITE Contact: <sip:mod_sofia@176.31.245.17:5061;transport=tls> User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer Content-Type: application/sdp Content-Disposition: session Content-Length: 1076 X-FS-Support: update_display,send_info Remote-Party-ID: "Extension 1006" <sip:1006@176.31.245.17
;party=calling;screen=yes;privacy=off
v=0 o=FreeSWITCH 1417445672 1417445673 IN IP4 176.31.245.17 s=FreeSWITCH c=IN IP4 176.31.245.17 t=0 0 m=audio 18142 RTP/SAVP 0 8 101 13 a=rtpmap:0 PCMU/8000 a=rtpmap:8 PCMA/8000 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=crypto:1 AEAD_AES_256_GCM_8 inline:6p/uXB7tN5SG9vHP/DMurij6BaZIOKcP4Tle0kjo2lwL1Oa4z9WGyZtk4zs a=crypto:2 AEAD_AES_128_GCM_8 inline:hGeJA6XQV1V35oTu2141o7mD64dFDRbeCbcf6g a=crypto:3 AES_CM_256_HMAC_SHA1_80 inline:XdZwwcl6kMRrWY7Vkrbozf/o1awka9lef0UjQRwvnOnnrbAgzXIm8s3yu7o8DQ a=crypto:4 AES_CM_192_HMAC_SHA1_80 inline:KtM92m0ac2musYPoXLDJb4rUbEMYAwMegPH9RMtzwzPb+0O93e0 a=crypto:5 AES_CM_128_HMAC_SHA1_80 inline:PtOpdIk2LTSCSDVzPaSN6AV2xosBrJUTd4mvKIGh a=crypto:6 AES_CM_256_HMAC_SHA1_32 inline:ZHzWxajRlQp8IuzX5CuFM1SRkL0huC62ukX583+Vg0LBiK9t2NrpP8FNwdkckQ a=crypto:7 AES_CM_192_HMAC_SHA1_32 inline:S9BWrDxGFYpU3P9o3HD0Z97W5jwo8vD+E1sJi821r4/B+cdukTw a=crypto:8 AES_CM_128_HMAC_SHA1_32 inline:l7C0wU29AjF2ZMnCTvks+1ytd/UiXHqN8UIsM6vf a=crypto:9 AES_CM_128_NULL_AUTH inline:tv97QsO7+S9NLTXrD02omyWoyM7I2KaWaimUgq99 a=ptime:20 ------------------------------------------------------------------------ REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0 Via: SIP/2.0/TLS 192.168.10.2:41120 ;branch=z9hG4bK-d8754z-903949acb1d10083-1---d8754z-;rport Max-Forwards: 70 Contact: < sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS> To: <sip:1000@abc-xyz.com;transport=TLS> From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22 Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 1 REGISTER Expires: 60 Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri User-Agent: Zoiper r27147 Allow-Events: presence, kpml Content-Length: 0 ------------------------------------------------------------------------ send 716 bytes to tls/[222.248.102.244]:38620 at 20:57:01.806433: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/TLS 192.168.10.2:41120 ;branch=z9hG4bK-d8754z-903949acb1d10083-1---d8754z-;rport=38620;received=222.248.102.244 From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22 To: <sip:1000@abc-xyz.com;transport=TLS>;tag=2e74mgtyr84ve Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 1 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces WWW-Authenticate: Digest realm="abc-xyz.com", nonce="374fdd98-7994-11e4-bf9c-1182ebca2429", algorithm=MD5, qop="auth" Content-Length: 0 ------------------------------------------------------------------------ recv 944 bytes from tls/[222.248.102.244]:38620 at 20:57:01.995662: ------------------------------------------------------------------------ REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0 Via: SIP/2.0/TLS 192.168.10.2:41120 ;branch=z9hG4bK-d8754z-8ca0e782336414eb-1---d8754z-;rport Max-Forwards: 70 Contact: < sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS> To: <sip:1000@abc-xyz.com;transport=TLS> From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22 Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 2 REGISTER Expires: 60 Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri User-Agent: Zoiper r27147 Authorization: Digest username="1000",realm="abc-xyz.com ",nonce="374fdd98-7994-11e4-bf9c-1182ebca2429",uri=" sip:abc-xyz.com;transport=TLS ",response="8d7e108ff98035d37424c32166fe0253",cnonce="107cf281c3b57888a4bfd1a9c3776098",nc=00000001,qop=auth,algorithm=MD5 Allow-Events: presence, kpml Content-Length: 0 ------------------------------------------------------------------------ send 712 bytes to tls/[222.248.102.244]:38620 at 20:57:01.997931: ------------------------------------------------------------------------ SIP/2.0 200 OK Via: SIP/2.0/TLS 192.168.10.2:41120 ;branch=z9hG4bK-d8754z-8ca0e782336414eb-1---d8754z-;rport=38620;received=222.248.102.244 From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22 To: <sip:1000@abc-xyz.com;transport=TLS>;tag=3Q0XpBB2NHUFa Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 2 REGISTER Contact: < sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS
;expires=60 Date: Mon, 01 Dec 2014 19:57:01 GMT User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces Content-Length: 0
------------------------------------------------------------------------ recv 944 bytes from tls/[222.248.102.244]:38620 at 20:57:02.205719: ------------------------------------------------------------------------ REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0 Via: SIP/2.0/TLS 222.248.102.244:38620 ;branch=z9hG4bK-d8754z-59d493abef215091-1---d8754z-;rport Max-Forwards: 70 Contact: < sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS
