<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<font face="monospace">It looks like your opensips is trying to
perform a remote connect via WSS, which cannot work<br>
<br>
Are you using this <br>
<a class="moz-txt-link-freetext" href="https://opensips.org/html/docs/modules/3.3.x/mid_registrar.html#param_tcp_persistent_flag">https://opensips.org/html/docs/modules/3.3.x/mid_registrar.html#param_tcp_persistent_flag</a><br>
to prevent the TCP/WSS conn to be closed before the expiration of
the registration ?<br>
<br>
Regards,<br>
</font>
<pre class="moz-signature" cols="72">Bogdan-Andrei Iancu
OpenSIPS Founder and Developer
<a class="moz-txt-link-freetext" href="https://www.opensips-solutions.com">https://www.opensips-solutions.com</a>
<a class="moz-txt-link-freetext" href="https://www.siphub.com">https://www.siphub.com</a></pre>
<div class="moz-cite-prefix">On 6/13/23 3:35 PM, nutxase wrote:<br>
</div>
<blockquote type="cite"
cite="mid:668nA28aPDmPi_JCT-d7ZH4JAi8vUE5yMNmJq3ccEDIJfpwO8h1uSRndoDqP0K3tYjFZFXi3ommpJKplKnC4YzpUD_rzfHCClVyGHALBadc=@proton.me">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div style="font-family: Arial, sans-serif; font-size: 14px;">So
in netstat i dont see any connections to my public ip(uac
client)</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">but
in the log i see</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><span>RROR:tls_wolfssl:_wolfssl_tls_connect:
New TLS connection to xxxx:443 failed</span>
<div><span>Jun 13 13:33:08 so-sbc-02
/usr/local/sbin/opensips[8048]:
ERROR:tls_wolfssl:_wolfssl_tls_connect: TLS connect error:
-313, received alert fatal error</span></div>
<div><span>Jun 13 13:33:08 so-sbc-02
/usr/local/sbin/opensips[8048]:
ERROR:proto_<a class="moz-txt-link-freetext" href="wss:ws_client_handshake">wss:ws_client_handshake</a>: cannot start handshake</span></div>
<div><span>Jun 13 13:33:08 so-sbc-02
/usr/local/sbin/opensips[8048]: ERROR:proto_<a class="moz-txt-link-freetext" href="wss:ws_connect">wss:ws_connect</a>:
cannot complete WebSocket handshake</span></div>
<div><span>Jun 13 13:33:08 so-sbc-02
/usr/local/sbin/opensips[8048]:
ERROR:proto_<a class="moz-txt-link-freetext" href="wss:proto_wss_send">wss:proto_wss_send</a>: connect failed</span></div>
<div><span>Jun 13 13:33:08 so-sbc-02
/usr/local/sbin/opensips[8048]: ERROR:core:msg_send: send()
to xxxx:443 for proto wss/6 failed</span></div>
<div><span>Jun 13 13:33:08 so-sbc-02
/usr/local/sbin/opensips[8050]:
ERROR:tls_wolfssl:_wolfssl_tls_connect: New TLS connection
to xxx:443 failed</span></div>
<div><span>Jun 13 13:33:08 so-sbc-02
/usr/local/sbin/opensips[8050]:
ERROR:tls_wolfssl:_wolfssl_tls_connect: TLS connect error:
-313, received alert fatal error</span></div>
<div><span>Jun 13 13:33:08 so-sbc-02
/usr/local/sbin/opensips[8050]:
ERROR:proto_<a class="moz-txt-link-freetext" href="wss:ws_client_handshake">wss:ws_client_handshake</a>: cannot start handshake</span></div>
<div><span>Jun 13 13:33:08 so-sbc-02
/usr/local/sbin/opensips[8050]: ERROR:proto_<a class="moz-txt-link-freetext" href="wss:ws_connect">wss:ws_connect</a>:
cannot complete WebSocket handshake</span></div>
<div><span>Jun 13 13:33:08 so-sbc-02
/usr/local/sbin/opensips[8050]:
ERROR:proto_<a class="moz-txt-link-freetext" href="wss:proto_wss_send">wss:proto_wss_send</a>: connect failed</span></div>
<div><span>Jun 13 13:33:08 so-sbc-02
/usr/local/sbin/opensips[8050]: ERROR:core:msg_send: send()
to xxxx:443 for proto wss/6 failed</span></div>
<div><span>Jun 13 13:33:09 so-sbc-02
/usr/local/sbin/opensips[8047]:
ERROR:tls_wolfssl:_wolfssl_tls_connect: New TLS connection
to xxx:443 failed</span></div>
<div><span>Jun 13 13:33:09 so-sbc-02
/usr/local/sbin/opensips[8047]:
ERROR:tls_wolfssl:_wolfssl_tls_connect: TLS connect error:
