[OpenSIPS-Devel] SF.net SVN: opensips:[4712] trunk/tls/tls_server.c

[Klaus Darilion]

eyebeam RST the TCP connection after ClientHello. Maybe you can find out 
some more hints by activating logging in eyebeam (use the highest level) 
and then inspect the logfile.

Further, the better practice is to reuse the already existing TLS 
connection (opened from eyebeam during REGISTER). This should work by 
either set eyebeam to use the public IP and/or use fix_nated_register().

regards
klaus

Sara Lee schrieb:
> Hi Sirs,
>  
> I used Wireshark to capture the packets.
> Please refer to the attached file -- "tcp-to-tls".
> It seems like eyebeam sent the RST packet to opensips.
> But if call is from tls to tcp, the connection can be built successfully.
>  
> Sara.
> 2008/9/4 Klaus Darilion <klaus.mailinglists at pernau.at 
> <mailto:klaus.mailinglists at pernau.at>>
> 
>     Bogdan-Andrei Iancu wrote:
> 
>         Hi Sara,
> 
>         Well, the error description speaks for itself. It seams that
>         opensips opens a connection to eyebeam and for whatever reasons,
>         eyebeam closes the connection. Could you confirm this by looking
>         at the trace - use tcpdump to see who is closing the TCP connection.
> 
> 
>     Even better use "ssldump" which can decode some SSL messages (e.g.
>     Alert messages, ...)
> 
>     klaus
> 
> 
>         Thanks and regards,
>         Bogdan
> 
>         Sara Lee wrote:
> 
>             Hi, Bogdan
> 
>             Here is the result.
> 
>             Sep  3 18:47:09 tld5sip /usr/local/sbin/opensips[8413]: new
>             branch at
>             sip:2222 at 10.16.88.88:47811;rinstance=fc41501f86822386;transport=TLS
>             Sep  3 18:47:09 tld5sip /usr/local/sbin/opensips[8413]:
>             ERROR:core:tls_connect: SSL_ERROR_SYSCALL err=Connection
>             reset by peer(104)
>             Sep  3 18:47:09 tld5sip /usr/local/sbin/opensips[8413]:
>             ERROR:core:tls_connect: something wrong in SSL: 5 (ret=-1)
>             err=Connection reset by peer(104)
>             Sep  3 18:47:09 tld5sip /usr/local/sbin/opensips[8413]:
>             ERROR:core:tcp_send: failed to send
>             Sep  3 18:47:09 tld5sip /usr/local/sbin/opensips[8413]:
>             ERROR:tm:msg_send: tcp_send failed
>             Sep  3 18:47:09 tld5sip /usr/local/sbin/opensips[8413]:
>             ERROR:tm:t_forward_nonack: sending request failed
>             Sep  3 18:47:09 tld5sip /usr/local/sbin/opensips[8413]: ACC:
>             call missed:
>             timestamp=1220438829;method=INVITE;from_tag=4d01507d;to_tag=;call_id=OTY3NjBlZmIxM2YyMWZhOTQ3YmFhNTlhYzhkY2Q1NzI.;code=477;reason=Request
>             Failure
> 
>             Regards,
>             Sara
> 
>             2008/9/3 Bogdan-Andrei Iancu <bogdan at voice-system.ro
>             <mailto:bogdan at voice-system.ro>
>             <mailto:bogdan at voice-system.ro <mailto:bogdan at voice-system.ro>>>
> 
>                Revision: 4712
>                          
>             http://opensips.svn.sourceforge.net/opensips/?rev=4712&view=rev
>             <http://opensips.svn.sourceforge.net/opensips/?rev=4712&view=rev>
>              
>              <http://opensips.svn.sourceforge.net/opensips/?rev=4712&view=rev
>             <http://opensips.svn.sourceforge.net/opensips/?rev=4712&view=rev>>
>                Author:   bogdan_iancu
>                Date:     2008-09-03 06:52:40 +0000 (Wed, 03 Sep 2008)
> 
>                Log Message:
>                -----------
>                -exteneded loging - for SSL_ERROR_SYSCALL print errno also.
> 
>                Modified Paths:
>                --------------
>                   trunk/tls/tls_server.c
> 
> 
>                This was sent by the SourceForge.net collaborative
>             development
>                platform, the world's largest Open Source development site.
> 
>                _______________________________________________
>                Devel mailing list
>                Devel at lists.opensips.org
>             <mailto:Devel at lists.opensips.org>
>             <mailto:Devel at lists.opensips.org
>             <mailto:Devel at lists.opensips.org>>
>                http://lists.opensips.org/cgi-bin/mailman/listinfo/devel
> 
> 
> 
> 
>         _______________________________________________
>         Devel mailing list
>         Devel at lists.opensips.org <mailto:Devel at lists.opensips.org>
>         http://lists.opensips.org/cgi-bin/mailman/listinfo/devel
> 
> 
>