<div dir="ltr">I have tried to take ssldump in the webrtc server in run time . <div><font color="#ff0000"><br></font></div><div><font color="#ff0000">New TCP connection #19: 192.168.1.y(48530) <-> 192.168.0.x(443)<br>19 0.0011 (0.0011) C>S TCP FIN<br>19 0.0013 (0.0001) S>C TCP FIN</font><br><br>New TCP connection #20: 192.168.0.y(52975) <-> 192.168.0.x(443)<br>20 1 0.0006 (0.0006) C>S Handshake ClientHello<br>20 2 0.0008 (0.0002) S>C Handshake ServerHello<br>20 3 0.0008 (0.0000) S>C Handshake Certificate<br>20 4 0.0008 (0.0000) S>C Handshake ServerHelloDone<br>20 5 0.0020 (0.0011) C>S Handshake ClientKeyExchange<br>20 6 0.0020 (0.0000) C>S ChangeCipherSpec<br>20 7 0.0020 (0.0000) C>S Handshake<br>20 8 0.0036 (0.0015) S>C Handshake20 9 0.0036 (0.0000) S>C ChangeCipherSpec<br>20 10 0.0036 (0.0000) S>C Handshake<br>20 11 0.0042 (0.0006) C>S Alert<br>20 0.0042 (0.0000) C>S TCP FIN<br>20 0.0043 (0.0000) S>C TCP FIN</div><div><br></div><div>The portion I marked in red whenever appear there is error in opensips logs . For below portion the connection was accepted . </div><div><br></div><div>I am not even getting any error in my browser side . How I will debug this ? please help . </div><div><br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><b><i>Thanks & Regards</i></b><div><i>Sasmita Panda</i></div><div><i>Senior Network Testing and Software Engineer</i></div><div><i>3CLogic , ph:07827611765</i></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Jun 14, 2019 at 2:51 PM Callum Guy <<a href="mailto:callum.guy@x-on.co.uk">callum.guy@x-on.co.uk</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">You might find that a tcpdump is the only way to get to grips with the underlying issue.<div><br></div><div>Having said that I wonder if there is any chance that the connection isn't accepting simply due to a cipher incompatibility. Are you setting a cipher list that you know your clients accept? Maybe try:</div><div><br></div><div><font face="courier new, monospace">modparam("tls_mgm", "ciphers_list", "AES256-GCM-SHA384,AES256-SHA256,AES256-SHA,CAMELLIA256-SHA,AES128-SHA,CAMELLIA128-SHA,RC4-SHA")</font><br></div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, 14 Jun 2019 at 09:17, Sasmita Panda <<a href="mailto:spanda@3clogic.com" target="_blank">spanda@3clogic.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">I had a dedicated server for 1 Client . When that client faces the issue I started looking into the logs . And this is what the error I got . <div><br></div><div>but latter on when I saw other servers which is getting used by different client in that logs also same error coming everyday . </div><div><br></div><div>As a conclusion its happening with everybody . </div><div><br></div><div>Below is the configuration .</div><div><br></div><div>modparam("tls_mgm", "tls_method", "tlsv1_2")<br>modparam("tls_mgm", "verify_cert", "0")<br>modparam("tls_mgm", "require_cert", "0")<br>modparam("tls_mgm", "certificate", "/usr/etc/opensips/tls/3ccloudwebrtc2019.crt")<br>modparam("tls_mgm", "private_key", "/usr/etc/opensips/tls/3ccloud.key")<br>modparam("tls_mgm", "ca_list", "/usr/etc/opensips/tls/rootCA/cacert.pem")</div><div><br></div><div><br></div><div><br clear="all"><div><div dir="ltr" class="gmail-m_4977113512685034617gmail-m_5176707991229892960gmail_signature"><div dir="ltr"><div><div dir="ltr"><b><i>Thanks & Regards</i></b><div><i>Sasmita Panda</i></div><div><i>Senior Network Testing and Software Engineer</i></div><div><i>3CLogic , ph:07827611765</i></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Jun 13, 2019 at 6:50 PM Răzvan Crainea <<a href="mailto:razvan@opensips.org" target="_blank">razvan@opensips.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Can you trace the SSL traffic between the two endpoints? Perhaps the SSL <br>
header give you a reason for not accepting the connection.<br>
Is this happening only for certain clients, or for everyone?<br>
Are you requiring any certificates validation?<br>
<br>
Best regards,<br>
Răzvan<br>
<br>
On 6/12/19 3:34 PM, Sasmita Panda wrote:<br>
> I am using opensips 2.2<br>
> version: opensips 2.2.4 (x86_64/linux)<br>
> <br>
> I am using the proto_wss and tls_mgm module for establishing websocket <br>
> connection .<br>
> <br>
> I am getting bellow error again and again . Whats the reson behind this <br>
> and how can I solve this problem ?<br>
> <br>
> <br>
> Jun 10 00:00:15 localhost /usr/sbin/opensips[1548]: <br>
> INFO:core:probe_max_sock_buff: using snd buffer of 416 kb<br>
> Jun 10 00:00:15 localhost /usr/sbin/opensips[1548]: <br>
> INFO:core:init_sock_keepalive: TCP keepalive enabled on socket 96<br>