-313, received alert fatal error</span></div>
<div><span>Jun 13 13:33:09 so-sbc-02
/usr/local/sbin/opensips[8047]:
ERROR:proto_<a class="moz-txt-link-freetext" href="wss:ws_client_handshake">wss:ws_client_handshake</a>: cannot start handshake</span></div>
<div><span>Jun 13 13:33:09 so-sbc-02
/usr/local/sbin/opensips[8047]: ERROR:proto_<a class="moz-txt-link-freetext" href="wss:ws_connect">wss:ws_connect</a>:
cannot complete WebSocket handshake</span></div>
<div><span>Jun 13 13:33:09 so-sbc-02
/usr/local/sbin/opensips[8047]:
ERROR:proto_<a class="moz-txt-link-freetext" href="wss:proto_wss_send">wss:proto_wss_send</a>: connect failed</span></div>
<div><span>Jun 13 13:33:09 so-sbc-02
/usr/local/sbin/opensips[8047]: ERROR:core:msg_send: send()
to xxxx:443 for proto wss/6 failed</span></div>
<div><span>Jun 13 13:33:11 so-sbc-02
/usr/local/sbin/opensips[8047]:
ERROR:tls_wolfssl:_wolfssl_tls_connect: New TLS connection
to xxxx:443 failed</span></div>
<div><span>Jun 13 13:33:11 so-sbc-02
/usr/local/sbin/opensips[8047]:
ERROR:tls_wolfssl:_wolfssl_tls_connect: TLS connect error:
-313, received alert fatal error</span></div>
<div><span>Jun 13 13:33:11 so-sbc-02
/usr/local/sbin/opensips[8047]:
ERROR:proto_<a class="moz-txt-link-freetext" href="wss:ws_client_handshake">wss:ws_client_handshake</a>: cannot start handshake</span></div>
<div><span>Jun 13 13:33:11 so-sbc-02
/usr/local/sbin/opensips[8047]: ERROR:proto_<a class="moz-txt-link-freetext" href="wss:ws_connect">wss:ws_connect</a>:
cannot complete WebSocket handshake</span></div>
<div><span>Jun 13 13:33:11 so-sbc-02
/usr/local/sbin/opensips[8047]:
ERROR:proto_<a class="moz-txt-link-freetext" href="wss:proto_wss_send">wss:proto_wss_send</a>: connect failed</span></div>
<span>Jun 13 13:33:11 so-sbc-02 /usr/local/sbin/opensips[8047]:
ERROR:core:msg_send: send() to xxxx:443 for proto wss/6 failed</span><br>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div class="protonmail_signature_block" style="font-family: Arial,
sans-serif; font-size: 14px;">
<div class="protonmail_signature_block-user
protonmail_signature_block-empty"> </div>
<div class="protonmail_signature_block-proton"> Sent with <a
target="_blank" href="https://proton.me/" rel="noopener
noreferrer" moz-do-not-send="true">Proton Mail</a> secure
email. </div>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div class="protonmail_quote"> ------- Original Message -------<br>
On Tuesday, June 13th, 2023 at 12:41 PM, Bogdan-Andrei Iancu
<a class="moz-txt-link-rfc2396E" href="mailto:bogdan@opensips.org"><bogdan@opensips.org></a> wrote:<br>
<br>
<blockquote class="protonmail_quote" type="cite"> <font
face="monospace">OK, so it looks like the target IP is a
public valid one. Check with netstat if you have any ongoing
TCP conns to that IP<br>
<br>
Regards,<br>
</font>
<pre cols="72" class="moz-signature">Bogdan-Andrei Iancu
OpenSIPS Founder and Developer
<a href="https://www.opensips-solutions.com" class="moz-txt-link-freetext" rel="noreferrer nofollow noopener" target="_blank" moz-do-not-send="true">https://www.opensips-solutions.com</a>
<a href="https://www.siphub.com" class="moz-txt-link-freetext" rel="noreferrer nofollow noopener" target="_blank" moz-do-not-send="true">https://www.siphub.com</a></pre>
<div class="moz-cite-prefix">On 6/13/23 10:38 AM, nutxase
wrote:<br>
</div>
<blockquote type="cite">
<div style="font-family: Arial, sans-serif; font-size:
14px;">Hi Bogdan</div>
<div style="font-family: Arial, sans-serif; font-size:
14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size:
14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size:
14px;">So the ip is the ip of the uac client (internet
ip)and not sure how to check for any nat issues there?