;expires=0 To: <sip:1000@abc-xyz.com;transport=TLS> From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22 Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 3 REGISTER Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri User-Agent: Zoiper r27147 Authorization: Digest username="1000",realm="abc-xyz.com ",nonce="374fdd98-7994-11e4-bf9c-1182ebca2429",uri=" sip:abc-xyz.com;transport=TLS ",response="5168bf9afffe9adacef7d898bd6bec9b",cnonce="80108fa519303990cfd2d46639d767ee",nc=00000002,qop=auth,algorithm=MD5 Allow-Events: presence, kpml Content-Length: 0
------------------------------------------------------------------------ send 598 bytes to tls/[222.248.102.244]:38620 at 20:57:02.207249: ------------------------------------------------------------------------ SIP/2.0 200 OK Via: SIP/2.0/TLS 222.248.102.244:38620 ;branch=z9hG4bK-d8754z-59d493abef215091-1---d8754z-;rport=38620 From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22 To: <sip:1000@abc-xyz.com;transport=TLS>;tag=40Spr6U5jtH2N Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 3 REGISTER Date: Mon, 01 Dec 2014 19:57:02 GMT User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces Content-Length: 0 ------------------------------------------------------------------------ recv 681 bytes from tls/[222.248.102.244]:38620 at 20:57:02.400564: ------------------------------------------------------------------------ REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0 Via: SIP/2.0/TLS 222.248.102.244:38620 ;branch=z9hG4bK-d8754z-d738a1a836608006-1---d8754z-;rport Max-Forwards: 70 Contact: < sip:1000@222.248.102.244:38620;rinstance=43166fee0aaac1bc;transport=TLS> To: <sip:1000@abc-xyz.com;transport=TLS> From: <sip:1000@abc-xyz.com;transport=TLS>;tag=979e5f46 Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y. CSeq: 1 REGISTER Expires: 60 Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri User-Agent: Zoiper r27147 Allow-Events: presence, kpml Content-Length: 0 ------------------------------------------------------------------------ send 694 bytes to tls/[222.248.102.244]:38620 at 20:57:02.401167: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/TLS 222.248.102.244:38620 ;branch=z9hG4bK-d8754z-d738a1a836608006-1---d8754z-;rport=38620 From: <sip:1000@abc-xyz.com;transport=TLS>;tag=979e5f46 To: <sip:1000@abc-xyz.com;transport=TLS>;tag=59jFt1c9F37mH Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y. CSeq: 1 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces WWW-Authenticate: Digest realm="abc-xyz.com", nonce="37aaa44e-7994-11e4-bf9d-1182ebca2429", algorithm=MD5, qop="auth" Content-Length: 0 ------------------------------------------------------------------------ recv 950 bytes from tls/[222.248.102.244]:38620 at 20:57:02.655864: ------------------------------------------------------------------------ REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0 Via: SIP/2.0/TLS 222.248.102.244:38620 ;branch=z9hG4bK-d8754z-dfaa7130675d6cfa-1---d8754z-;rport Max-Forwards: 70 Contact: < sip:1000@222.248.102.244:38620;rinstance=43166fee0aaac1bc;transport=TLS> To: <sip:1000@abc-xyz.com;transport=TLS> From: <sip:1000@abc-xyz.com;transport=TLS>;tag=979e5f46 Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y. CSeq: 2 REGISTER Expires: 60 Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri User-Agent: Zoiper r27147 Authorization: Digest username="1000",realm="abc-xyz.com ",nonce="37aaa44e-7994-11e4-bf9d-1182ebca2429",uri=" sip:abc-xyz.com;transport=TLS ",response="f1667094626fc10ca76a070438497e6f",cnonce="dc790bffe285311f0b903bd515a3e741",nc=00000001,qop=auth,algorithm=MD5 Allow-Events: presence, kpml Content-Length: 0 ------------------------------------------------------------------------ send 693 bytes to tls/[222.248.102.244]:38620 at 20:57:02.657688: ------------------------------------------------------------------------ SIP/2.0 200 OK Via: SIP/2.0/TLS 222.248.102.244:38620 ;branch=z9hG4bK-d8754z-dfaa7130675d6cfa-1---d8754z-;rport=38620 From: <sip:1000@abc-xyz.com;transport=TLS>;tag=979e5f46 To: <sip:1000@abc-xyz.com;transport=TLS>;tag=6jc8UvXcDcy7c Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y. CSeq: 2 REGISTER Contact: < sip:1000@222.248.102.244:38620;rinstance=43166fee0aaac1bc;transport=TLS
;expires=60 Date: Mon, 01 Dec 2014 19:57:02 GMT User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces Content-Length: 0
*From: *Brian West <brian@freeswitch.org> *To: *FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> *Date: *December 1, 2014 at 5:19:30 PM GMT+3 *Reply-To: *FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> *Subject: **Re: [Freeswitch-users] FreeSWITCH TLS not able to receive calls* What endpoints are involved? have you looked at 'sofia loglevel all 9' output and see if it gives you a clue? On Fri, Nov 28, 2014 at 6:24 PM, Ahmed Habiba <ahabiba@gmail.com> wrote:
Dears,
I’ve configured FreeSWITCH with the below version with TLS/SRTPas per the recommendation in page “https://wiki.freeswitch.org/wiki/SIP_TLS” and it was strait forward, and I was able to connect and make make calls using zoiper, but I was not able to receive any calls after enabling the TLS/SRTP.
*"FreeSWITCH Version 1.4.13+git~20141103T195300Z~b942d0faa8~64bit (git b942d0f 2014-11-03 19:53:00Z 64bit)**”*
Your kind feedback will be appreciate.