> Jun 10 00:00:15 localhost /usr/sbin/opensips[1546]: <br>
> ERROR:proto_wss:tls_accept: New TLS connection from <a href="http://192.168.160.6:58616" rel="noreferrer" target="_blank">192.168.160.6:58616</a> <br>
> <<a href="http://192.168.160.6:58616" rel="noreferrer" target="_blank">http://192.168.160.6:58616</a>> failed to accept<br>
> Jun 10 00:00:15 localhost /usr/sbin/opensips[1546]: <br>
> ERROR:proto_wss:wss_read_req: cannot fix read connection<br>
> Jun 10 00:00:17 localhost /usr/sbin/opensips[1548]: <br>
> INFO:core:probe_max_sock_buff: using snd buffer of 416 kb<br>
> Jun 10 00:00:17 localhost /usr/sbin/opensips[1548]: <br>
> INFO:core:init_sock_keepalive: TCP keepalive enabled on socket 96<br>
> Jun 10 00:00:17 localhost /usr/sbin/opensips[1546]: <br>
> ERROR:proto_wss:tls_accept: New TLS connection from <a href="http://192.168.175.59:12918" rel="noreferrer" target="_blank">192.168.175.59:12918</a> <br>
> <<a href="http://192.168.175.59:12918" rel="noreferrer" target="_blank">http://192.168.175.59:12918</a>> failed to accept<br>
> Jun 10 00:00:17 localhost /usr/sbin/opensips[1546]: <br>
> ERROR:proto_wss:wss_read_req: cannot fix read connection<br>
> <br>
> <br>
> Please do help .<br>
> <br>
> <br>
> <br>
> */Thanks & Regards/*<br>
> /Sasmita Panda/<br>
> /Senior Network Testing and Software Engineer/<br>
> /3CLogic , ph:07827611765/<br>
> <br>
> _______________________________________________<br>
> Users mailing list<br>
> <a href="mailto:Users@lists.opensips.org" target="_blank">Users@lists.opensips.org</a><br>
> <a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
> <br>
<br>
-- <br>
Răzvan Crainea<br>
OpenSIPS Core Developer<br>
<a href="http://www.opensips-solutions.com" rel="noreferrer" target="_blank">http://www.opensips-solutions.com</a><br>
<br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opensips.org" target="_blank">Users@lists.opensips.org</a><br>
<a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
</blockquote></div>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opensips.org" target="_blank">Users@lists.opensips.org</a><br>
<a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
</blockquote></div>
<br>
<p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;text-align:justify"><font size="3" face="Verdana"><span style="font-size:8px;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"></span></font></p><div><img src="https://www.x-on.co.uk/email/footer/banner-surgeryconnect-jun-sep-19.jpg"></div><div><br></div><div><div><div><font size="4"><b><sup><font face="Verdana">0333 332 0000 | <a href="http://www.x-on.co.uk" target="_blank">www.x-on.co.uk</a> | <sub> </sub></font></sup></b></font><font size="4"><b><sub><sup><font face="Verdana"><a href="https://www.linkedin.com/company/x-on" target="_blank"><img src="http://www.x-on.co.uk//images/icon/linkedin.png" width="24" height="24"></a> <a href="https://www.facebook.com/XonTel" target="_blank"><img src="http://www.x-on.co.uk//images/icon/facebook.png" width="24" height="24"></a> <a href="https://twitter.com/xonuk" target="_blank"><img src="http://www.x-on.co.uk//images/icon/twitter.png" width="24" height="24"></a></font></sup></sub> </b></font><br><p><span style="font-size:6pt;font-family:Verdana;color:black">X-on
is a trading name of Storacall Technology Ltd a limited company registered in
England and Wales.<br>
Registered Office : Avaland House, 110 London Road, Apsley, Hemel Hempstead,
Herts, HP3 9SD. Company Registration No. 2578478.<br>
The information in this e-mail is confidential and for use by the addressee(s)
only. If you are not the intended recipient, please notify X-on immediately on <span>+44(0)333 332 0000</span> and delete the<br>message from your computer. If you are not a named addressee you must not use,
disclose, disseminate, distribute, copy, print or reply to this email. </span><span style="font-size:6pt;font-family:Verdana;color:black">Views
or opinions expressed by an individual<br>within this email may not necessarily
reflect the views of X-on or its associated companies. Although X-on routinely
screens for viruses, addressees should scan this email and any attachments<br>for
viruses. X-on makes no representation or warranty as to the absence of viruses
in this email or any attachments.</span></p>
<p><span style="font-size:6pt;font-family:Verdana;color:black"></span><font size="2"><span style="font-size:6pt;font-family:Verdana;color:black"></span></font></p></div></div></div>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opensips.org" target="_blank">Users@lists.opensips.org</a><br>
<a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
</blockquote></div>