THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
The following task has a new comment added:
FS#245 - kamailio tls debug error
User who did this - Klaus Darilion (klaus3000)
----------
I found this thread about "bad record mac": https://groups.google.com/forum/?fromgroups#!topic/mailing.openssl.users/-X…
"Well, textbook explanation of SSL is not short, but once the connection is established, each party will have a set keys composed of a MAC key (message authentication code) and an encryption key. Within the SSL record, the payload is encrypted, and the MAC is basically a hash of the MAC Key + data + sequence + nonce + etc (I don’t remember the exact list of parameters that are authenticated by the MAC off the top of my head).
Also, at the end of the handshake, there is a final exchange of the MAC of all of the Records sent before the connection was “settled”.
If any of the items of the SSL Record change the client will be able to detect that because the MAC will not match. First place I would look is at the firewall logs, or maybe any app (such as HIDS/NIDS) that might be doing something to the packet."
So maybe there is really somebody modifying packets, or openSSL uses a wrong key for MAC checks, or maybe has some other problem during MAC checking and produces this incorrect error.
----------
More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=245#comment721
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.
THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
The following task has a new comment added:
FS#245 - kamailio tls debug error
User who did this - Shaobin.Feng (saxon_leo)
----------
tcpdump package,filter by src public ip and port(which could be got in error log).
==========================
step1 : client hello
step2 : server hello with certificate
step3 : client key exchange
step4 : Alert(leve:fatal description:bad record mac)
.... then server send fin close connection
---------------------------------------------------
Any suggestion,any advice would be nice!
----------
More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=245#comment720
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.
THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.
The following task has a new comment added:
FS#245 - kamailio tls debug error
User who did this - Shaobin.Feng (saxon_leo)
----------
restart 4 servers, one of them debug error now !-----------
----------------------log------------------
Jul 23 08:53:57 vm-sipserver4 /usr/local/sbin/kamailio[16560]: INFO: TLS_TRACE: tls [tls_server.c:915]: (0x7f107ec6b758, 0x7fffca493270 (0)) start (xxx.xxx.xxx.xxx:14203 -> xx.xxx.xxx.xxx:5061*)
Jul 23 08:53:57 vm-sipserver4 /usr/local/sbin/kamailio[16560]: INFO: TLS_TRACE: tls [tls_server.c:970]: (0x7f107ec6b758, 0x7fffca493270) tcp_read_data(..., 4095, *1) => 126 bytes
Jul 23 08:53:57 vm-sipserver4 /usr/local/sbin/kamailio[16560]: INFO: TLS_TRACE: tls [tls_server.c:1030]: (0x7f107ec6b758, 0x7fffca493270) tls_accept() => -1 (err=1)
Jul 23 08:53:57 vm-sipserver4 /usr/local/sbin/kamailio[16560]: INFO: TLS_TRACE: tls [tls_server.c:1114]: (0x7f107ec6b758, 0x7fffca493270) tcpconn_send_unsafe 7 bytes
Jul 23 08:53:57 vm-sipserver4 /usr/local/sbin/kamailio[16560]: ERROR: tls [tls_server.c:1174]: TLS accept:error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac
Jul 23 08:53:57 vm-sipserver4 /usr/local/sbin/kamailio[16560]: INFO: TLS_TRACE: tls [tls_server.c:1331]: (0x7f107ec6b758, 0x7fffca493270) end error => 0 (*flags=1)
----------
More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=245#comment719
You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.
Module: sip-router
Branch: master
Commit: 9a4b9061387ac88c9c0db7945b41c8a24986b7bc
URL: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=9a4b906…
Author: Dragos Dinu <dragos.dinu(a)1and1.ro>
Committer: Marius Zbihlei <marius.zbihlei(a)1and1.ro>
Date: Fri Jul 20 10:48:48 2012 +0300
modules/sipcapture: Extended sipcapture to support multiple tables
The sipcapture module can support storing the information to multiple sql tables.
Tests have shown that a major bottleneck against scalability on multi core CPU of
the capture node instance was caused by using a single MySQL Table.
The frontend (HOMER) will be soon patched to support retrieval of data from multiple
sources.
The decision to select witch table is written to, can be configured from random,
round robin or hashing via username or callid.
---
modules/sipcapture/README | 170 ++++++++++++++++-----------
modules/sipcapture/doc/sipcapture_admin.xml | 43 +++++++-
modules/sipcapture/hash_mode.c | 129 ++++++++++++++++++++
modules/sipcapture/hash_mode.h | 61 ++++++++++
modules/sipcapture/sipcapture.c | 163 +++++++++++++++++++-------
modules/sipcapture/sipcapture.h | 41 +++++++
6 files changed, 495 insertions(+), 112 deletions(-)
Diff: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commitdiff;h=9a4…
Hello,
Kamailio v3.2.4 is out -- this is a minor release packaged from previous
stable branch, GIT 3.2. Anyone running 3.2.x should update to it in
order to benefit of latest fixes, there is no change required to be done
in database structure or configuration file, just re-install over the
old deployment. As usual, a backup is recommended to be in the safe side.
More details about this release at:
* http://www.kamailio.org/w/2012/07/kamailio-v3-2-4-released/
New installations should start with latest stable series 3.3.x, at this
time latest Kamailio version being v3.3.0.
Cheers,
Daniel
--
Daniel-Constantin Mierla - http://www.asipto.comhttp://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
Kamailio Advanced Training, Seattle, USA, Sep 23-26, 2012 - http://asipto.com/u/katu
Kamailio Practical Workshop, Netherlands, Sep 10-12, 2012 - http://asipto.com/u/kpw