sr-users December 2008

sr-users@lists.kamailio.org

73 participants
107 discussions

by jerome.herve＠orange-ftgroup.com

hello everyone, I still have an issue with auth_identity : I have this error: AUTH_IDENTITY VERIFIER: common name of certificate doesn't match host name The common name of my certificate is the name of my domain (used in Identity Info URL). I believe I've done the correct thing... Any idea guys ? Cheers, Jérôme HERVE -----Message d'origine----- De : Kovács Gergely [mailto:kg@testbike.hu] Envoyé : jeudi 11 décembre 2008 22:23 À : zze-HERVE Jerome RD-CORE-LAN Objet : Re: [Serusers] Issue with auth_identity Hi Jerome, I'm the one who developed auth_identity few years ago. I checked the source and it seems that your auth_identity was unable to decode the certificate that it had been successfully downloaded. How did you generate the certificates? Auth_identity supports only openssl! Of course I had it working :) You can find SER config snippets in the manual of the module: http://www.iptel.org/auth_identity_0 Shall I write you the openssl command line switches I used for generating certificates? Cheers, Gergo > -------- Original Message -------- > Subject: Re: [Serusers] Issue with auth_identity > Date: Wed, 10 Dec 2008 16:06:08 +0100 > From: <jerome.herve(a)orange-ftgroup.com> > To: <victor.pascual.avila(a)gmail.com> > CC: serusers(a)lists.iptel.org > > Hi, > Yes I've tried again with other certificates. > It happens before the vrfy_check_certificate... > During the function vrfy_get_certificate. > I really don't understand it. > If I put a wrong certificate name, I have a 404 Not Found so I believe > it sees the certificate. > But maybe it doesn't manage to download it. > Did you manage to make this working? > > > Jérôme HERVE > FT/NSM/RD/CORE/M2V/SID > tél. 02 96 05 27 41 > mob. 06 76 15 18 49 > jerome.herve(a)orange-ftgroup.com > > > -----Message d'origine----- > De : Victor Pascual Ávila [mailto:victor.pascual.avila@gmail.com] > Envoyé : mercredi 10 décembre 2008 14:13 À : zze-HERVE Jerome > RD-CORE-LAN Cc : serusers(a)lists.iptel.org Objet : Re: [Serusers] Issue > with auth_identity > > Hi Jerome, > I'm not sure about this but have you tried using other certificates? > > Cheers, > -Victor > > On Wed, Dec 10, 2008 at 11:30 AM, <jerome.herve(a)orange-ftgroup.com> wrote: >> Hello, >> >> I am trying to put in place auth_identity between 2 SER proxies and it >> doesn't work well. >> The first one manages to add identity and identity_info fields and to >> send the INVITE to the other proxy. >> But when the other proxy receive the message and does his tests there >> is an issue. >> It sends back a 436 Bad Identity Info. The error happens during the >> "vrfy_get_certificate" function (function which downloads the >> certificate thanks to identity_info URL). >> >> On my proxy logs, I can see this : AUTH_IDENTITY:retrieve_x509: DER >> Certificate error:0D0680A8:asn1 encoding >> routines:ASN1_CHECK_TLEN:wrong tag >> >> I really don't know what to do, do you have any idea? >> Thanks, >> Regards, >> >> Jérôme HERVE >> >> _______________________________________________ >> Serusers mailing list >> Serusers(a)lists.iptel.org >> http://lists.iptel.org/mailman/listinfo/serusers >> >> > > > > -- > Victor Pascual Ávila > _______________________________________________ > Serusers mailing list > Serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers

