[OpenSIPS-Users] TLS not working properly - 477 Send failed (477/TM)

Toyima Dias toyimads at gmail.com
Mon May 23 15:39:59 CEST 2011 

Hi,

I've seen previous mails to my problem, but seems that none were
solved...the thing is that i've my blink softphone registered with my
OpenSIPS using TLS, as you can see here:

Domain:: location table=512 records=2
   AOR:: 1000 at 192.168.131.129
      Contact:: sip:gsbpyeqv at 192.168.131.1:63831;*transport=tls* Q=
        Expires:: 514
        Callid:: cc75c9c8c1c44cf5bcc01c7ef1871ee9
        Cseq:: 20
        User-agent:: Blink 0.2.5 (Windows)
        State:: CS_SYNC
        Flags:: 0
        Cflag:: 0
        Socket:: tls:192.168.131.129:5061
        Methods:: 4294967295
And also i have another softphone with UDP registered:

   AOR:: 1001 at 192.168.131.129
      Contact:: sip:1001 at 192.168.131.1:5060;rinstance=726f5ebab20996e0;*
transport=UDP* Q=
        Expires:: 1495
        Callid:: Nzk1YmVmODU2ZTRhMDllOGYzZTYxYzRmMTkxMGYxZDk.
        Cseq:: 4
        User-agent:: Zoiper rev.5324
        State:: CS_SYNC
        Flags:: 0
        Cflag:: 0
        Socket:: udp:192.168.131.129:5060
        Methods:: 5951

There is no problem when the phone with UDP transport calls the TLS...but
viceversa i receive a 477 from OpenSIPS...take a look:

#
U 2011/05/23 15:35:28.667521 192.168.131.1:5060 -> 192.168.131.129:5060
INVITE sip:1000 at 192.168.131.129;transport=UDP SIP/2.0
Via: SIP/2.0/UDP 192.168.131.1:5060
;branch=z9hG4bK-d8754z-941e3c4804948f9e-1---d8754z-
Max-Forwards: 70
Contact: <sip:1001 at 192.168.131.1:5060;transport=UDP>
To: <sip:1000 at 192.168.131.129;transport=UDP>
From: "1001"<sip:1001 at 192.168.131.129;transport=UDP>;tag=34131030
Call-ID: YTI1NDEzYzcxODAyYzdkMmQxOWVhNTI0OGE0MTM2NGQ.
CSeq: 1 INVITE
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO,
SUBSCRIBE
Content-Type: application/sdp
User-Agent: Zoiper rev.5324
Content-Length: 329
v=0
o=Zoiper_user 0 0 IN IP4 192.168.131.1
s=Zoiper_session
c=IN IP4 192.168.131.1
t=0 0
m=audio 8000 RTP/AVP 3 0 8 110 98 101
a=rtpmap:3 GSM/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:110 speex/8000
a=rtpmap:98 iLBC/8000
a=fmtp:98 mode=30
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=sendrecv
#
U 2011/05/23 15:35:28.668040 192.168.131.129:5060 -> 192.168.131.1:5060
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 192.168.131.1:5060
;branch=z9hG4bK-d8754z-941e3c4804948f9e-1---d8754z-
To: <sip:1000 at 192.168.131.129
;transport=UDP>;tag=99760931e899ee4d244c24b586ec6d7f.6766
From: "1001"<sip:1001 at 192.168.131.129;transport=UDP>;tag=34131030
Call-ID: YTI1NDEzYzcxODAyYzdkMmQxOWVhNTI0OGE0MTM2NGQ.
CSeq: 1 INVITE
Proxy-Authenticate: Digest realm="192.168.131.129",
nonce="4dda62be000002a842b817c5cf79f9d6e4180bcda4b4cfbb"
Server: OpenSIPS (1.6.4-2-tls (i386/linux))
Content-Length: 0

#
U 2011/05/23 15:35:28.684670 192.168.131.1:5060 -> 192.168.131.129:5060
ACK sip:1000 at 192.168.131.129;transport=UDP SIP/2.0
Via: SIP/2.0/UDP 192.168.131.1:5060
;branch=z9hG4bK-d8754z-941e3c4804948f9e-1---d8754z-
Max-Forwards: 70
To: <sip:1000 at 192.168.131.129
;transport=UDP>;tag=99760931e899ee4d244c24b586ec6d7f.6766
From: "1001"<sip:1001 at 192.168.131.129;transport=UDP>;tag=34131030
Call-ID: YTI1NDEzYzcxODAyYzdkMmQxOWVhNTI0OGE0MTM2NGQ.
CSeq: 1 ACK
Content-Length: 0

