Hello,
How can I disable:
TLS_RSA_WITH_RC4_128_SHA (0x5) INSECURE128
TLS_RSA_WITH_RC4_128_MD5 (0x4) INSECURE128
What should I put in cypher_list in order to disable the above?
I would also like support TLS 1.2 and TLS 1.3, but remove support for 1.0 and 1.1
Thanks,
Arik Halperin
Hi Team,
We are using your product Kamalio in Call Recording services.
We are planning for Performance testing of our recording system.
Currently we have bypassed Twilio and Kamailio.
Generating Calls using SIPP directly to VOIP.
So, we want calls to route through KAMAILIO -> VOIP. So performance can be bit realistic.
Any help is greatly appreciated!
Thanks
Srikanth
Hello!
I'm testing Kamailio as a presence server with configuration suggested by
https://kb.asipto.com/kamailio:presence:k43-blf tutorial.
When I set presence module subs_db_mode setting to 0 or 2 (did not test
with 1 and 3 seemed to have no problems) I was getting "DEBUG: presence
[notify.c:1234]: publ_notify(): Could not find subs_dialog" message after
Kamailio received some PUBLISH requests. And NOTIFY is not being generated.
It appears to be a mistake. There should be an active watcher according to
Expires header values of the previous SUBSCRIBE request and the response to
it. I could not find how to get the list of active watchers from Kamailio
memory. *Is it possible or it can be done only by adding extra debug line
in get_subs_dialog function?*
Also I found that after setting pua module db_mode setting to 0, Kamailio
is still writing records to presentity table. And it is constantly queried
"select `username`,`domain`,`etag`,`event` from `presentity` where
`expires`<1576584910 AND `expires`>0 order by username" during the run
time. *Is it correct behavior?*
Thank a lot!
Hi Team,
We are deploying Kamailio 5.3.1 on CentOS 7 for testing with a known carrier in Europe. We would like to get support for the product installation.
Regards,
Simal Mathai
O: +1 214 242 5975
[cid:image001.png@01D13657.67E2B360]<http://www.tekvizion.com/>
Please follow us on LinkedIn and Twitter
[cid:image002.png@01D13657.67E2B360]<https://www.linkedin.com/company/tekvizion?trk=top_nav_home>[cid:image003.png@01D13657.67E2B360]<https://twitter.com/tekvizion>
In route block I call t_on_failure, t_on_branch_failure, and
t_on_branch. If branch route fails like this:
Dec 15 08:52:19 box /usr/bin/sip-proxy[84346]: ERROR: tm [ut.h:284]: uri2dst2(): failed to resolve "foo.tutpro.com" :unresolvable A or AAAA request (-7)
Dec 15 08:52:19 box /usr/bin/sip-proxy[84346]: ERROR: tm [t_fwd.c:1738]: t_forward_nonack(): failure to add branches
failure_route or tm:branch-failure event_route is not executed. Is
there a way to catch such a failure?
-- Juha
Hi,
I'm trying to construct an end-to-end encrypted signalling test
through our setup. I thought I could use sipp for that, as it supports
TLS according to the man page. However, when I try to run it, I get
this error:
FI_init_ssl_context: SSL_CTX_use_certificate_file failed.
I searched the web; however, all similar questions end up without
answers. I tried specifying a local key and cert without success. I'd
think I should not need a cert for my client, though.
Has anyone ever successfully conducted an automated TLS test? I'm open
to using a different tool if necessary.
Thanks for all hints or examples.
Regards,
Sebastian
--
Sebastian Damm
Voice Engineer
__________________________________________
sipgate GmbH
Gladbacher Straße 74 | 40219 Düsseldorf
Hi Experts.
Need your opinion on below part related to kamailio
I am using SIP Kamailio module Version for the SIP Registrations from the
Client mobile phones using Android and IOS which is Over TLSv1.2 , So in
nutshell the SIP Signaling is TLS version 1.2 encrypted and Customer is
requesting for the forward of the unencrypted SIP signaling messages
especially the SIP Registration messages to their probe solutions without
storing the SIP messages locally in the Kamailio Database
Question :Would it not be possible for Kamailio imply “mirror” all the
SIP messages related to all SIP REGISTER dialogs (after removing TLS for
inbound messages and prior to adding TLS for outbound message) to a
designated IP Address and Port? No need for local database storage. No
need for encapsulation. No mirroring of other messages/dialogs.
Cheers
Sudhakar
Hi,
kamailio 5.2 branch has a commit
09ac3e47ef79dbd599b7dec5b84ae3b792f025ed cherry picked from master branch.
It makes sense for master because get_send_socket2() behavior has
changed and function became started and also there were some patches to
propagate connection it to uac structure.
5.2 kamailio takes the first interface for TCP/TLS/WS connections and
then finds existing tcp connection matched by ip:port, but when the
patch is applied connection lookup fails and kamailio can't forward
in-dialog messages.
Hi, I am using Kamailio for my SIP Phone app. My main SIP client is the iOS
app. Till now everything is working fine regarding the calling. But the
problem is when the app is killed I am not able to pick up incoming call.
The thing is, when app is killed I am sending PushKit VOIP message to my
ios app to wake it up. App is waking up. But by the time app is waking up,
the original INVITE message got missed up. So according to SIP protocol it
will re-INVITE after some time. Currently if I keep my app open for 10-15
secs after it wakes up, I am able to get the re-INVITE and everything works
fine just as it was supposed to. But waiting 10-15 sec on the app is not
practical in any sense.
So my question is there any way I can reduce the re-INVITE time to like 5/6
seconds so that as soon as the app open it will wait for 5/6 seconds
(practical upto some extent) and it will get the call ? Or what kamailio is
using as the interval time is a SIP standard and can not be changed? If
possible to do so, how can I do that? Please help.