Thanks,
Ahmed Habiba.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest -- Thanks and Best Regards, Ahmed Habiba Mob: +20 10 37 82 970 *Success: believe (Vision) plus commitment (Action)*
Dear Brian, I’m using "zoiper 1.19.7” on android, the issue appears only one I enable SRTP, for TLS only it is working very fine. The issue as shown below it keeps registering till finally zipper restart on mobile. One more point I’m configuring Zoiper without using RPORT for either SRTP or TLS. “2014-12-01 20:57:24.003230 [NOTICE] switch_ivr_originate.c:3467 Hangup sofia/internal/sip:1000@222.248.102.244 <mailto:1000@222.248.102.244>:38614 [CS_CONSUME_MEDIA] [NO_ANSWER]" recv 1290 bytes from tls/[222.215.195.234]:2896 at 20:56:54.344450: ------------------------------------------------------------------------ INVITE <>sip:1000@abc-xyz.com <sip:1000@abc-xyz.com> SIP/2.0 v: SIP/2.0/TLS 192.168.8.109:41659;rport;branch=z9hG4bKPjvnvRZjpAXahzIV7S8SRgS5vwKmYI9WFS;alias Max-Forwards: 70 f: < <>sip:1006@abc-xyz.com <sip:1006@abc-xyz.com>>;tag=weeMqzInPcNLPd6s5IX63c8be3DMvGkU t: < <>sip:1000@abc-xyz.com <sip:1000@abc-xyz.com>> m: < <>sip:1006@222.215.195.234:2896;transport=TLS;ob <sip:1006@222.215.195.234:2896;transport=TLS;ob>> i: sjprJQszC2LHvY6jRr-lm9rau9V1PlYX CSeq: 32737 INVITE Route: < <>sip:abc-xyz.com;transport=tls;lr <sip:abc-xyz.com;transport=tls;lr>> k: replaces, 100rel, timer, norefersub x: 1800 Min-SE: 90 User-Agent: CSipSimple_GT-S5830-10/r2450 Proxy-Authorization: Digest username="1006", realm="abc-xyz.com <http://abc-xyz.com/>", nonce="329456ee-7994-11e4-bf79-1182ebca2429", uri=" <>sip:1000@abc-xyz.com <sip:1000@abc-xyz.com>", response="ab3a0f2fe9207ced62eebd8c9b8c32b4", algorithm=MD5, cnonce="iLa-C.wpnBSeTQjWiXZK3H3PGYhi6EGt", qop=auth, nc=00000001 c: application/sdp l: 469 v=0 o=- 3626452487 3626452487 IN IP4 192.168.8.109 s=pjmedia c=IN IP4 192.168.8.109 t=0 0 m=audio 4000 RTP/SAVP 98 0 8 101 c=IN IP4 192.168.8.109 a=rtcp:4001 IN IP4 192.168.8.109 a=sendrecv a=rtpmap:98 SILK/16000 a=fmtp:98 useinbandfec=0 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:Vci7cNdSFTkkLnqz+qRkqCctPvRT6jIOrNc5KMbz a=crypto:2 AES_CM_128_HMAC_SHA1_32 inline:nW3ECq5YHHnrY2q5u7XZE4fvPfMOAWKQ+ehOp7zV ------------------------------------------------------------------------ send 405 bytes to tls/[222.215.195.234]:2896 at 20:56:54.344687: ------------------------------------------------------------------------ SIP/2.0 100 Trying Via: SIP/2.0/TLS 192.168.8.109:41659;rport=2896;branch=z9hG4bKPjvnvRZjpAXahzIV7S8SRgS5vwKmYI9WFS;alias;received=222.215.195.234 f: < <>sip:1006@abc-xyz.com <sip:1006@abc-xyz.com>>;tag=weeMqzInPcNLPd6s5IX63c8be3DMvGkU t: < <>sip:1000@abc-xyz.com <sip:1000@abc-xyz.com>> i: sjprJQszC2LHvY6jRr-lm9rau9V1PlYX CSeq: 32737 INVITE User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Content-Length: 0 send 2133 bytes to tls/[222.248.102.244]:38614 at 20:56:54.360608: ------------------------------------------------------------------------ INVITE <>sip:1000@222.248.102.244:38614;rinstance=98c51296f2d531cc;transport=TLS <sip:1000@222.248.102.244:38614;rinstance=98c51296f2d531cc;transport=TLS> SIP/2.0 Via: SIP/2.0/TLS 176.31.245.17;branch=z9hG4bKjXZvg3cX76Krj Max-Forwards: 69 From: "Extension 1006" < <>sip:1006@176.31.245.17 <sip:1006@176.31.245.17>>;tag=15DcKN9tUZeaK To: < <>sip:1000@222.248.102.244:38614;rinstance=98c51296f2d531cc;transport=TLS <sip:1000@222.248.102.244:38614;rinstance=98c51296f2d531cc;transport=TLS>> Call-ID: 0a3e07c5-f437-1232-9bba-d2ab2784dc6a CSeq: 68395843 INVITE Contact: < <>sip:mod_sofia@176.31.245.17:5061;transport=tls <sip:mod_sofia@176.31.245.17:5061;transport=tls>> User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer Content-Type: application/sdp Content-Disposition: session Content-Length: 1076 X-FS-Support: update_display,send_info Remote-Party-ID: "Extension 1006" < <>sip:1006@176.31.245.17 <sip:1006@176.31.245.17>>;party=calling;screen=yes;privacy=off v=0 o=FreeSWITCH 1417445672 1417445673 IN IP4 176.31.245.17 s=FreeSWITCH c=IN IP4 176.31.245.17 t=0 0 m=audio 18142 RTP/SAVP 0 8 101 13 a=rtpmap:0 PCMU/8000 a=rtpmap:8 PCMA/8000 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=crypto:1 AEAD_AES_256_GCM_8 inline:6p/uXB7tN5SG9vHP/DMurij6BaZIOKcP4Tle0kjo2lwL1Oa4z9WGyZtk4zs a=crypto:2 AEAD_AES_128_GCM_8 inline:hGeJA6XQV1V35oTu2141o7mD64dFDRbeCbcf6g a=crypto:3 AES_CM_256_HMAC_SHA1_80 inline:XdZwwcl6kMRrWY7Vkrbozf/o1awka9lef0UjQRwvnOnnrbAgzXIm8s3yu7o8DQ a=crypto:4 AES_CM_192_HMAC_SHA1_80 inline:KtM92m0ac2musYPoXLDJb4rUbEMYAwMegPH9RMtzwzPb+0O93e0 a=crypto:5 AES_CM_128_HMAC_SHA1_80 inline:PtOpdIk2LTSCSDVzPaSN6AV2xosBrJUTd4mvKIGh a=crypto:6 AES_CM_256_HMAC_SHA1_32 inline:ZHzWxajRlQp8IuzX5CuFM1SRkL0huC62ukX583+Vg0LBiK9t2NrpP8FNwdkckQ a=crypto:7 AES_CM_192_HMAC_SHA1_32 inline:S9BWrDxGFYpU3P9o3HD0Z97W5jwo8vD+E1sJi821r4/B+cdukTw a=crypto:8 AES_CM_128_HMAC_SHA1_32 inline:l7C0wU29AjF2ZMnCTvks+1ytd/UiXHqN8UIsM6vf a=crypto:9 AES_CM_128_NULL_AUTH inline:tv97QsO7+S9NLTXrD02omyWoyM7I2KaWaimUgq99 