<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
</style>
</head>
<body class='hmmessage'>
Sorry typo error.<BR>
<BR><SPAN lang=BE>
I have changed the protocol on both end to 'TLSv1'<BR>
<BR>
Anil<BR>
<BR>
</SPAN><BR> <BR>> From: anilpannikode@hotmail.com<BR>> To: bogdan@voice-system.ro<BR>> Date: Fri, 24 Apr 2009 09:31:59 -0400<BR>> CC: users@lists.opensips.org<BR>> Subject: Re: [OpenSIPS-Users] Trying to get TLS working with OpenSips 1.5<BR>> <BR>> Hi Bogdan,<BR>> <BR>> I have changed the protocol on both end to ''. Now I am getting a 'Wrong<BR>> version number'<BR>> <BR>> Apr 24 06:42:00 pc10-10-10-193 /usr/sbin/opensips[17009]:<BR>> DBG:core:io_watch_add: io_watch_add(0x826ab20, 19, 2, 0xb3efcf50), fd_no=1 <BR>> Apr 24 06:42:00 pc10-10-10-193 /usr/sbin/opensips[17009]:<BR>> DBG:core:tls_update_fd: New fd is 19 <BR>> Apr 24 06:42:00 pc10-10-10-193 /usr/sbin/opensips[17009]:<BR>> ERROR:core:tls_accept: some error in SSL: <BR>> Apr 24 06:42:00 pc10-10-10-193 /usr/sbin/opensips[17009]:<BR>> ERROR:core:tls_print_errstack: error:1408F10B:SSL<BR>> routines:SSL3_GET_RECORD:wrong version number <BR>> Apr 24 06:42:00 pc10-10-10-193 /usr/sbin/opensips[17009]:<BR>> DBG:core:io_watch_del: io_watch_del (0x826ab20, 19, -1, 0x10) fd_no=2 called<BR>> <BR>> Apr 24 06:42:00 pc10-10-10-193 /usr/sbin/opensips[17009]:<BR>> DBG:core:release_tcpconn: releasing con 0xb3efcf50, state -2, fd=19, id=3 <BR>> Apr 24 06:42:00 pc10-10-10-193 /usr/sbin/opensips[17009]:<BR>> DBG:core:release_tcpconn: extra_data 0xb3f0d068<BR>> <BR>> Remote end is a Dialogic VoipGateway, I was wondering if there is another<BR>> simple client I can use for testing TLS ? Once I get that working, I can dig<BR>> more into my current setup.<BR>> <BR>> Regards<BR>> <BR>> Anil<BR>> <BR>> <BR>> <BR>> -----Original Message-----<BR>> From: Bogdan-Andrei Iancu [mailto:bogdan@voice-system.ro] <BR>> Sent: Friday, April 24, 2009 8:10 AM<BR>> To: Anil Pannikode<BR>> Cc: users@lists.opensips.org<BR>> Subject: Re: [OpenSIPS-Users] Trying to get TLS working with OpenSips 1.5<BR>> <BR>> Hi Anil,<BR>> <BR>> Are you sure the connecting party is also using TLS ? maybe it is using <BR>> pure TCP instead of TLC - use tcpdump to see what is going one.<BR>> <BR>> Regards,<BR>> Bogdan<BR>> <BR>> Anil Pannikode wrote:<BR>> > THanks for the tip. I did not cut and paste the private key properly. <BR>> > It is now loading how ever the connection is failing with the <BR>> > following error<BR>> ><BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: <BR>> > DBG:core:tls_find_server_domain: virtual TLS server domain not found, <BR>> > Using default TLS server domain settings<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: <BR>> > DBG:core:tls_tcpconn_init: found socket based TLS server domain <BR>> > [0.0.0.0:0]<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: <BR>> > DBG:core:tls_tcpconn_init: Setting in ACCEPT mode (server)<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: <BR>> > DBG:core:tcpconn_add: hashes: 594, 1<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: <BR>> > DBG:core:handle_new_connect: new connection: 0xb3ebdf50 24 flags: 0002<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: <BR>> > DBG:core:send2child: to tcp child 0 0(16980), 0xb3ebdf50<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16980]: <BR>> > DBG:core:handle_io: received n=4 con=0xb3ebdf50, fd=19<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16980]: <BR>> > DBG:core:io_watch_add: io_watch_add(0x826ab20, 19, 2, 0xb3ebdf50), <BR>> > fd_no=1<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16980]: <BR>> > DBG:core:tls_update_fd: New fd is 19<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16980]: <BR>> > ERROR:core:tls_accept: some error in SSL:<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16980]: <BR>> > ERROR:core:tls_print_errstack: error:140760FC:SSL <BR>> > routines:SSL23_GET_CLIENT_HELLO:unknown protocol<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16980]: <BR>> > DBG:core:io_watch_del: io_watch_del (0x826ab20, 19, -1, 0x10) fd_no=2 <BR>> > called<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16980]: <BR>> > DBG:core:release_tcpconn: releasing con 0xb3ebdf50, state -2, fd=19, id=1<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16980]: <BR>> > DBG:core:release_tcpconn: extra_data 0xb3ece068<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: <BR>> > DBG:core:handle_tcp_child: reader response= b3ebdf50, -2 