Establishing call over TLS fails
Hello, I try to establish a call between two instances of eyeBeam via FreeSWITCH using TLS. Registering works fine but setting up the call fails. In the wireshark listings I can see that the called softphone aborts the TCP connection (it sends back a message with the RES-Flag set) after receiving the first package (client hello). In the log files of the called softphone it says that there is no target domain specified. Has anyone had similar problems with FS and eyeBeam? Or with any other software in general? Thanks in advance -- Alois Komenda Fraunhofer-Einrichtung für Systeme der Kommunikationstechnik ESK
I have never tested it with Eyebeam but I think you'll have to install your CA Cert into Eyebeam to get it to work properly. I have to do the same with Polycom. /b On Jan 21, 2008, at 8:57 AM, Alois Komenda wrote:
Hello,
I try to establish a call between two instances of eyeBeam via FreeSWITCH using TLS. Registering works fine but setting up the call fails. In the wireshark listings I can see that the called softphone aborts the TCP connection (it sends back a message with the RES-Flag set) after receiving the first package (client hello). In the log files of the called softphone it says that there is no target domain specified.
Has anyone had similar problems with FS and eyeBeam? Or with any other software in general?
Thanks in advance -- Alois Komenda Fraunhofer-Einrichtung für Systeme der Kommunikationstechnik ESK
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
I installed the certificate on the machine using MMC. How can I install a certificate in eyeBeam directly? I think the certificate is not the problem because registering works and the call is aborted before certificates are exchanged. Regards -- Alois Komenda Fraunhofer-Einrichtung für Systeme der Kommunikationstechnik ESK -----Ursprüngliche Nachricht----- Von: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] Im Auftrag von Brian West Gesendet: Montag, 21. Januar 2008 16:20 An: freeswitch-users@lists.freeswitch.org Betreff: Re: [Freeswitch-users] Establishing call over TLS fails I have never tested it with Eyebeam but I think you'll have to install your CA Cert into Eyebeam to get it to work properly. I have to do the same with Polycom. /b On Jan 21, 2008, at 8:57 AM, Alois Komenda wrote:
Hello,
I try to establish a call between two instances of eyeBeam via FreeSWITCH using TLS. Registering works fine but setting up the call fails. In the wireshark listings I can see that the called softphone aborts the TCP connection (it sends back a message with the RES-Flag set) after receiving the first package (client hello). In the log files of the called softphone it says that there is no target domain specified.
Has anyone had similar problems with FS and eyeBeam? Or with any other software in general?
Thanks in advance -- Alois Komenda Fraunhofer-Einrichtung für Systeme der Kommunikationstechnik ESK
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use rs http://www.freeswitch.org
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Apart from wireshark, you can also look at the log files generated by eyebeam. I have worked on eyebeam and my own (not FS but SIP/TLS/SRTP enabled) server and so far it seems OK since last six month. Yes you should go for the updated eyebeam version. Alois Komenda wrote:
Hello,
I try to establish a call between two instances of eyeBeam via FreeSWITCH using TLS. Registering works fine but setting up the call fails. In the wireshark listings I can see that the called softphone aborts the TCP connection (it sends back a message with the RES-Flag set) after receiving the first package (client hello). In the log files of the called softphone it says that there is no target domain specified.
Has anyone had similar problems with FS and eyeBeam? Or with any other software in general?
Thanks in advance
-- Alois Komenda Fraunhofer-Einrichtung für Systeme der Kommunikationstechnik ESK
------------------------------------------------------------------------
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
------------------------------------------------------------------------
No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.516 / Virus Database: 269.19.8/1236 - Release Date: 1/21/2008 8:23 PM
I'm not 100% sure eyebeam does SRTP via SDES.. Tested and working phones are Snom and Polycom (tls+srtp) and Grandstream (srtp only) Anything outside that is a toss up. /b On Jan 21, 2008, at 10:33 PM, R R Rana wrote:
Apart from wireshark, you can also look at the log files generated by eyebeam. I have worked on eyebeam and my own (not FS but SIP/TLS/SRTP enabled) server and so far it seems OK since last six month. Yes you should go for the updated eyebeam version.
I did look into the log files. And there it says that the target domain is unspecified: [08-01-18]15:07:22.460 | Debug | RESIP:TRANSPORT | "Received TCP connection from: [ V4 192.168.0.21:59114 TLS target domain=unspecified received on: Transport: [ V4 0.0.0.0:5061 TLS target domain=unspecified connectionId=0 ] connectionId=0 ] as fd=1248" | [08-01-18]15:07:22.460 | Debug | RESIP:TRANSPORT | "ConnectionBase::ConnectionBase, who: [ V4 192.168.0.21:59114 TLS target domain=unspecified received on: Transport: [ V4 0.0.0.0:5061 TLS target domain=unspecified connectionId=0 ] connectionId=0 ] 044271B8" | [08-01-18]15:07:22.460 | Debug | RESIP:TRANSPORT | "No compression library available: 044271B8" | [08-01-18]15:07:22.460 | Info | RESIP:TRANSPORT | "Creating TLS connection for domain [ V4 192.168.0.21:59114 TLS target domain=unspecified received on: Transport: [ V4 0.0.0.0:5061 TLS target domain=unspecified connectionId=0 ] connectionId=0 ] on 1248" | [08-01-18]15:07:22.460 | Debug | RESIP:TRANSPORT | "Trying to form TLS connection - acting as server" | [08-01-18]15:07:22.461 | Error | RESIP:TRANSPORT | "Tranport was not created with a server domain so can not act as server" | [08-01-18]15:07:22.461 | Debug | RESIP | "BaseException at W:\Headsvn\SUA\Library\sipfoundry\main\resip\stack\TlsConnection.cxx:51 Trying to act as server but no domain specified" | I'm wondering where the data for this target domain should come from because at that moment only the Client Hello message has been received by the softphone. Which version do you mean by "updated version"? I use 1.5.16.1 (build 43069). I tried to update to 1.5.17 but there were errors. Is that update an official release or still a beta? Regards -- Alois Komenda Fraunhofer-Einrichtung für Systeme der Kommunikationstechnik ESK -----Ursprüngliche Nachricht----- Von: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] Im Auftrag von R R Rana Gesendet: Dienstag, 22. Januar 2008 05:33 An: freeswitch-users@lists.freeswitch.org Betreff: Re: [Freeswitch-users] Establishing call over TLS fails Apart from wireshark, you can also look at the log files generated by eyebeam. I have worked on eyebeam and my own (not FS but SIP/TLS/SRTP enabled) server and so far it seems OK since last six month. Yes you should go for the updated eyebeam version. Alois Komenda wrote:
Hello,
I try to establish a call between two instances of eyeBeam via FreeSWITCH using TLS. Registering works fine but setting up the call fails. In the wireshark listings I can see that the called softphone aborts the TCP connection (it sends back a message with the RES-Flag set) after receiving the first package (client hello). In the log files of the called softphone it says that there is no target domain specified.
Has anyone had similar problems with FS and eyeBeam? Or with any other software in general?
Thanks in advance
-- Alois Komenda Fraunhofer-Einrichtung für Systeme der Kommunikationstechnik ESK
---------------------------------------------------------------------- --
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use rs http://www.freeswitch.org
---------------------------------------------------------------------- --
No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.516 / Virus Database: 269.19.8/1236 - Release Date: 1/21/2008 8:23 PM
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (3)
-
Alois Komenda
-
Brian West
-
R R Rana