a=ptime:20 ------------------------------------------------------------------------ REGISTER <>sip:abc-xyz.com;transport=TLS <sip:abc-xyz.com;transport=TLS> SIP/2.0 Via: SIP/2.0/TLS 192.168.10.2:41120;branch=z9hG4bK-d8754z-903949acb1d10083-1---d8754z-;rport Max-Forwards: 70 Contact: < <>sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS <sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS>> To: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>> From: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>>;tag=4a2eae22 Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 1 REGISTER Expires: 60 Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri User-Agent: Zoiper r27147 Allow-Events: presence, kpml Content-Length: 0 ------------------------------------------------------------------------ send 716 bytes to tls/[222.248.102.244]:38620 at 20:57:01.806433: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/TLS 192.168.10.2:41120;branch=z9hG4bK-d8754z-903949acb1d10083-1---d8754z-;rport=38620;received=222.248.102.244 From: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>>;tag=4a2eae22 To: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>>;tag=2e74mgtyr84ve Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 1 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces WWW-Authenticate: Digest realm="abc-xyz.com <http://abc-xyz.com/>", nonce="374fdd98-7994-11e4-bf9c-1182ebca2429", algorithm=MD5, qop="auth" Content-Length: 0 ------------------------------------------------------------------------ recv 944 bytes from tls/[222.248.102.244]:38620 at 20:57:01.995662: ------------------------------------------------------------------------ REGISTER <>sip:abc-xyz.com;transport=TLS <sip:abc-xyz.com;transport=TLS> SIP/2.0 Via: SIP/2.0/TLS 192.168.10.2:41120;branch=z9hG4bK-d8754z-8ca0e782336414eb-1---d8754z-;rport Max-Forwards: 70 Contact: < <>sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS <sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS>> To: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>> From: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>>;tag=4a2eae22 Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 2 REGISTER Expires: 60 Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri User-Agent: Zoiper r27147 Authorization: Digest username="1000",realm="abc-xyz.com <http://abc-xyz.com/>",nonce="374fdd98-7994-11e4-bf9c-1182ebca2429",uri=" <>sip:abc-xyz.com;transport=TLS <sip:abc-xyz.com;transport=TLS>",response="8d7e108ff98035d37424c32166fe0253",cnonce="107cf281c3b57888a4bfd1a9c3776098",nc=00000001,qop=auth,algorithm=MD5 Allow-Events: presence, kpml Content-Length: 0 ------------------------------------------------------------------------ send 712 bytes to tls/[222.248.102.244]:38620 at 20:57:01.997931: ------------------------------------------------------------------------ SIP/2.0 200 OK Via: SIP/2.0/TLS 192.168.10.2:41120;branch=z9hG4bK-d8754z-8ca0e782336414eb-1---d8754z-;rport=38620;received=222.248.102.244 From: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>>;tag=4a2eae22 To: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>>;tag=3Q0XpBB2NHUFa Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 2 REGISTER Contact: < <>sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS <sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS>>;expires=60 Date: Mon, 01 Dec 2014 19:57:01 GMT User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces Content-Length: 0 ------------------------------------------------------------------------ recv 944 bytes from tls/[222.248.102.244]:38620 at 20:57:02.205719: ------------------------------------------------------------------------ REGISTER <>sip:abc-xyz.com;transport=TLS <sip:abc-xyz.com;transport=TLS> SIP/2.0 Via: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-59d493abef215091-1---d8754z-;rport Max-Forwards: 70 Contact: < <>sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS <sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS>>;expires=0 To: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>> From: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>>;tag=4a2eae22 Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 3 REGISTER Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri User-Agent: Zoiper r27147 Authorization: Digest username="1000",realm="abc-xyz.com <http://abc-xyz.com/>",nonce="374fdd98-7994-11e4-bf9c-1182ebca2429",uri=" <>sip:abc-xyz.com;transport=TLS <sip:abc-xyz.com;transport=TLS>",response="5168bf9afffe9adacef7d898bd6bec9b",cnonce="80108fa519303990cfd2d46639d767ee",nc=00000002,qop=auth,algorithm=MD5 Allow-Events: presence, kpml Content-Length: 0 ------------------------------------------------------------------------ send 598 bytes to tls/[222.248.102.244]:38620 at 20:57:02.207249: ------------------------------------------------------------------------ SIP/2.0 200 OK Via: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-59d493abef215091-1---d8754z-;rport=38620 