23 Jun
2012
23 Jun
'12
6:08 p.m.
Module: sip-router
Branch: pd/websocket
Commit: ad7ea60ff5e8e2a8d5b9ddeaca99a2bab7941e70
URL:
http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=ad7ea60…
Author: Peter Dunkley <peter.dunkley(a)crocodile-rcs.com>
Committer: Peter Dunkley <peter.dunkley(a)crocodile-rcs.com>
Date: Sat Jun 23 16:07:12 2012 +0100
modules/websocket: updated example/test kamailio.cfg to support TLS
- Basic WebSocket working over TLS
---
modules/websocket/example/kamailio.cfg | 29 +++++++++++++++++++++++------
1 files changed, 23 insertions(+), 6 deletions(-)
diff --git a/modules/websocket/example/kamailio.cfg
b/modules/websocket/example/kamailio.cfg
index ba20abb..cac432c 100644
--- a/modules/websocket/example/kamailio.cfg
+++ b/modules/websocket/example/kamailio.cfg
@@ -1,6 +1,6 @@
#!KAMAILIO
-#!define DBURL "sqlite:////etc/kamailio/db.sqlite"
+#!define DBURL "sqlite:////etc/kamailio/db.sqlite"
####### Global Parameters #########
@@ -8,15 +8,21 @@ debug=2
fork=yes
children=4
+enable_tls=1
+
alias="example.com"
-listen=192.168.111.12
-port=5060
-listen=192.168.111.12
-port=80
+
+listen=192.168.111.2:5060
+listen=tcp:192.168.111.2:80
+
+listen=tls:192.168.111.2:5061
+listen=tls:192.168.111.2:443
tcp_connection_lifetime=3604
tcp_accept_no_cl=yes
+enable_tls=1
+
syn_branch=0
#mpath="/usr/lib64/kamailio/modules_k/:/usr/lib64/kamailio/modules/"
@@ -41,6 +47,7 @@ loadmodule "xhttp.so"
loadmodule "kex.so"
loadmodule "websocket.so"
loadmodule "mi_rpc.so"
+loadmodule "tls.so"
# ----------------- setting module-specific parameters ---------------
@@ -73,6 +80,14 @@ modparam("auth_db", "calculate_ha1", yes)
modparam("auth_db", "password_column", "password")
modparam("auth_db", "load_credentials", "")
+# ----- websocket params -----
+modparam("websocket", "keepalive_timeout", 30)
+
+# ----- tls params -----
+modparam("tls", "tls_method", "SSLv23")
+modparam("tls", "certificate", "CA/ser1_cert.pem")
+modparam("tls", "private_key", "CA/privkey.pem")
+modparam("tls", "ca_list", "CA/calist.pem")
####### Routing Logic ########
@@ -224,12 +239,14 @@ route[AUTH] {
}
event_route[xhttp:request] {
- if ($Rp != "80") {
+ if ($Rp != "80" && $Rp != "443") {
xlog("L_WARN", "HTTP request received on $Rp\n");
xhttp_reply("403", "Forbidden", "", "");
exit;
}
+ xlog("L_INFO", "HTTP Request Received\n");
+
if ($hdr(Upgrade)=~"websocket"
&& $hdr(Connection)=~"Upgrade"
&& $rm=~"GET") {