15 years, 11 months

Re: [Kamailio-Users] Kamalio Support for RFC 3323 " Privacy"

by ingdavidcespedes＠cable.net.co

----- Mensaje original ----- De: ingdavidcespedes(a)cable.net.co Fecha: Jueves, Diciembre 11, 2008 4:43 pm Asunto: Re: [Kamailio-Users] Kamalio Support for RFC 3323 " Privacy" > > > ----- Mensaje original ----- > De: Alexandr Dubovikov <voip(a)start4.info> > Fecha: Viernes, Diciembre 5, 2008 1:13 pm > Asunto: Re: [Kamailio-Users] Kamalio Support for RFC 3323 " Privacy" > > > Iñaki Baz Castillo пишет: > > > El Viernes, 5 de Diciembre de 2008, Juha Heinanen escribió: > > > > > >> if caller needs privacy, then it is up to the UA to send > > anonymous from > > >> header together with p-p-i and privacy headers. > > >> > I Think this is wrong. The UA should ask for the privacy services, > an the proxy must offer this services. This means it must rewrite > the information that the UA is willing to keep private with > anonymous information, and keep track of it, so it can be replaced > when the response is received. SORRYYYYYYY, you were right. What i'm trying to say is that if the UA insert the p-p-i and privacy headers, the proxy should understand this and do what I say above. > > > > > > That would be so cool... Unfortunatelly I just know a SIP phone > > implementing > > > it: Twinkle. > > > > > > Other phones (as Linksys) when the user enables privacy during > a > > call, just > > > set the From Display-Name with "Anonymous" value, while the > From > > username > > > remains the real :( > > > > > > > > Yep, some UAC set "Anonymous" only in Display Name. But u can fix > > it > > using this code: > > > > $var(url) = $fu; > > if(is_present_hf("Privacy") && ($hdr(Privacy)=="id" || > > $hdr(Privacy)=="user") && search("(From|f):\s*\"?anonymous")) { > > uac_replace_from("Anonymous","sip:anonymous@anonymous.invalid"); > > if(!is_present_hf("P-Asserted-Identity")) { > > append_hf("P-Asserted-Identity: <$var(url)>\r\n"); }; > > } > > This is what i'm talking about!!!!, but you should check also if > the message already have a P-Asserted-Identity that was generated > before and remove it. > > And how it will know to which transaction it corresponds when the > response message comes. It will use the branch id, and the tags? It > doesn't matter that some URIs have been replaced with anonymous > information? > There should be an easier way to do this. > > > > > > With best regards, > > > > -- > > > > Alexandr Dubovikov * baron@iRC RusNet * shurik(a)start4.info > > AD1-UANIC * ICQ: 122351182 * http://www.start4.info > > > > > > > > _______________________________________________ > > Users mailing list > > Users(a)lists.kamailio.org > > http://lists.kamailio.org/cgi-bin/mailman/listinfo/users > > > > > _______________________________________________ > Users mailing list > Users(a)lists.kamailio.org > http://lists.kamailio.org/cgi-bin/mailman/listinfo/users >

15 years, 11 months

Re: [Kamailio-Users] Kamalio Support for RFC 3323 " Privacy"

by ingdavidcespedes＠cable.net.co

> > Unfortunatelly I just know two implementations using PPI when > asking for > > privacy: Twinkle and Sofia stack. > > Do you know any hardphones that implement this? > > Regards. > > > > > > > _______________________________________________ > Users mailing list > Users(a)lists.kamailio.org > http://lists.kamailio.org/cgi-bin/mailman/listinfo/users >

15 years, 11 months

Re: [Kamailio-Users] Kamalio Support for RFC 3323 " Privacy"