From: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>>;tag=4a2eae22 To: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>>;tag=40Spr6U5jtH2N Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 3 REGISTER Date: Mon, 01 Dec 2014 19:57:02 GMT User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces Content-Length: 0 ------------------------------------------------------------------------ recv 681 bytes from tls/[222.248.102.244]:38620 at 20:57:02.400564: ------------------------------------------------------------------------ REGISTER <>sip:abc-xyz.com;transport=TLS <sip:abc-xyz.com;transport=TLS> SIP/2.0 Via: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-d738a1a836608006-1---d8754z-;rport Max-Forwards: 70 Contact: < <>sip:1000@222.248.102.244:38620;rinstance=43166fee0aaac1bc;transport=TLS <sip:1000@222.248.102.244:38620;rinstance=43166fee0aaac1bc;transport=TLS>> To: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>> From: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>>;tag=979e5f46 Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y. CSeq: 1 REGISTER Expires: 60 Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri User-Agent: Zoiper r27147 Allow-Events: presence, kpml Content-Length: 0 ------------------------------------------------------------------------ send 694 bytes to tls/[222.248.102.244]:38620 at 20:57:02.401167: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-d738a1a836608006-1---d8754z-;rport=38620 From: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>>;tag=979e5f46 To: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>>;tag=59jFt1c9F37mH Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y. CSeq: 1 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces WWW-Authenticate: Digest realm="abc-xyz.com <http://abc-xyz.com/>", nonce="37aaa44e-7994-11e4-bf9d-1182ebca2429", algorithm=MD5, qop="auth" Content-Length: 0 ------------------------------------------------------------------------ recv 950 bytes from tls/[222.248.102.244]:38620 at 20:57:02.655864: ------------------------------------------------------------------------ REGISTER <>sip:abc-xyz.com;transport=TLS <sip:abc-xyz.com;transport=TLS> SIP/2.0 Via: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-dfaa7130675d6cfa-1---d8754z-;rport Max-Forwards: 70 Contact: < <>sip:1000@222.248.102.244:38620;rinstance=43166fee0aaac1bc;transport=TLS <sip:1000@222.248.102.244:38620;rinstance=43166fee0aaac1bc;transport=TLS>> To: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>> From: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>>;tag=979e5f46 Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y. CSeq: 2 REGISTER Expires: 60 Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri User-Agent: Zoiper r27147 Authorization: Digest username="1000",realm="abc-xyz.com <http://abc-xyz.com/>",nonce="37aaa44e-7994-11e4-bf9d-1182ebca2429",uri=" <>sip:abc-xyz.com;transport=TLS <sip:abc-xyz.com;transport=TLS>",response="f1667094626fc10ca76a070438497e6f",cnonce="dc790bffe285311f0b903bd515a3e741",nc=00000001,qop=auth,algorithm=MD5 Allow-Events: presence, kpml Content-Length: 0 ------------------------------------------------------------------------ send 693 bytes to tls/[222.248.102.244]:38620 at 20:57:02.657688: ------------------------------------------------------------------------ SIP/2.0 200 OK Via: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-dfaa7130675d6cfa-1---d8754z-;rport=38620 From: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>>;tag=979e5f46 To: < <>sip:1000@abc-xyz.com;transport=TLS <sip:1000@abc-xyz.com;transport=TLS>>;tag=6jc8UvXcDcy7c Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y. CSeq: 2 REGISTER Contact: < <>sip:1000@222.248.102.244:38620;rinstance=43166fee0aaac1bc;transport=TLS <sip:1000@222.248.102.244:38620;rinstance=43166fee0aaac1bc;transport=TLS>>;expires=60 Date: Mon, 01 Dec 2014 19:57:02 GMT User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces Content-Length: 0
From: Brian West <brian@freeswitch.org <mailto:brian@freeswitch.org>> To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org <mailto:freeswitch-users@lists.freeswitch.org>> Date: December 1, 2014 at 5:19:30 PM GMT+3 Reply-To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org <mailto:freeswitch-users@lists.freeswitch.org>> Subject: Re: [Freeswitch-users] FreeSWITCH TLS not able to receive calls
What endpoints are involved? have you looked at 'sofia loglevel all 9' output and see if it gives you a clue?
On Fri, Nov 28, 2014 at 6:24 PM, Ahmed Habiba <ahabiba@gmail.com <mailto:ahabiba@gmail.com>> wrote: Dears,
I’ve configured FreeSWITCH with the below version with TLS/SRTPas per the recommendation in page “https://wiki.freeswitch.org/wiki/SIP_TLS <https://wiki.freeswitch.org/wiki/SIP_TLS>” and it was strait forward, and I was able to connect and make make calls using zoiper, but I was not able to receive any calls after enabling the TLS/SRTP.