from 0<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: <BR>> > DBG:core:tcpconn_destroy: destroying connection 0xb3ebdf50, flags 0002<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: <BR>> > DBG:core:tls_close: closing SSL connection<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: <BR>> > DBG:core:tls_update_fd: New fd is 24<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: <BR>> > DBG:core:tls_shutdown: shutdown successful<BR>> > Apr 23 14:13:27 pc10-10-10-193 /usr/sbin/opensips[16984]: <BR>> > DBG:core:tls_tcpconn_clean: entered<BR>> ><BR>> ><BR>> > Regards<BR>> ><BR>> > Anil<BR>> ><BR>> ><BR>> ><BR>> > > Date: Thu, 23 Apr 2009 23:24:44 +0300<BR>> > > From: bogdan@voice-system.ro<BR>> > > To: anilpannikode@hotmail.com<BR>> > > CC: users@lists.opensips.org<BR>> > > Subject: Re: [OpenSIPS-Users] Trying to get TLS working with <BR>> > OpenSips 1.5<BR>> > ><BR>> > > Hi Anil,<BR>> > ><BR>> > > Typical error cases:<BR>> > > - the private key file does not exist or you do not have permission<BR>> > > to read that file<BR>> > > - the private key file is not in PEM (base64 encoded) format.<BR>> > > - if the private key file is encrypted, the password is not correct<BR>> > > or no password was provided<BR>> > > - if you loaded a certificate file before issuing this function, the<BR>> > > public key in that certificate does not match the corresponding private<BR>> > > key in the private key file.<BR>> > ><BR>> > > Regards,<BR>> > > Bogdan<BR>> > ><BR>> > > Anil M Pannikode (hotmail) wrote:<BR>> > > ><BR>> > > > I am getting the following error in the log files<BR>> > > ><BR>> > > ><BR>> > > ><BR>> > > > Apr 23 12:43:55 pc10-10-10-193 opensips: DBG:core:load_certificate:<BR>> > > > entered<BR>> > > ><BR>> > > > Apr 23 12:43:55 pc10-10-10-193 opensips: DBG:core:load_certificate:<BR>> > > > '//etc/opensips/tls/user/certonly.pem' successfuly loaded<BR>> > > ><BR>> > > > Apr 23 12:43:55 pc10-10-10-193 opensips: DBG:core:load_ca: Entered<BR>> > > ><BR>> > > > Apr 23 12:43:55 pc10-10-10-193 opensips: DBG:core:load_ca: CA<BR>> > > > '//etc/opensips/tls/user/user-calist.pem' successfuly loaded<BR>> > > ><BR>> > > > Apr 23 12:43:55 pc10-10-10-193 opensips: DBG:core:load_private_key:<BR>> > > > entered<BR>> > > ><BR>> > > > Apr 23 12:43:55 pc10-10-10-193 opensips: ERROR:core:load_private_key:<BR>> > > > unable to load private key file<BR>> > > > '//etc/opensips/tls/user/privatekey.pem'. Retry (2 left) (check<BR>> > > > password case)<BR>> > > ><BR>> > > > Apr 23 12:43:55 pc10-10-10-193 opensips: ERROR:core:load_private_key:<BR>> > > > unable to load private key file<BR>> > > > '//etc/opensips/tls/user/privatekey.pem'. Retry (1 left) (check<BR>> > > > password case)<BR>> > > ><BR>> > > > Apr 23 12:43:55 pc10-10-10-193 opensips: ERROR:core:load_private_key:<BR>> > > > unable to load private key file<BR>> > > > '//etc/opensips/tls/user/privatekey.pem'. Retry (0 left) (check<BR>> > > > password case)<BR>> > > ><BR>> > > > Apr 23 12:43:55 pc10-10-10-193 opensips: ERROR:core:load_private_key:<BR>> > > > unable to load private key file <BR>> > '//etc/opensips/tls/user/privatekey.pem'<BR>> > > ><BR>> > > > Apr 23 12:43:55 pc10-10-10-193 opensips: CRITICAL:core:main: could <BR>> > not<BR>> > > > initialize tls, exiting...<BR>> > > ><BR>> > > > Apr 23 12:43:55 pc10-10-10-193 opensips: DBG:dispatcher:destroy:<BR>> > > > destroying module ...<BR>> > > ><BR>> > > ><BR>> > > ><BR>> > > > Anybody know what the issues or where to set the password ?<BR>> > > ><BR>> > > ><BR>> > > ><BR>> > > > Anil<BR>> > > ><BR>> > > ><BR>> > > ><BR>> > > > <BR>> > ------------------------------------------------------------------------<BR>> > > ><BR>> > > > _______________________________________________<BR>> > > > Users mailing list<BR>> > > > Users@lists.opensips.org<BR>> > > > http://lists.opensips.org/cgi-bin/mailman/listinfo/users<BR>> > > ><BR>> > ><BR>> ><BR>> > ------------------------------------------------------------------------<BR>> > Create a cool, new character for your Windows LiveT Messenger. Check <BR>> > it out <http://go.microsoft.com/?linkid=9656621><BR>> <BR>> <BR>> <BR>> _______________________________________________<BR>> Users mailing list<BR>> Users@lists.opensips.org<BR>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users<BR><br /><hr />Windows Live Messenger makes it easier to stay in touch - <a href='http://go.microsoft.com/?linkid=9650731' target='_new'>learn how!</a></body>
</html>