[OpenSIPS-Users] SIPp-OpenSIPS-SIPp TLS problem

[Tarik Tankovic]

Hi,

as usual I am having a problem with my SIPp-OpenSIPS-SIPp configuration.

First SIPp is working as UAC and the second one is working as UAS. I
am trying to implement TLS on both links (1. link SIPp(UAC)-OpenSIPS
and 2. link OpenSIPS-SIPp(UAS)).

I managed to implement TLS on the first link and even on the second
one but when OpenSIPS starts to send SIP messages over TCP to second
SIPp (UAS) it failed. You can see log in the attachment. When I change
to TCP on the second link everything works. I am a little bit puzzled
what is a problem.

I even tried to create two TLS domains in the opensips.cfg file
(TLS_server_domain for incoming traffic from the first SIPp and the
TLS_client_domain for outgoing traffic to the second SIPp) but I was
not able. I did something wrong.

Thanks in advance,

Tarik
-------------- next part --------------
Mar  3 10:38:57 tarik-desktop opensips: INFO:core:init_tcp: using epoll_lt as the TCP io watch method (auto detected)
Mar  3 10:38:57 tarik-desktop opensips: WARNING:core:init_tls: disabling compression due ZLIB problems
Mar  3 10:38:57 tarik-desktop opensips: INFO:core:init_tls_domains: Processing TLS domain [0.0.0.0:0]
Mar  3 10:38:57 tarik-desktop opensips: WARNING:core:init_ssl_ctx_behavior: client verification activated. Client certificates are mandatory.
Mar  3 10:38:57 tarik-desktop opensips: INFO:core:init_tls_domains: Processing TLS domain [0.0.0.0:0]
Mar  3 10:38:57 tarik-desktop opensips: WARNING:core:init_ssl_ctx_behavior: server verification activated.
Mar  3 10:38:57 tarik-desktop /sbin/opensips[11466]: NOTICE:core:main: version: opensips 1.6.0-tls (i386/linux)
Mar  3 10:38:57 tarik-desktop /sbin/opensips[11466]: INFO:core:main: using 32 Mb shared memory
Mar  3 10:38:57 tarik-desktop /sbin/opensips[11466]: INFO:core:main: using 1 Mb private memory per process
Mar  3 10:38:57 tarik-desktop /sbin/opensips[11466]: NOTICE:signaling:mod_init: initializing module ...
Mar  3 10:38:57 tarik-desktop /sbin/opensips[11466]: INFO:sl:mod_init: Initializing StateLess engine
Mar  3 10:38:57 tarik-desktop /sbin/opensips[11466]: INFO:tm:mod_init: TM - initializing...
Mar  3 10:38:57 tarik-desktop /sbin/opensips[11466]: INFO:maxfwd:mod_init: initializing...
Mar  3 10:38:57 tarik-desktop /sbin/opensips[11466]: INFO:usrloc:ul_init_locks: locks array size 512
Mar  3 10:38:57 tarik-desktop /sbin/opensips[11466]: INFO:registrar:mod_init: initializing...
Mar  3 10:38:57 tarik-desktop /sbin/opensips[11466]: INFO:textops:mod_init: initializing...
Mar  3 10:38:57 tarik-desktop /sbin/opensips[11466]: INFO:xlog:mod_init: initializing...
Mar  3 10:38:57 tarik-desktop /sbin/opensips[11466]: INFO:acc:mod_init: initializing...
Mar  3 10:38:57 tarik-desktop /sbin/opensips[11466]: INFO:auth:mod_init: initializing...
Mar  3 10:38:57 tarik-desktop /sbin/opensips[11466]: INFO:auth_db:mod_init: initializing...
Mar  3 10:38:57 tarik-desktop /sbin/opensips[11466]: INFO:alias_db:mod_init: initializing...
Mar  3 10:38:57 tarik-desktop /sbin/opensips[11466]: INFO:core:probe_max_receive_buffer: using a UDP receive buffer of 255 kb
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11472]: NOTICE:core:verify_callback: depth = 1
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11472]: NOTICE:core:verify_callback: preverify is good: verify return: 1
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11472]: NOTICE:core:verify_callback: depth = 0
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11472]: NOTICE:core:verify_callback: preverify is good: verify return: 1
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11473]: WARNING:core:send2child: no free tcp receiver, connection passed to the leastbusy one (1)
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11472]: NOTICE:core:verify_callback: depth = 1
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11472]: NOTICE:core:verify_callback: preverify is good: verify return: 1
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11472]: NOTICE:core:verify_callback: depth = 0
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11472]: NOTICE:core:verify_callback: preverify is good: verify return: 1
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11472]: ERROR:core:tls_blocking_write: too many retries with no operation
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11472]: ERROR:core:tcp_send: failed to send
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11472]: ERROR:tm:msg_send: tcp_send failed
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11472]: ERROR:tm:t_forward_nonack: sending request failed
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11472]: ACC: call missed: timestamp=1330767546;method=INVITE;from_tag=4028SIPpTag001;to_tag=;call_id=1-4028 at 192$
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11472]: ERROR:core:_tls_read: SYSCALL error -> (0) <Success>
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11472]: ERROR:core:_tls_read: something wrong in SSL: 5
Mar  3 10:39:06 tarik-desktop /sbin/opensips[11472]: ERROR:core:tcp_read_req: failed to read
Mar  3 10:39:07 tarik-desktop /sbin/opensips[11472]: NOTICE:core:verify_callback: depth = 1
Mar  3 10:39:07 tarik-desktop /sbin/opensips[11472]: NOTICE:core:verify_callback: preverify is good: verify return: 1
Mar  3 10:39:07 tarik-desktop /sbin/opensips[11472]: NOTICE:core:verify_callback: depth = 0
Mar  3 10:39:07 tarik-desktop /sbin/opensips[11472]: NOTICE:core:verify_callback: preverify is good: verify return: 1