"FreeSWITCH Version 1.4.13+git~20141103T195300Z~b942d0faa8~64bit (git b942d0f 2014-11-03 19:53:00Z 64bit)”
Your kind feedback will be appreciate.
Thanks,
Ahmed Habiba.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>
-- Brian West brian@freeswitch.org <mailto:brian@freeswitch.org>
Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com <http://www.freeswitchbook.com/> http://www.freeswitchcookbook.com <http://www.freeswitchcookbook.com/> T:+19184209001 <tel:%2B19184209001> | F:+19184209002 <tel:%2B19184209002> | M:+1918424WEST (9378) iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype: <skype:briankwest>briankwest <skype:briankwest>
-- Thanks and Best Regards, Ahmed Habiba Mob: +20 10 37 82 970 Success: believe (Vision) plus commitment (Action)
I would try limiting the crypto suites on the FS side, Look in vars.xml for details, I know if we send the whole crypt suite list at a polycom on pretty much any firmware the phone goes rum dumb and starts to echo our SDP's back at us. :P On Wed, Dec 3, 2014 at 12:36 PM, Ahmed Habiba <ahabiba@gmail.com> wrote:
Dear Brian,
I’m using "zoiper 1.19.7” on android, the issue appears only one I enable SRTP, for TLS only it is working very fine.
The issue as shown below it keeps registering till finally zipper restart on mobile.
One more point I’m configuring Zoiper without using RPORT for either SRTP or TLS.
*“2014-12-01 20:57:24.003230 [NOTICE] switch_ivr_originate.c:3467 Hangup sofia/internal/sip:1000@222.248.102.244 <1000@222.248.102.244>:38614 [CS_CONSUME_MEDIA] [NO_ANSWER]"*
recv 1290 bytes from tls/[222.215.195.234]:2896 at 20:56:54.344450: ------------------------------------------------------------------------ INVITE sip:1000@abc-xyz.com SIP/2.0 v: SIP/2.0/TLS 192.168.8.109:41659 ;rport;branch=z9hG4bKPjvnvRZjpAXahzIV7S8SRgS5vwKmYI9WFS;alias Max-Forwards: 70 f: <sip:1006@abc-xyz.com>;tag=weeMqzInPcNLPd6s5IX63c8be3DMvGkU t: <sip:1000@abc-xyz.com> m: <sip:1006@222.215.195.234:2896;transport=TLS;ob> i: sjprJQszC2LHvY6jRr-lm9rau9V1PlYX CSeq: 32737 INVITE Route: <sip:abc-xyz.com;transport=tls;lr> k: replaces, 100rel, timer, norefersub x: 1800 Min-SE: 90 User-Agent: CSipSimple_GT-S5830-10/r2450 Proxy-Authorization: Digest username="1006", realm="abc-xyz.com", nonce="329456ee-7994-11e4-bf79-1182ebca2429", uri="sip:1000@abc-xyz.com", response="ab3a0f2fe9207ced62eebd8c9b8c32b4", algorithm=MD5, cnonce="iLa-C.wpnBSeTQjWiXZK3H3PGYhi6EGt", qop=auth, nc=00000001 c: application/sdp l: 469
v=0 o=- 3626452487 3626452487 IN IP4 192.168.8.109 s=pjmedia c=IN IP4 192.168.8.109 t=0 0 m=audio 4000 RTP/SAVP 98 0 8 101 c=IN IP4 192.168.8.109 a=rtcp:4001 IN IP4 192.168.8.109 a=sendrecv a=rtpmap:98 SILK/16000 a=fmtp:98 useinbandfec=0 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:Vci7cNdSFTkkLnqz+qRkqCctPvRT6jIOrNc5KMbz a=crypto:2 AES_CM_128_HMAC_SHA1_32 inline:nW3ECq5YHHnrY2q5u7XZE4fvPfMOAWKQ+ehOp7zV ------------------------------------------------------------------------
send 405 bytes to tls/[222.215.195.234]:2896 at 20:56:54.344687: ------------------------------------------------------------------------ SIP/2.0 100 Trying Via: SIP/2.0/TLS 192.168.8.109:41659 ;rport=2896;branch=z9hG4bKPjvnvRZjpAXahzIV7S8SRgS5vwKmYI9WFS;alias;received=222.215.195.234 f: <sip:1006@abc-xyz.com>;tag=weeMqzInPcNLPd6s5IX63c8be3DMvGkU t: <sip:1000@abc-xyz.com> i: sjprJQszC2LHvY6jRr-lm9rau9V1PlYX CSeq: 32737 INVITE User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Content-Length: 0
send 2133 bytes to tls/[222.248.102.244]:38614 at 20:56:54.360608: ------------------------------------------------------------------------ INVITE sip:1000@222.248.102.244:38614;rinstance=98c51296f2d531cc;transport=TLS SIP/2.0 Via: SIP/2.0/TLS 176.31.245.17;branch=z9hG4bKjXZvg3cX76Krj Max-Forwards: 69 From: "Extension 1006" <sip:1006@176.31.245.17>;tag=15DcKN9tUZeaK To: < sip:1000@222.248.102.244:38614;rinstance=98c51296f2d531cc;transport=TLS> Call-ID: 0a3e07c5-f437-1232-9bba-d2ab2784dc6a CSeq: 68395843 INVITE Contact: <sip:mod_sofia@176.31.245.17:5061;transport=tls> User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer Content-Type: application/sdp Content-Disposition: session Content-Length: 1076 X-FS-Support: update_display,send_info Remote-Party-ID: "Extension 1006" <sip:1006@176.31.245.17
;party=calling;screen=yes;privacy=off