by ingdavidcespedes＠cable.net.co

----- Mensaje original ----- De: Iñaki Baz Castillo <ibc(a)aliax.net> Fecha: Jueves, Diciembre 11, 2008 6:17 pm Asunto: Re: [Kamailio-Users] Kamalio Support for RFC 3323 " Privacy" > El Jueves, 11 de Diciembre de 2008, ingdavidcespedes(a)cable.net.co > escribió:> Agree with all that you say. Only that the "P-Preferred- > Identity:" is > > optional. If it is not present, the proxy should add a predefined > > P-Asserted-Identity: header field, if it is going to send the > request to a > > trusted node. > > Well, PPI is just used by the client if it wants to tell him proxy > who he is > (and doesn't want to indicate it in the From since theorically the > From > shouldn't be changed by the proxy). > > > > But as you can see, this implies different possible cases. So it > would be > > very nice if we can do all of this using some module or something > like> that, don't you think so? > > I already implement this exactly behaviour by examining the PPI > header instead > of From when PPI is present. Perhaps you mean a specific > module/functions for > this task? Could you describe these functions? > I don't know, something that makes this process easier. Maybe there is a need to create a module that can handle this. But meanwhile we can make a HowTo with the code and put it in the Wiki, I don't know!!!. > Regards. > > > -- > Iñaki Baz Castillo > > _______________________________________________ > Users mailing list > Users(a)lists.kamailio.org > http://lists.kamailio.org/cgi-bin/mailman/listinfo/users >

15 years, 11 months

Re: [Kamailio-Users] Kamalio Support for RFC 3323 " Privacy"

by ingdavidcespedes＠cable.net.co

----- Mensaje original ----- De: Alexandr Dubovikov <voip(a)start4.info> Fecha: Viernes, Diciembre 5, 2008 1:13 pm Asunto: Re: [Kamailio-Users] Kamalio Support for RFC 3323 " Privacy" > Iñaki Baz Castillo пишет: > > El Viernes, 5 de Diciembre de 2008, Juha Heinanen escribió: > > > >> if caller needs privacy, then it is up to the UA to send > anonymous from > >> header together with p-p-i and privacy headers. > >> I Think this is wrong. The UA should ask for the privacy services, an the proxy must offer this services. This means it must rewrite the information that the UA is willing to keep private with anonymous information, and keep track of it, so it can be replaced when the response is received. > > > > That would be so cool... Unfortunatelly I just know a SIP phone > implementing > > it: Twinkle. > > > > Other phones (as Linksys) when the user enables privacy during a > call, just > > set the From Display-Name with "Anonymous" value, while the From > username > > remains the real :( > > > > > Yep, some UAC set "Anonymous" only in Display Name. But u can fix > it > using this code: > > $var(url) = $fu; > if(is_present_hf("Privacy") && ($hdr(Privacy)=="id" || > $hdr(Privacy)=="user") && search("(From|f):\s*\"?anonymous")) { > uac_replace_from("Anonymous","sip:anonymous@anonymous.invalid"); > if(!is_present_hf("P-Asserted-Identity")) { > append_hf("P-Asserted-Identity: <$var(url)>\r\n"); }; > } This is what i'm talking about!!!!, but you should check also if the message already have a P-Asserted-Identity that was generated before and remove it. And how it will know to which transaction it corresponds when the response message comes. It will use the branch id, and the tags? It doesn't matter that some URIs have been replaced with anonymous information? There should be an easier way to do this. > > > With best regards, > > -- > > Alexandr Dubovikov * baron@iRC RusNet * shurik(a)start4.info > AD1-UANIC * ICQ: 122351182 * http://www.start4.info > > > > _______________________________________________ > Users mailing list > Users(a)lists.kamailio.org > http://lists.kamailio.org/cgi-bin/mailman/listinfo/users >

15 years, 11 months

Re: [Kamailio-Users] Kamailio in Red Hat 4 with mysql and carrierroute]

