[OpenSIPS-Users] TLS calls through Sip ALG router

[Alexander Jankowsky]

Running OpenSIPS 3.4.9 on Debian 12.7, softphones are MicroSIP v3.21.4

 

                           Softphone 1

                              |

 
-----------------Local_NAT_Router1------------------Local_NAT_Router3-------
-------OpenSIPS Server

      |                       |

      |                    Local_NAT_Router2

      |                       |

      |                    Softphone 2

      |

Public Internet

      |

      |                [LOCKED SIP ALG ROUTER]

 
L----------------Remote_NAT_Router4------------------Remote_NAT_Router5-----
-------Softphone 5

 

Local softphones 1 & 2 can successfully call remote softphone 5 on TLS with
two way audio.

When softphone 5 attempts a call back on TLS there is the pop-up "Send
failed (477/TM)"

 

Using "opensips-cli -x mi ul_dump"

 

This is the local Softphone 2

"AOR": "2",

"Contact": "sip:2 at 11.11.11.11:37335;transport=TLS;ob",

"ContactID": "3659174697266531",

"Expires": 57,

"Q": "",

"Callid": "56a5db52f0094c7baaaf80323220d576",

"Cseq": 40112,

"User-agent": "MicroSIP/3.21.4",

"State": "CS_NEW",

"Flags": 0,

"Cflags": "",

"Socket": "tls:11.11.11.11:42061",

"Methods": 8063

 

This is the Remote Softphone 5, behind the locked SIP ALG router.

"AOR": "5",

"Contact": "sip:5 at 22.22.22.22:56010;transport=TLS;ob",

"ContactID": "3588805953090311",

"Expires": 11,

"Q": "",

"Callid": "859ff264a633470a9e5f05db749174f9",

"Cseq": 10265,

"User-agent": "MicroSIP/3.21.4",

"State": "CS_NEW",

"Flags": 0,

"Cflags": "",

"Socket": "tls:11.11.11.11:42061",

"Methods": 8063

 

This is the call attempt from remote softphone 5 to local softphone 2

Using "journalctl -xeu opensips.service" to read the call attempt shows:

 

NOTICE:new branch at sip:2 at 22.22.22.22;transport=tls

ERROR:proto_tls:proto_tls_conn_init: no TLS client domain found

ERROR:core:tcp_conn_create: failed to do proto 3 specific init for conn
0x7f67a7887d00

ERROR:core:tcp_async_connect: tcp_conn_create failed

ERROR:proto_tls:proto_tls_send: async TCP connect failed

ERROR:tm:msg_send: send() to 22.22.22.22:5061 for proto tls/3 failed

ERROR:tm:t_forward_nonack: sending request failed

 

 

opensips.cfg      https://pastebin.com/r0kwzG02

 

 

 

 

 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20241211/7c841002/attachment-0001.html>