v=0 o=FreeSWITCH 1417445672 1417445673 IN IP4 176.31.245.17 s=FreeSWITCH c=IN IP4 176.31.245.17 t=0 0 m=audio 18142 RTP/SAVP 0 8 101 13 a=rtpmap:0 PCMU/8000 a=rtpmap:8 PCMA/8000 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=crypto:1 AEAD_AES_256_GCM_8 inline:6p/uXB7tN5SG9vHP/DMurij6BaZIOKcP4Tle0kjo2lwL1Oa4z9WGyZtk4zs a=crypto:2 AEAD_AES_128_GCM_8 inline:hGeJA6XQV1V35oTu2141o7mD64dFDRbeCbcf6g a=crypto:3 AES_CM_256_HMAC_SHA1_80 inline:XdZwwcl6kMRrWY7Vkrbozf/o1awka9lef0UjQRwvnOnnrbAgzXIm8s3yu7o8DQ a=crypto:4 AES_CM_192_HMAC_SHA1_80 inline:KtM92m0ac2musYPoXLDJb4rUbEMYAwMegPH9RMtzwzPb+0O93e0 a=crypto:5 AES_CM_128_HMAC_SHA1_80 inline:PtOpdIk2LTSCSDVzPaSN6AV2xosBrJUTd4mvKIGh a=crypto:6 AES_CM_256_HMAC_SHA1_32 inline:ZHzWxajRlQp8IuzX5CuFM1SRkL0huC62ukX583+Vg0LBiK9t2NrpP8FNwdkckQ a=crypto:7 AES_CM_192_HMAC_SHA1_32 inline:S9BWrDxGFYpU3P9o3HD0Z97W5jwo8vD+E1sJi821r4/B+cdukTw a=crypto:8 AES_CM_128_HMAC_SHA1_32 inline:l7C0wU29AjF2ZMnCTvks+1ytd/UiXHqN8UIsM6vf a=crypto:9 AES_CM_128_NULL_AUTH inline:tv97QsO7+S9NLTXrD02omyWoyM7I2KaWaimUgq99 a=ptime:20 ------------------------------------------------------------------------
REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0 Via: SIP/2.0/TLS 192.168.10.2:41120 ;branch=z9hG4bK-d8754z-903949acb1d10083-1---d8754z-;rport Max-Forwards: 70 Contact: < sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS> To: <sip:1000@abc-xyz.com;transport=TLS> From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22 Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 1 REGISTER Expires: 60 Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri User-Agent: Zoiper r27147 Allow-Events: presence, kpml Content-Length: 0
------------------------------------------------------------------------ send 716 bytes to tls/[222.248.102.244]:38620 at 20:57:01.806433: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/TLS 192.168.10.2:41120 ;branch=z9hG4bK-d8754z-903949acb1d10083-1---d8754z-;rport=38620;received=222.248.102.244 From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22 To: <sip:1000@abc-xyz.com;transport=TLS>;tag=2e74mgtyr84ve Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 1 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces WWW-Authenticate: Digest realm="abc-xyz.com", nonce="374fdd98-7994-11e4-bf9c-1182ebca2429", algorithm=MD5, qop="auth" Content-Length: 0
------------------------------------------------------------------------ recv 944 bytes from tls/[222.248.102.244]:38620 at 20:57:01.995662: ------------------------------------------------------------------------ REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0 Via: SIP/2.0/TLS 192.168.10.2:41120 ;branch=z9hG4bK-d8754z-8ca0e782336414eb-1---d8754z-;rport Max-Forwards: 70 Contact: < sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS> To: <sip:1000@abc-xyz.com;transport=TLS> From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22 Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 2 REGISTER Expires: 60 Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri User-Agent: Zoiper r27147 Authorization: Digest username="1000",realm="abc-xyz.com ",nonce="374fdd98-7994-11e4-bf9c-1182ebca2429",uri=" sip:abc-xyz.com;transport=TLS ",response="8d7e108ff98035d37424c32166fe0253",cnonce="107cf281c3b57888a4bfd1a9c3776098",nc=00000001,qop=auth,algorithm=MD5 Allow-Events: presence, kpml Content-Length: 0
------------------------------------------------------------------------ send 712 bytes to tls/[222.248.102.244]:38620 at 20:57:01.997931: ------------------------------------------------------------------------ SIP/2.0 200 OK Via: SIP/2.0/TLS 192.168.10.2:41120 ;branch=z9hG4bK-d8754z-8ca0e782336414eb-1---d8754z-;rport=38620;received=222.248.102.244 From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22 To: <sip:1000@abc-xyz.com;transport=TLS>;tag=3Q0XpBB2NHUFa Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 2 REGISTER Contact: < sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS
;expires=60 Date: Mon, 01 Dec 2014 19:57:01 GMT User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces Content-Length: 0
------------------------------------------------------------------------ recv 944 bytes from tls/[222.248.102.244]:38620 at 20:57:02.205719: ------------------------------------------------------------------------ REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0 Via: SIP/2.0/TLS 222.248.102.244:38620 ;branch=z9hG4bK-d8754z-59d493abef215091-1---d8754z-;rport Max-Forwards: 70 Contact: < sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS
;expires=0 To: <sip:1000@abc-xyz.com;transport=TLS> From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22 Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 3 REGISTER Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri User-Agent: Zoiper r27147 Authorization: Digest username="1000",realm="abc-xyz.com ",nonce="374fdd98-7994-11e4-bf9c-1182ebca2429",uri=" sip:abc-xyz.com;transport=TLS ",response="5168bf9afffe9adacef7d898bd6bec9b",cnonce="80108fa519303990cfd2d46639d767ee",nc=00000002,qop=auth,algorithm=MD5 Allow-Events: presence, kpml Content-Length: 0
