sr-users

sr-users@lists.kamailio.org

23 participants
37378 discussions

TLS: client doesn't check certificate CN
by Marat Gareev 20 Jun '24

20 Jun '24

Hello, I noticed that Kamailio can route either to IP and FQDN. This means the server certificate CN is not checked by the client. How to enable something like the 'verify_peer' option? Thanks

1 0

Possibility to print values of Core Keywords in Kamailio configuration file
by sadik.oualla.mohamed＠gmail.com 20 Jun '24

20 Jun '24

Hello everyone, I have a question regarding the usage of core keywords, specifically the possibility of printing their values in log messages. While I understand that core keywords such as 'dst_port' and 'af' etc... can be accessed directly in if conditions, I am interested to know if there is a way to print the values of these core keywords for logging purposes. Thank you.

4 6

Re: exec concurrency
by Jon Bonilla (Manwe) 19 Jun '24

19 Jun '24

El Wed, 19 Jun 2024 11:54:05 -0500 Brett Nemeroff <brett(a)voicefoxtelephony.com> escribió: > What you should expect using this method is blocking while the exec runs > which could run you out of child processes while they complete. I'd also > expect to see an "unusual amount of CPU activity" which will be the result > of the forked shells being created and destroyed. > > All of that being said, yes it works. It's architecturally overly simple > and very inefficient. If your load is tiny, it might be ok. Anything > moderate like Henning and others have said, will use an inordinate amount > of cpu. I would not personally risk it. > > Thank you Brett, Henning and Alex Sadly the load won't be tiny and cannot risk it. For now I'll deploy a local nginx and fpm to run the scripts, which are in php, and will use the http_async method. Sadly we have to "http all the things" nowadays. Let's see if I'm able to write down all the logic tomorrow and do some testing. cheers, Jon -- PekePBX, the multitenant PBX solution https://pekepbx.com

1 0

Adding custom headers to HTTP server response xhttp
by Sasivarunan 19 Jun '24

19 Jun '24

HI Team, I use tls and xhttp module to enable websocket interface for webrtc client to connect. I wanted to add "Strict-Transport-Security" header to xhttp response to add security. But currently I don't see a way to add it anywhere. I can see only server_header as an option, But this will get added to SIP messages as well. It 'd be great if anybody has a suggestion around this. Thanks Varunan

2 2

Re: exec concurrency
by Jon Bonilla (Manwe) 19 Jun '24

19 Jun '24

El Tue, 18 Jun 2024 13:54:41 -0500 Brett Nemeroff <brett(a)voicefoxtelephony.com> escribió: > Just want to add that exec is heavy and slow. I would not recommend it. > > Is there a reason you want to do this over http-ifying your script and > using async? > > Not really. The scripts are provided. Maybe I'm against "http all the things" which seems to be what everyone does nowadays. Why would http client be lighter than executing a script? That would be a design problem, right? -- PekePBX, the multitenant PBX solution https://pekepbx.com

2 1

exec concurrency
by Jon Bonilla (Manwe) 18 Jun '24

18 Jun '24

Hi all I've been working with async http client and async db queries in the past but now I have to execute scripts and store the return values in avps. Since I have no experience with that, I wonder how to achieve concurrency with that scenario. Is there a way to exec async or suspend until the exec has finished and resume later? cheers, Jon -- PekePBX, the multitenant PBX solution https://pekepbx.com

2 2

Psresence dialoginfo question
by Stefan Mititelu 17 Jun '24

17 Jun '24

Hello, I am doing BLF but I want different users to be able to setup different dialog info initial states. My question is if there's an already implemented way for doing that? I've looked over docs and C code so far and this is what I've found: 1. modparam("presence_dialoginfo", "force_dummy_dialog", 1) => will force sending initial NOTIFY with dialog state "terminated" 2. Function calls: dlginfo_agg_nbody()->dlginfo_agg_nbody_empty() which will build the pre-defined xml body with that "terminated" state. If not implemented so far, maybe this can be used to set a different initial state for a user (e.g. export a cfg function or take that info from DB?) Any opinions on this? Thank you, Stefan

2 2

db_mysql startup warnings
by Juha Heinanen 17 Jun '24

17 Jun '24

When I start Kamailio master version that has been build on Debian 12 with default-libmysqlclient-dev depending on libmariadb-dev-compat, I get several warnings like this: 2024-06-17T14:48:27.702827+03:00 siika /usr/bin/sip-proxy[297246]: WARNING: db_mysql [km_my_con.c:187]: db_mysql_new_connection(): opt_ssl_ca option not supported by mysql version (value (null)) - ignoring How can I prevent them? -- Juha

1 1

How to Check Source Port in Application Layer with Kamailio
by sadik.oualla.mohamed＠gmail.com 16 Jun '24

16 Jun '24

Hello kamailio lovers, I am currently working on a Kamailio configuration where I need to check the source port of incoming SIP messages. Initially, I used the $sp pseudo-variable to get the source port, which worked perfectly while testing with SIPp. Here is the snippets code that I use " if ($sp != 5080 && $sp != 8080 && $sp != 5060){ sl_send_reply(403, "forbidden"); xlog("this $rm received, is forbidden\n"); exit; } " However, I encountered an issue when I switched to using sipsak for testing. It seems that sipsak uses a randomly assigned port for the actual network connection, even though it sets the source port in the SIP headers (e.g., Via, To and Contact headers) to a specified port using the -l option. Here is the sipsak command that I use "sipsak -vv -s sip:jack@192.168.1.2:5060-l 5080" My goal is to have Kamailio check the source port as specified in the application layer, rather than the transport layer port (i.e., the ephemeral port assigned by the OS randomly like 54691, 33017...). Could anyone guide me on how to properly configure Kamailio to extract and check the port from the application layer or SIP headers, or am I doing this in the wrong way? Any advice or examples would be greatly appreciated. "I am not a native english speak, so I use chatGPT to make my questions clear" Thank you!

1 0

topos module issue on hangup
by Arun K R 13 Jun '24

13 Jun '24

Hello, I am using topos module to hide Record-Route and Route header as per the requirement from carrier. But the topos module hides, contact, via and routing headers also. Due to this reason when I am getting bye from the carrier I am not able to route the bye back to the agent. Bye from Agent to carrier is working fine. Bye from carrier to my internal network interface is not routing to client through public interface. I assume this may be because Via / Contact header has been hidden and changed by the topos module with the invite please help me for this Thanks Arun

3 5

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users