<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<tt>Hi Matt,<br>
<br>
The RURI you receive from the UAC side, does it contain a SIPS
schema or a "transport=tls" indication ?<br>
<br>
The error you see translates into "there is a conflict between the
requests protocol and the interface you force". So even if you
force the UDP interface, maybe the RURI may force the TLS
protocol, leading to an internal conflict.<br>
<br>
Regards,<br>
</tt>
<pre class="moz-signature" cols="72">Bogdan-Andrei Iancu
OpenSIPS Founder and Developer
<a class="moz-txt-link-freetext" href="http://www.opensips-solutions.com">http://www.opensips-solutions.com</a></pre>
<div class="moz-cite-prefix">On 23.08.2015 19:53, Matt Hamilton
wrote:<br>
</div>
<blockquote
cite="mid:DM3PR1201MB111815D9F2FC387996C54257B3630@DM3PR1201MB1118.namprd12.prod.outlook.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
<div id="divtagdefaultwrapper"
style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p><br>
</p>
<p>We use Opensips (1.7.1, in the process of upgrading to 2.1)
as a dispatcher to multiple Asterisk servers. Currently we
are trying to set up TLS.</p>
<p><br>
</p>
<p><br>
</p>
<p>UAC -> Opensips -> Asterisk</p>
<p><br>
</p>
<p>TLS is available and enabled on all three. The traffic
between UAC and Opensips is on TLS and encrypted. On the other
hand, it's not encrypted between Opensips and Asterisk since
we use force_send_socket (UDP) to the Asterisk servers. This
is the way we want it - encrypted between UAC and Opensips and
not encrypted between Opensips and Asterisk. The communication
is fine, but we get a warning "core:get_send_socket:
protocol/port mismatch" in our logs. </p>
<p><br>
</p>
<p>My question is: Is forcing TLS traffic thru UDP is the only
way to get Opensips - Asterisk traffic is unencrypted?</p>
<p><br>
</p>
<p>Thanks,</p>
<p>Matt<br>
</p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a>
<a class="moz-txt-link-freetext" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a>
</pre>
</blockquote>
<br>
</body>
</html>