I have a question about deploying TLSv1.2 with Kamailio 4.3.4-1 on a
Lubuntu 16.4.3 desktop environment. I changed the Kamailio default
/tls.cfg/ file under the section [server:default] to “method=TLSv1.2”
and am using OpenSSL 1.0.2g from the Lubuntu repository. All the
programs were loaded through the Synaptic Package Manager.
My question is whether this version of Kamailio supports the cipher
suite ECDHE-RSA-AES256-GCM-SHA384. My version of OpenSSL lists it as an
option, but the highest strength cipher that the Kamailio 4.3.4 server
seems to accept is RSA-AES256-GCM-SHA384. My (limited) understanding is
that ECDHE is a better method of key exchange than RSA because it is
ephemeral with forward secrecy.
I used Wireshark to look at the connection protocols for sip clients
Jitsi and Blink with the Kamailio server. Jitsi offers only four cipher
choices of what I understand are considered compromised security TLS
protocols and it connected with the RSA-AES128-CBC-SHA cipher. Blink
offers 65 cipher choices, starting with ECDHE-RSA-AES256-GCM-SHA384. My
Kamailio server accepted the 29^th offering on the list,
RSA-AES256-GCM-SHA384. Unless I am missing something, Kamailio 4.3.4
doesn’t seem to support ephemeral DH key exchanges. Is there some other
TLS configuration file or setting for Kamailio that can be changed to
allow this?
---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus
Dears, Good day!
i was trying to implement IMS platform in separated servers, i used ubuntu
server 16.04 LTS, and ng-voice repository (Kamailio 5.1) with the
installation wizard and minimum Conf
i also choose FHoSS as HSS
bind9 as DNS
When i tried to register the Proxy-CSCF is not responding to any request,
even no timeout, or error massage, and of course the request is not handled
to I-CSCF.
The client perform 11 tries, and got no respond
Previously i had success with the one image IMS vm, and tried it on
separated servers (kamailio version 4.2.4)
Am i missing something ? how can i start troubleshoot as there is no error
massages ?
Is it because i'm using ubuntu 16 instead of 14?
your help is highly appreciated !
attached is my configuration files
Thanks in Advance
Amar
happy new year and happy sip ;)
-----------------------------------------------
Ángel Elena Medina _o)
craem(a)craem.net / \
http://blog.craem.net _(___V
@craem_
-----------------------------------------------
Zarafa / Zpush Mobile.
-------- Mensaje original --------
De: voipspace voipspace <voipspace(a)yandex.com>
Fecha: 2/1/18 20:35 (GMT+01:00)
Para: miconda(a)gmail.com, "Kamailio (SER) - Users Mailing List" <sr-users(a)lists.kamailio.org>, "Kamailio (SER) - Devel Mailing List" <sr-dev(a)lists.kamailio.org>, business(a)lists.kamailio.org
Asunto: Re: [SR-Users] Happy New Year 2018!
Happy New Year, Every One.
Hope you had great time off with family and friends.
May 2018 be prosperous and happy for you all.
On to bigger and greater thing in the new year.
bw Kamailio is awesome!
01.01.2018, 11:09, "Daniel-Constantin Mierla" <miconda(a)gmail.com>:
> A Happy And Prosperous Year 2018 to everyone using Kamailio and helping
> to improve the project!
>
> Looking forward to meeting many of you around this world during 2018 and
> collaborate online in a friendly environment!
>
> Daniel
>
> --
> Daniel-Constantin Mierla
> www.twitter.com/miconda -- www.linkedin.com/in/miconda
> Kamailio Advanced Training - www.asipto.com
> Kamailio World Conference - May 14-16, 2018 - www.kamailioworld.com
>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users(a)lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users(a)lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
A Happy And Prosperous Year 2018 to everyone using Kamailio and helping
to improve the project!
Looking forward to meeting many of you around this world during 2018 and
collaborate online in a friendly environment!
Daniel
--
Daniel-Constantin Mierla
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Kamailio Advanced Training - www.asipto.com
Kamailio World Conference - May 14-16, 2018 - www.kamailioworld.com
hi, dear all,
i am a start user of kamailio and have a question listed in the title.
if kamailio does not support mrfc and mrfp, how kamailio play the proper ring tone to the calling party?
thx!
from 张勇zhangyong:kevin
Hi,
i am upgrading from kamailio 4.x to 5.1, and when i try to create the scscf
databse, i get the below error
I tried correcting this by removing the indexes, but the ims did not work
properly, with lots of inconsistency in registering, and cannot make calls.
what is the correct way to handle this error ?
root@olc-dd:/usr/local/src/kamailio-5.1/kamailio/utils/kamctl/mysql# mysql
-uroot scscf < ims_usrloc_scscf-create.sql
ERROR 1071 (42000) at line 2: Specified key was too long; max key length is
767 bytes
Thanks.
Abdelmuhaimen Seaudi, CCIE # 25265
Email: aseaudi(a)gmail.com
Skype: aseaudi
LinkedIn: www.linkedin.com/in/aseaudi
Telephone: +2012 84644 733