<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Calibri Light";
panose-1:2 15 3 2 2 2 4 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.pl-en
{mso-style-name:pl-en;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head><body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Hi folks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Please provide any pointers if you might have.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Govindaraj, Rajesh <br>
<b>Sent:</b> Friday, May 11, 2018 5:37 PM<br>
<b>To:</b> users@lists.opensips.org<br>
<b>Subject:</b> Opensips error <o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">In a production environment, the below error is seen. The TLS handshake is fine and messages are being exchanged as seen from pcap and when one of the TCP message is read,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">2018-05-11T11:24:05.000-04:00 [local2] [err] ffd-alpha-zone1-ccm1.ipc.com /usr/sbin/opensipsInternal[10325]: ERROR:core:_tls_read: TLS connection to 10.204.34.62:52094 read failed<o:p></o:p></p>
<p class="MsoNormal">2018-05-11T11:24:05.000-04:00 [local2] [err] ffd-alpha-zone1-ccm1.ipc.com /usr/sbin/opensipsInternal[10325]: ERROR:core:_tls_read: TLS read error: 1<o:p></o:p></p>
<p class="MsoNormal">2018-05-11T11:24:05.000-04:00 [local2] [err] ffd-alpha-zone1-ccm1.ipc.com /usr/sbin/opensipsInternal[10325]: ERROR:core:tls_print_errstack: TLS errstack: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This error is seen. TLS read error: 1 indicates <span class="pl-en">
<span style="font-size:9.0pt;font-family:Consolas;color:#6F42C1;background:white">SSL_ERROR_SSL</span></span><span style="font-size:9.0pt;font-family:Consolas;color:#24292E;background:white">.
</span>Checking the pcap for success and failure case, they are no abnormalities. It fails for only one user randomly. Today in our test it failed twice with the same error when reading a TLS packet. TLS session establishment is fine. Any pointers would really
help.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks,<span style="font-size:9.0pt;font-family:Consolas;color:#24292E;background:white"> </span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:3.0pt;page-break-after:avoid"><b><span lang="EN-GB" style="font-size:12.0pt;font-family:"Calibri Light",sans-serif;color:black">Rajeshkumar Govindaraj<o:p></o:p></span></b></p>
<p class="MsoNormal" style="margin-bottom:6.0pt;page-break-after:avoid"><span lang="EN-GB" style="font-size:12.0pt;color:black">Software Engineer<br>
</span><span style="font-size:10.0pt;color:black">777 Commerce Drive,<br>
Fairfield, CT-06825<br>
</span><b><span lang="FR" style="font-size:10.0pt;color:black">T</span></b><span lang="FR" style="font-size:10.0pt;color:black"> +1 201 253 7803
</span><span style="font-size:10.0pt;font-family:Symbol;color:#5B9BD5">|</span><span lang="FR" style="font-size:10.0pt;color:black">
<b>M</b> +1 475 439 9918 </span><span style="font-size:10.0pt;font-family:Symbol;color:#5B9BD5">|</span><span lang="FR" style="font-size:10.0pt;color:black">
<b>E</b> <a href="mailto:Rajesh.Govindaraj@ipc.com">Rajesh.Govindaraj@ipc.com</a></span><span lang="EN-GB" style="font-size:12.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:FR">Follow us on twitter:
</span><span style="font-size:10.0pt">@<span style="text-transform:uppercase">ipc</span>_Systems_Inc
</span><a href="http://www.ipc.com/"><span style="font-size:10.0pt">www.ipc.com</span></a><span style="font-size:10.0pt;color:#44546A"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#44546A"><o:p> </o:p></span></p>
<p class="MsoNormal"><img border="0" width="191" height="79" id="Picture_x0020_2" src="cid:image002.jpg@01D3EBA3.08AA2000" alt="cid:image006.jpg@01D1940F.3E021840"><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br /><br /><br />
DISCLAIMER:
This e-mail may contain information that is confidential, privileged or otherwise protected from disclosure. If you are not an intended recipient of this e-mail, do not duplicate or redistribute it by any means. Please delete it and any attachments and notify the sender that you have received it in error. Unintended recipients are prohibited from taking action on the basis of information in this e-mail. E-mail messages may contain computer viruses or other defects, may not be accurately replicated on other systems, or may be intercepted, deleted or interfered with without the knowledge of the sender or the intended recipient. If you are not comfortable with the risks associated with e-mail messages, you may decide not to use e-mail to communicate with IPC. IPC reserves the right, to the extent and under circumstances permitted by applicable law, to retain, monitor and intercept e-mail messages to and from its systems.<p></p></body></html>