From khorsmann@gmail.com Mon Jun 17 19:10:37 2019
From: Karsten Horsmann <khorsmann@gmail.com>
To: sr-users@lists.kamailio.org
Subject: [SR-Users] dispatcher and TLS targets
Date: Mon, 17 Jun 2019 19:10:18 +0200
Message-ID:
 <CAFArqsbr4Gp-ZkTLZzB8hHx9kM-TSZweqWXrHY8O7Jjys9xZvQ@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1762451438=="

--===============1762451438==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hi all,

i try to configure an SBC OS config [1] based kamailio 5.2.3 [2] with
dispatcher and rtpengine.
I used transport=3Dtcp to see the plain traffic and then switched to TLS
(with tls.cfg, valid certificate and stuff).

After starting up, the Target is marked as "down".
Due the encryption its hard to debug that.
Any hints? Did i made an mistake in the configuration?

TLS calls from the target to my kamailio proxy works. So its "half broken"
:) at the moment.

[1]
https://github.com/voiceboys/sbcOS/blob/master/SbcOS/configs/voice/kamailio/k=
amailio.cfg


[2]
kamailio -v
version: kamailio 5.2.3 (x86_64/linux) c36229
flags: STATS: Off, USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS,
DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MEM, SHM_MMAP, PKG_MALLOC,
Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX,
FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR,
USE_DST_BLACKLIST, HAVE_RESOLV_RES
ADAPTIVE_WAIT_LOOPS=3D1024, MAX_RECV_BUFFER_SIZE 262144 MAX_URI_SIZE 1024,
BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB
poll method support: poll, epoll_lt, epoll_et, sigio_rt, select.
id: c36229
compiled on 11:28:11 May 22 2019 with gcc 4.8.5


-- %< --------------------- kamctl dispatcher dump
        "SET":  {
          "ID": 1004,
          "TARGETS":  [{
              "DEST": {
                "URI":  "sip:sip101.example.de;transport=3Dtls",
                "FLAGS":  "TP",
                "PRIORITY": 0,
                "ATTRS":  {
                  "BODY":
"access=3D212.xx.xx.xx:5061;socket=3Dtls:212.xx.xx.xx:5061;weight=3D100;ping_=
from=3Dsip:
mykamailio.example.de",
                  "DUID": "",
                  "MAXLOAD":  0,
                  "WEIGHT": 100,
                  "RWEIGHT":  0,
                  "SOCKET": "tls:212.xx.xx.xx:5061"
                },
                "LATENCY":  {
                  "AVG":  30000,
                  "STD":  0,
                  "EST":  30000,
                  "MAX":  30000,
                  "TIMEOUT":  1
                }
              }
            }]
        }
      },
-- %< --------------------- kamctl dispatcher dump

 WARNING: <script>: Destination down: OPTIONS
ru=3Dsip101.example.de;transport=3Dtls
du=3D<null>


-- %< --------------------- tls.cfg
[server:default]
method =3D TLSv1
verify_certificate =3D no
require_certificate =3D no
private_key =3D /etc/pki/tls/private/mykamailio.example.de.pem
certificate =3D /etc/pki/tls/private/mykamailio.example.de.pem
server_name =3D mykamailio.example.de

[server:212.xx.xx.xx:5061]
method =3D TLSv1+
verify_certificate =3D no
require_certificate =3D no

private_key =3D /etc/pki/tls/private/mykamailio.example.de.pem
certificate =3D /etc/pki/tls/private/mykamailio.example.de.pem
server_name =3D mykamailio.example.de

# This is the default client domain, settings
# in this domain will be used for all outgoing
# TLS connections that do not match any other
# client domain in this configuration file.
# We require that servers present valid certificate.
#

[client: 212.xx.xx.xx:5061]
method =3D TLSv1+
verify_certificate =3D no
require_certificate =3D no

private_key =3D /etc/pki/tls/private/mykamailio.example.de.pem
certificate =3D /etc/pki/tls/private/mykamailio.example.de.pem
server_name =3D mykamailio.example.de

[client:default]
verify_certificate =3D no
require_certificate =3D no

-- %< --------------------- tls.cfg

Cheers Karsten

--=20
Mit freundlichen Gr=C3=BC=C3=9Fen
*Karsten Horsmann*



--===============1762451438==
Content-Type: text/html
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"
MIME-Version: 1.0
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--===============1762451438==--