please help :)</div>
<div style="font-family: Arial, sans-serif; font-size:
14px;">not sure exactly sure how it would be down as it is
mid registrar looking up the location then establishing
the call</div>
<div style="font-family: Arial, sans-serif; font-size:
14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size:
14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size:
14px;" class="protonmail_signature_block">
<div class="protonmail_signature_block-user
protonmail_signature_block-empty"> </div>
<div class="protonmail_signature_block-proton"> Sent with
<a rel="noreferrer nofollow noopener"
href="https://proton.me/" target="_blank"
moz-do-not-send="true">Proton Mail</a> secure email. </div>
</div>
<div style="font-family: Arial, sans-serif; font-size:
14px;"><br>
</div>
<div class="protonmail_quote"> ------- Original Message
-------<br>
On Tuesday, June 13th, 2023 at 7:02 AM, Bogdan-Andrei
Iancu <a href="mailto:bogdan@opensips.org"
class="moz-txt-link-rfc2396E" rel="noreferrer nofollow
noopener" target="_blank" moz-do-not-send="true"><bogdan@opensips.org></a>
wrote:<br>
<br>
<blockquote type="cite" class="protonmail_quote"> <font
face="monospace">Hi,<br>
<br>
The error you get from OpenSIPS is about its inability
to send a message to a certain WSS destination. This
may be because:<br>
1) the actual destination is wrong - you know the IP,
check if it make sense, maybe there are some end-user
nat issues<br>
2) as WSS is TCP based, the original connection is
down and opensips is not able to create a new one from
server side.<br>
<br>
Regards,<br>
</font>
<pre class="moz-signature" cols="72">Bogdan-Andrei Iancu
OpenSIPS Founder and Developer
<a target="_blank" rel="noreferrer nofollow noopener" class="moz-txt-link-freetext" href="https://www.opensips-solutions.com" moz-do-not-send="true">https://www.opensips-solutions.com</a>
<a target="_blank" rel="noreferrer nofollow noopener" class="moz-txt-link-freetext" href="https://www.siphub.com" moz-do-not-send="true">https://www.siphub.com</a></pre>
<div class="moz-cite-prefix">On 6/12/23 7:17 PM, nutxase
via Users wrote:<br>
</div>
<blockquote type="cite">
<div style="font-family: Arial, sans-serif; font-size:
14px;">Hi Guys</div>
<div style="font-family: Arial, sans-serif; font-size:
14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size:
14px;">So i am using a wss client and sending
registration via mid_registrar to asterisk(pjsip)
and all works fine except on inbound calls we get a
lot of errors and googling has pointed me to this
link <a target="_blank" rel="noreferrer nofollow noopener" href="https://issues.asterisk.org/jira/browse/ASTERISK-28211" style="line-height:1.5;text-decoration:underline;cursor:pointer;font-family:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;white-space:pre-wrap;background-color:rgb(255, 255, 255)" moz-do-not-send="true">https://issues.asterisk.org/jira/browse/ASTERISK-28211</a><span style="color:rgb(12, 12, 20);font-family:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;white-space:pre-wrap;background-color:rgb(255, 255, 255);display:inline !important">
</span><br>
</div>
<div style="font-family: Arial, sans-serif; font-size:
14px;">here are the errors i get</div>
<div style="font-family: Arial, sans-serif; font-size:
14px;"><br>
<div><br>
</div>
<div><span>Jun 12 17:02:01 so-sbc-02
/usr/local/sbin/opensips[23379]:
ERROR:nathelper:msg_send: send() to xxxxxx:32900
for proto wss/6 failed</span></div>
<div><span>Jun 12 17:02:01 so-sbc-02
/usr/local/sbin/opensips[23379]:
ERROR:nathelper:nh_timer: sip msg_send failed!</span></div>
<div><span><br>
</span></div>
<div><span>my question is, does anyone have a work
around for this? as currently inbound calls do
not work properly :(</span></div>
<div><span><br>
</span></div>
<br>
</div>
<div style="font-family: Arial, sans-serif; font-size:
14px;"><br>
</div>
<div class="protonmail_signature_block"
style="font-family: Arial, sans-serif; font-size:
14px;">
<div class="protonmail_signature_block-user
protonmail_signature_block-empty"> </div>
<div class="protonmail_signature_block-proton"> Sent
with <a target="_blank" href="https://proton.me/"
rel="noreferrer nofollow noopener"
moz-do-not-send="true">Proton Mail</a> secure
email. </div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre">_______________________________________________
Users mailing list
<a target="_blank" rel="noreferrer nofollow noopener" class="moz-txt-link-abbreviated" href="mailto:Users@lists.opensips.org" moz-do-not-send="true">Users@lists.opensips.org</a>
<a target="_blank" rel="noreferrer nofollow noopener" class="moz-txt-link-freetext" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" moz-do-not-send="true">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a>
</pre>
</blockquote>
<br>
</blockquote>
<br>
</div>
</blockquote>
<br>
</blockquote>
<br>
</div>
</blockquote>
<br>
</body>
</html>