[OpenSIPS-Users] I need some help in websocket connection error .

[Callum Guy]

You might find that a tcpdump is the only way to get to grips with the
underlying issue.

Having said that I wonder if there is any chance that the connection isn't
accepting simply due to a cipher incompatibility. Are you setting a cipher
list that you know your clients accept? Maybe try:

modparam("tls_mgm", "ciphers_list",
"AES256-GCM-SHA384,AES256-SHA256,AES256-SHA,CAMELLIA256-SHA,AES128-SHA,CAMELLIA128-SHA,RC4-SHA")


On Fri, 14 Jun 2019 at 09:17, Sasmita Panda <spanda at 3clogic.com> wrote:

> I had a dedicated server for 1 Client . When that client faces the issue I
> started looking into the logs . And this is what the error I got .
>
> but latter on when I saw other servers which is getting used by different
> client in that logs also same error coming everyday .
>
> As a conclusion its happening with everybody .
>
> Below is the configuration .
>
> modparam("tls_mgm", "tls_method", "tlsv1_2")
> modparam("tls_mgm", "verify_cert", "0")
> modparam("tls_mgm", "require_cert", "0")
> modparam("tls_mgm", "certificate",
> "/usr/etc/opensips/tls/3ccloudwebrtc2019.crt")
> modparam("tls_mgm", "private_key", "/usr/etc/opensips/tls/3ccloud.key")
> modparam("tls_mgm", "ca_list", "/usr/etc/opensips/tls/rootCA/cacert.pem")
>
>
>
> *Thanks & Regards*
> *Sasmita Panda*
> *Senior Network Testing and Software Engineer*
> *3CLogic , ph:07827611765*
>
>
> On Thu, Jun 13, 2019 at 6:50 PM Răzvan Crainea <razvan at opensips.org>
> wrote:
>
>> Can you trace the SSL traffic between the two endpoints? Perhaps the SSL
>> header give you a reason for not accepting the connection.
>> Is this happening only for certain clients, or for everyone?
>> Are you requiring any certificates validation?
>>
>> Best regards,
>> Răzvan
>>
>> On 6/12/19 3:34 PM, Sasmita Panda wrote:
>> > I am using opensips 2.2
>> >   version: opensips 2.2.4 (x86_64/linux)
>> >
>> > I am using the proto_wss and tls_mgm module for establishing websocket
>> > connection .
>> >
>> > I am getting bellow error again and again . Whats the reson behind this
>> > and how can I solve this problem ?
>> >
>> >
>> > Jun 10 00:00:15 localhost /usr/sbin/opensips[1548]:
>> > INFO:core:probe_max_sock_buff: using snd buffer of 416 kb
>> > Jun 10 00:00:15 localhost /usr/sbin/opensips[1548]:
>> > INFO:core:init_sock_keepalive: TCP keepalive enabled on socket 96
>> > Jun 10 00:00:15 localhost /usr/sbin/opensips[1546]:
>> > ERROR:proto_wss:tls_accept: New TLS connection from 192.168.160.6:58616
>> > <http://192.168.160.6:58616> failed to accept
>> > Jun 10 00:00:15 localhost /usr/sbin/opensips[1546]:
>> > ERROR:proto_wss:wss_read_req: cannot fix read connection
>> > Jun 10 00:00:17 localhost /usr/sbin/opensips[1548]:
>> > INFO:core:probe_max_sock_buff: using snd buffer of 416 kb
>> > Jun 10 00:00:17 localhost /usr/sbin/opensips[1548]:
>> > INFO:core:init_sock_keepalive: TCP keepalive enabled on socket 96
>> > Jun 10 00:00:17 localhost /usr/sbin/opensips[1546]:
>> > ERROR:proto_wss:tls_accept: New TLS connection from
>> 192.168.175.59:12918
>> > <http://192.168.175.59:12918> failed to accept
>> > Jun 10 00:00:17 localhost /usr/sbin/opensips[1546]:
>> > ERROR:proto_wss:wss_read_req: cannot fix read connection
>> >
>> >
>> > Please do help .
>> >
>> >
>> >
>> > */Thanks & Regards/*
>> > /Sasmita Panda/
>> > /Senior Network Testing and Software Engineer/
>> > /3CLogic , ph:07827611765/
>> >
>> > _______________________________________________
>> > Users mailing list
>> > Users at lists.opensips.org
>> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>> >
>>
>> --
>> Răzvan Crainea
>> OpenSIPS Core Developer
>>    http://www.opensips-solutions.com
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>

-- 





*0333 332 0000  |  www.x-on.co.uk <http://www.x-on.co.uk>  |   ** 
<https://www.linkedin.com/company/x-on>   <https://www.facebook.com/XonTel> 
  <https://twitter.com/xonuk> *


X-on
is a trading name of Storacall 
Technology Ltd a limited company registered in
England and Wales.


Registered Office : Avaland House, 110 London Road, Apsley, Hemel 
Hempstead,
Herts, HP3 9SD. Company Registration No. 2578478.

The 
information in this e-mail is confidential and for use by the addressee(s)

only. If you are not the intended recipient, please notify X-on immediately 
on +44(0)333 332 0000 and delete the
message from your computer. If you are 
not a named addressee you must not use,
disclose, disseminate, distribute, 
copy, print or reply to this email. Views
or opinions expressed by an 
individual
within this email may not necessarily
reflect the views of X-on 
or its associated companies. Although X-on routinely
screens for viruses, 
addressees should scan this email and any attachments
for
viruses. X-on 
makes no representation or warranty as to the absence of viruses
in this 
email or any attachments.










-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20190614/b1fb0e08/attachment-0001.html>