by ingdavidcespedes＠cable.net.co

Yes. You should download kamailio-1.4.1-notls_src.tar.gz, and when you compile it, you should write make all include_modules="db_mysql" instead of make all include_modules="mysql". It has changed for Kamailio. ----- Mensaje original ----- De: Juan Asencio <juan(a)asencio.dk> Fecha: Lunes, Diciembre 8, 2008 4:15 pm Asunto: Re: [Kamailio-Users] Kamailio in Red Hat 4 with mysql and carrierroute] > Juan Asencio wrote: > > Henning Westerholt wrote: > > > >> On Monday 08 December 2008, Juan Asencio wrote: > >> > >> > >>> Hi, I'm trying to install from source Kamailio on Red Hat 4, > and I need > >>> to include mysql as a database and carrierroute. > >>> > >>> When I check on the directory of modules, I can't see mysql.so or > >>> carrierroute.so, how can I include them? > >>> > >>> Best regards, > >>> > >>> > >> Hi Juan, > >> > >> have you compiled and installed the db_mysql and the > carrierroute module? > >> There excluded in the default installation, because they need > some extra > >> libraries. > >> > >> Cheers, > >> > >> Henning > >> > >> > > Hi again, I have another question :) > > > > I have download the kamailio-1.4.1-notls_linux_i386.tar.gz > > Put it on the directory: /usr/src and there I did: tar zxvf > kamai...tar.gz> A list of directories and files are created, but I > can't find the > > Makefile and I can't "make all" or "make" anything. > > > > In my small Linux experience, when I tar xvf... something.tar.gz > a > > directory of something is created and then I usually can find the > > makefile there. > > > > Why I can't find it now? I'm trying to follow the instructions on > > http://www.kamailio.org/mos/view/Installation-Notes/ but I can't > do it. > > > > Can anyone please give some suggestions? > > > > Thanks in advance, > > > > Juan.- > > > > > > > > _______________________________________________ > > Users mailing list > > Users(a)lists.kamailio.org > > http://lists.kamailio.org/cgi-bin/mailman/listinfo/users > > > Hi everybody, > > I figure it out :D sorry for the trouble. I was downloading the > wrong file. > > Cheers!!! > > Juan.- > > _______________________________________________ > Users mailing list > Users(a)lists.kamailio.org > http://lists.kamailio.org/cgi-bin/mailman/listinfo/users >

15 years, 11 months

[Serusers] Help with SIPSAK

by Steven C. Blair

I currently use sipsak 0.8.8 for a variety of tasks however I now need to use sipsak to start, maintain and end a SIP session. I'd like to send an INVITE, authenticate, check for a 200 OK, send a refer then a bye to remove myself from the call. I cannot get this to work. I've tried sipsak with the -l, -G, -u, -a and -s options in various combinations without success. Does anyone have any thoughts on how I can accomplish this task? Thanks,Steve Senior Network Engineer, Information Systems and Computing Networking and Telecommunications , Suite 221A /6228 University of Pennsylvania Voice:215-573-8396 FAX:215-898-9348

15 years, 11 months

[Serusers] Help with SIPSAK

by Steven C. Blair

15 years, 11 months

[Serusers] ser routing

by Netadmin

Hello, I want to route a phone number to different routes on different hours. If the time is later then 17 i'll route to route(1), else route to route(2). How can i do this? is there a way to get time in ser.cfg? Or i need to make a separate module? Thanks.

15 years, 11 months

[Kamailio-Users] is_present_hf function

by Antonio Reale

Hi all, I have a problem with the is_present_hf function from TEXTOPS module. In the script (openser 1.2.3-notls) I have: --- if(is_present_hf("Proxy-Authorization")) { xlog("L_ERR", "Proxy-Authorization header present\n"); consume_credentials(); } --- When the proxy receives the BYE message I see in the log: Dec 10 16:00:54 sipsvr /usr/sbin/openser[12846]: Proxy-Authorization header present Dec 10 16:00:54 sipsvr /usr/sbin/openser[12846]: consume_credentials(): No authorized credentials found (error in scripts) Tracing the call I don't see any Proxy-Authorization header in the BYE message. Why the function is_present_hf returns true? Attached you will find debug messages from Openser/Kamailio and the BYE. I see the problem using Kapanga softphone, but the same problem occurs in production environment with different CPEs (for instance Linksys SPA2102). The strange thing is that it occurs only when kapanga is the caller (and hungup) and not when it is the callee (and hungup). Using wireshark I see that the BYE is the same in both situation. How can I debug this problem? Thanks a lot. Regards, Antonio.

15 years, 11 months

← Newer
1
...
4
5
6
7
8
9
10
11
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users December 2008