#
U 2011/05/23 15:35:28.697136 192.168.131.1:5060 -> 192.168.131.129:5060
INVITE sip:1000 at 192.168.131.129;transport=UDP SIP/2.0
Via: SIP/2.0/UDP 192.168.131.1:5060
;branch=z9hG4bK-d8754z-4899036035f57010-1---d8754z-
Max-Forwards: 70
Contact: <sip:1001 at 192.168.131.1:5060;transport=UDP>
To: <sip:1000 at 192.168.131.129;transport=UDP>
From: "1001"<sip:1001 at 192.168.131.129;transport=UDP>;tag=34131030
Call-ID: YTI1NDEzYzcxODAyYzdkMmQxOWVhNTI0OGE0MTM2NGQ.
CSeq: 2 INVITE
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO,
SUBSCRIBE
Content-Type: application/sdp
Proxy-Authorization: Digest
username="1001",realm="192.168.131.129",nonce="4dda62be000002a842b817c5cf79f9d6e4180bcda4b4cfbb",uri="
sip:1000 at 192.168.131.129
;transport=UDP",response="299cdbd1c75a5ac237c4ca0779e54c1a",algorithm=MD5
User-Agent: Zoiper rev.5324
Content-Length: 329
v=0
o=Zoiper_user 0 0 IN IP4 192.168.131.1
s=Zoiper_session
c=IN IP4 192.168.131.1
t=0 0
m=audio 8000 RTP/AVP 3 0 8 110 98 101
a=rtpmap:3 GSM/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:110 speex/8000
a=rtpmap:98 iLBC/8000
a=fmtp:98 mode=30
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=sendrecv
#
U 2011/05/23 15:35:28.697905 192.168.131.129:5060 -> 192.168.131.1:5060
SIP/2.0 100 Giving a try
Via: SIP/2.0/UDP 192.168.131.1:5060
;branch=z9hG4bK-d8754z-4899036035f57010-1---d8754z-
To: <sip:1000 at 192.168.131.129;transport=UDP>
From: "1001"<sip:1001 at 192.168.131.129;transport=UDP>;tag=34131030
Call-ID: YTI1NDEzYzcxODAyYzdkMmQxOWVhNTI0OGE0MTM2NGQ.
CSeq: 2 INVITE
Server: OpenSIPS (1.6.4-2-tls (i386/linux))
Content-Length: 0

#
U 2011/05/23 15:35:28.702146 192.168.131.129:5060 -> 192.168.131.1:5060
*SIP/2.0 477 Send failed (477/TM)
*Via: SIP/2.0/UDP 192.168.131.1:5060
;branch=z9hG4bK-d8754z-4899036035f57010-1---d8754z-
To: <sip:1000 at 192.168.131.129
;transport=UDP>;tag=8343c21546054fb2c85dc061c2524c3c-a3ff
From: "1001"<sip:1001 at 192.168.131.129;transport=UDP>;tag=34131030
Call-ID: YTI1NDEzYzcxODAyYzdkMmQxOWVhNTI0OGE0MTM2NGQ.
CSeq: 2 INVITE
Server: OpenSIPS (1.6.4-2-tls (i386/linux))
Content-Length: 0

#
U 2011/05/23 15:35:28.711101 192.168.131.1:5060 -> 192.168.131.129:5060
ACK sip:1000 at 192.168.131.129;transport=UDP SIP/2.0
Via: SIP/2.0/UDP 192.168.131.1:5060
;branch=z9hG4bK-d8754z-4899036035f57010-1---d8754z-
Max-Forwards: 70
To: <sip:1000 at 192.168.131.129
;transport=UDP>;tag=8343c21546054fb2c85dc061c2524c3c-a3ff
From: "1001"<sip:1001 at 192.168.131.129;transport=UDP>;tag=34131030
Call-ID: YTI1NDEzYzcxODAyYzdkMmQxOWVhNTI0OGE0MTM2NGQ.
CSeq: 2 ACK
Content-Length: 0

On opensips.cfg i saw this:

*May 23 15:38:51 SIP-PROXY-SERVER-1 /sbin/opensips[8151]:
ERROR:core:tls_connect: something wrong in SSL: 1 (ret=0) err=Success(0)
May 23 15:38:51 SIP-PROXY-SERVER-1 /sbin/opensips[8151]:
ERROR:core:tls_print_errstack: error:14094410:SSL
routines:SSL3_READ_BYTES:sslv3 alert handshake failure
May 23 15:38:51 SIP-PROXY-SERVER-1 /sbin/opensips[8151]:
ERROR:core:tcp_send: failed to send
May 23 15:38:51 SIP-PROXY-SERVER-1 /sbin/opensips[8151]: ERROR:tm:msg_send:
tcp_send failed
May 23 15:38:51 SIP-PROXY-SERVER-1 /sbin/opensips[8151]:
ERROR:tm:t_forward_nonack: sending request failed*

Any help please?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20110523/5f7d5441/attachment.htm>

More information about the Users mailing list