------------------------------------------------------------------------ send 598 bytes to tls/[222.248.102.244]:38620 at 20:57:02.207249: ------------------------------------------------------------------------ SIP/2.0 200 OK Via: SIP/2.0/TLS 222.248.102.244:38620 ;branch=z9hG4bK-d8754z-59d493abef215091-1---d8754z-;rport=38620 From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22 To: <sip:1000@abc-xyz.com;transport=TLS>;tag=40Spr6U5jtH2N Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA. CSeq: 3 REGISTER Date: Mon, 01 Dec 2014 19:57:02 GMT User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces Content-Length: 0
------------------------------------------------------------------------ recv 681 bytes from tls/[222.248.102.244]:38620 at 20:57:02.400564: ------------------------------------------------------------------------ REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0 Via: SIP/2.0/TLS 222.248.102.244:38620 ;branch=z9hG4bK-d8754z-d738a1a836608006-1---d8754z-;rport Max-Forwards: 70 Contact: < sip:1000@222.248.102.244:38620;rinstance=43166fee0aaac1bc;transport=TLS> To: <sip:1000@abc-xyz.com;transport=TLS> From: <sip:1000@abc-xyz.com;transport=TLS>;tag=979e5f46 Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y. CSeq: 1 REGISTER Expires: 60 Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri User-Agent: Zoiper r27147 Allow-Events: presence, kpml Content-Length: 0
------------------------------------------------------------------------ send 694 bytes to tls/[222.248.102.244]:38620 at 20:57:02.401167: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/TLS 222.248.102.244:38620 ;branch=z9hG4bK-d8754z-d738a1a836608006-1---d8754z-;rport=38620 From: <sip:1000@abc-xyz.com;transport=TLS>;tag=979e5f46 To: <sip:1000@abc-xyz.com;transport=TLS>;tag=59jFt1c9F37mH Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y. CSeq: 1 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces WWW-Authenticate: Digest realm="abc-xyz.com", nonce="37aaa44e-7994-11e4-bf9d-1182ebca2429", algorithm=MD5, qop="auth" Content-Length: 0
------------------------------------------------------------------------ recv 950 bytes from tls/[222.248.102.244]:38620 at 20:57:02.655864: ------------------------------------------------------------------------ REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0 Via: SIP/2.0/TLS 222.248.102.244:38620 ;branch=z9hG4bK-d8754z-dfaa7130675d6cfa-1---d8754z-;rport Max-Forwards: 70 Contact: < sip:1000@222.248.102.244:38620;rinstance=43166fee0aaac1bc;transport=TLS> To: <sip:1000@abc-xyz.com;transport=TLS> From: <sip:1000@abc-xyz.com;transport=TLS>;tag=979e5f46 Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y. CSeq: 2 REGISTER Expires: 60 Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri User-Agent: Zoiper r27147 Authorization: Digest username="1000",realm="abc-xyz.com ",nonce="37aaa44e-7994-11e4-bf9d-1182ebca2429",uri=" sip:abc-xyz.com;transport=TLS ",response="f1667094626fc10ca76a070438497e6f",cnonce="dc790bffe285311f0b903bd515a3e741",nc=00000001,qop=auth,algorithm=MD5 Allow-Events: presence, kpml Content-Length: 0
------------------------------------------------------------------------ send 693 bytes to tls/[222.248.102.244]:38620 at 20:57:02.657688: ------------------------------------------------------------------------ SIP/2.0 200 OK Via: SIP/2.0/TLS 222.248.102.244:38620 ;branch=z9hG4bK-d8754z-dfaa7130675d6cfa-1---d8754z-;rport=38620 From: <sip:1000@abc-xyz.com;transport=TLS>;tag=979e5f46 To: <sip:1000@abc-xyz.com;transport=TLS>;tag=6jc8UvXcDcy7c Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y. CSeq: 2 REGISTER Contact: < sip:1000@222.248.102.244:38620;rinstance=43166fee0aaac1bc;transport=TLS
;expires=60 Date: Mon, 01 Dec 2014 19:57:02 GMT User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, path, replaces Content-Length: 0
*From: *Brian West <brian@freeswitch.org> *To: *FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> *Date: *December 1, 2014 at 5:19:30 PM GMT+3 *Reply-To: *FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> *Subject: **Re: [Freeswitch-users] FreeSWITCH TLS not able to receive calls*
What endpoints are involved? have you looked at 'sofia loglevel all 9' output and see if it gives you a clue?
On Fri, Nov 28, 2014 at 6:24 PM, Ahmed Habiba <ahabiba@gmail.com> wrote:
Dears,
I’ve configured FreeSWITCH with the below version with TLS/SRTPas per the recommendation in page “https://wiki.freeswitch.org/wiki/SIP_TLS” and it was strait forward, and I was able to connect and make make calls using zoiper, but I was not able to receive any calls after enabling the TLS/SRTP.
*"FreeSWITCH Version 1.4.13+git~20141103T195300Z~b942d0faa8~64bit (git b942d0f 2014-11-03 19:53:00Z 64bit)**”*
Your kind feedback will be appreciate.
Thanks,
Ahmed Habiba.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*Brian West* brian@freeswitch.org
*Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
-- Thanks and Best Regards,
Ahmed Habiba
Mob: +20 10 37 82 970
*Success: believe (Vision) plus commitment (Action)*
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
participants (3)
-
Ahmed habiba
-
Ahmed Habiba
-
Brian West