-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I try to get SIPS via TLS/TCP up. Unfortunately I get this error in console as a non root user: tport_bind_server(0x80febb8) to */85.16.246.5:5061/sips nta: bind(85.16.246.5:5061;transport=*): Protocol not supported nua: initializing SIP stack failed tport_destroy(0x80febb8) 2008-05-19 14:27:06 [ERR] sofia.c:551 sofia_profile_thread_run() Error Creating SIP UA for profile: internal in sip_profiles/internal.xml I configured TLS support as follows: ~ <!-- TLS: disabled by default, set to "true" to enable --> ~ <param name="tls" value="true"/> ~ <!-- additional bind parameters for TLS --> ~ <param name="tls-bind-params" value="transport=tls"/> ~ <!-- Port to listen on for TLS requests. (5061 will be used if unspecified) --> ~ <param name="tls-sip-port" value="5061"/> ~ <!-- Location of the agent.pem and cafile.pem ssl certificates (needed for TLS server) --> ~ <param name="tls-cert-dir" value="$${base_dir}/conf.tls/ssl"/> ~ <!-- TLS version ("sslv23" (default), "tlsv1"). NOTE: Phones may not work with TLSv1 --> ~ <param name="tls-version" value="tlsv1"/> I did a "bin/gentls_cert setup" to generate a CA. Maybe I habe to compile FS with TLS support? regards Helmut -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkgxeBoACgkQ4tZeNddg3dyCpwCgj7pfQvJKMWKevJVyeIU6dQmy xcwAnidYgk6rA6p0YziRHkbJ1biQYuBA =DIYB -----END PGP SIGNATURE-----
You need to make sure you have openssl-devel when you configure/ compile Sofia otherwise it's not enabled. Also their is more to it than "bin/gentls_cert setup" http://wiki.freeswitch.org/wiki/Tls Thanks, Brian On May 19, 2008, at 7:52 AM, Helmut Kuper wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hello,
I try to get SIPS via TLS/TCP up. Unfortunately I get this error in console as a non root user:
tport_bind_server(0x80febb8) to */85.16.246.5:5061/sips nta: bind(85.16.246.5:5061;transport=*): Protocol not supported nua: initializing SIP stack failed tport_destroy(0x80febb8) 2008-05-19 14:27:06 [ERR] sofia.c:551 sofia_profile_thread_run() Error Creating SIP UA for profile: internal
in sip_profiles/internal.xml I configured TLS support as follows:
~ <!-- TLS: disabled by default, set to "true" to enable --> ~ <param name="tls" value="true"/> ~ <!-- additional bind parameters for TLS --> ~ <param name="tls-bind-params" value="transport=tls"/> ~ <!-- Port to listen on for TLS requests. (5061 will be used if unspecified) --> ~ <param name="tls-sip-port" value="5061"/> ~ <!-- Location of the agent.pem and cafile.pem ssl certificates (needed for TLS server) --> ~ <param name="tls-cert-dir" value="$${base_dir}/conf.tls/ssl"/> ~ <!-- TLS version ("sslv23" (default), "tlsv1"). NOTE: Phones may not work with TLSv1 --> ~ <param name="tls-version" value="tlsv1"/>
I did a "bin/gentls_cert setup" to generate a CA.
Maybe I habe to compile FS with TLS support?
regards Helmut -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkgxeBoACgkQ4tZeNddg3dyCpwCgj7pfQvJKMWKevJVyeIU6dQmy xcwAnidYgk6rA6p0YziRHkbJ1biQYuBA =DIYB -----END PGP SIGNATURE-----
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Brian West sip:brian@freeswitch.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, ok works now. I had to install libgnutls-dev befor running ./configure script. TLS works with default-values of "bin/gentls_cert setup" and "bin/gentls_cert create". Except some issues on snom side at least simple calls, MOH and voicebox works well with SIPS+SRTP+G722@16000+snom370 over current FS. nice work so far! regards Helmut -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkgxmMgACgkQ4tZeNddg3dyGYwCeITX1Bij06cHg2bRRJR+6C0eu 9ZcAoJ4wjmdjOFP/stv4x69iCFoE10y+ =EjVu -----END PGP SIGNATURE-----
You'll need 7.1.33 firmware from snom before TLS/SRTP works correctly. I personally worked with Snom to fix every one of the srtp/ tls bugs that were left. (7.1.33 should be out very soon i'm told) /b On May 19, 2008, at 10:12 AM, Helmut Kuper wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi,
ok works now. I had to install libgnutls-dev befor running ./configure script. TLS works with default-values of "bin/gentls_cert setup" and "bin/gentls_cert create".
Except some issues on snom side at least simple calls, MOH and voicebox works well with SIPS+SRTP+G722@16000+snom370 over current FS.
nice work so far!
regards Helmut
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkgxmMgACgkQ4tZeNddg3dyGYwCeITX1Bij06cHg2bRRJR+6C0eu 9ZcAoJ4wjmdjOFP/stv4x69iCFoE10y+ =EjVu -----END PGP SIGNATURE-----
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Brian West sip:brian@freeswitch.org
participants (2)
-
Brian West
-
Helmut Kuper