Hi Daniel, thanks

And, I see that I must also listen on TCP port in order to make TLS works for Kamailio

On Wed, Mar 20, 2013 at 1:55 PM, Daniel-Constantin Mierla <miconda@gmail.com

wrote:

Hello,

when tls module is installed, a self signed pair of certificate-private key is generated in /usr/local/etc/kamailio

If you need one that is signed by a trusted CA (e.g., Verisign), you will have to buy it.

Cheers, Daniel

On 3/19/13 8:08 AM, Khoa Pham wrote:

Hi,

I want to enable TLS in Kamailio, as in here http://kamailio.org/docs/modules/stable/modules/tls.html

But how can I get the certificate and private key ?

-- Khoa Pham HCMC University of Science Faculty of Information Technology

---

SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing listsr-users@lists.sip-router.orghttp://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

-- Daniel-Constantin Mierla - http://www.asipto.comhttp://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda Kamailio World Conference, April 16-17, 2013, Berlin

• http://conference.kamailio.com -

---

SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

...

If you need one that is signed by a trusted CA (e.g., Verisign), you will have to buy it.

or get free cacert.org certificate.

-- juha

20 mar 2013 kl. 10:33 skrev Khoa Pham onmyway133@gmail.com:

Hi Olle,

I follow these 2 tutorials

1. http://nil.uniza.sk/network-security/tls/configuring-tls-support-kamailio-31...

which only describes to listen on tls

listen=tls:158.193.139.51:5061 2. http://www.kamailio.org/dokuwiki/doku.php/tls:create-certificates which only describes to listen on udp and tcp listen=udp:<ip-address-for-receiving-sip-requests>:5060 listen=tcp:<ip-address-for-receiving-sip-requests>:5060

It is not until I listen on both TCP and LTS does it work.

You document http://kamailio.org/docs/modules/4.0.x/modules/tls.html seems to lack of these "listen"

Right. But it's in the core cookbook. We should propably add the listen to the TLS docs too.

Thanks!

/O

On Wed, Mar 20, 2013 at 4:10 PM, Olle E. Johansson oej@edvina.net wrote:

20 mar 2013 kl. 07:55 skrev Daniel-Constantin Mierla miconda@gmail.com:

...

Hello,

when tls module is installed, a self signed pair of certificate-private key is generated in /usr/local/etc/kamailio

If you need one that is signed by a trusted CA (e.g., Verisign), you will have to buy it.

Cheers, Daniel

On 3/19/13 8:08 AM, Khoa Pham wrote:

...

Hi,

I want to enable TLS in Kamailio, as in here http://kamailio.org/docs/modules/stable/modules/tls.html

But how can I get the certificate and private key ?

The documentation for the TLS module actually includes a quick howto. http://kamailio.org/docs/modules/4.0.x/modules/tls.html

What part of this needs clarification? Please help us make the documentation better if there are parts you do not undertand or isn't explained.

Thanks, /O

---

SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

-- Khoa Pham HCMC University of Science Faculty of Information Technology _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

@Moacir, thanks

1. You said that " then use "listen="my ip address" and all enabled services will be bound to the especified IP address." So which port does Kamailio listen for TCP and TLS? How does client know which port to connect to Kamailio ?

On Thu, Mar 21, 2013 at 12:41 AM, Moacir Ferreira < moacirferreira@hotmail.com> wrote:

Hummm. When I start playing with Kamailio I had some problems that were related to the compilation process not really to the final product. Now, if you comment out the listen statement then all server interfaces will listen for all enabled services (SIP-UDP, SIP-TCP and SIP-TLS if you enabled it). AS a troubleshooting suggestion, just comment out the "listen" statement and all enabled services will bind to all available IP interfaces. If it works, then use "listen="my ip address" and all enabled services will be bound to the especified IP address.

Best regards,

Moacir

From: oej@edvina.net Date: Wed, 20 Mar 2013 12:43:06 +0100 To: sr-users@lists.sip-router.org Subject: Re: [SR-Users] How to enable TLS in Kamailio ?

20 mar 2013 kl. 10:33 skrev Khoa Pham onmyway133@gmail.com:

Hi Olle,

I follow these 2 tutorials

http://nil.uniza.sk/network-security/tls/configuring-tls-support-kamailio-31... which only describes to listen on tls

listen=tls:158.193.139.51:5061

2. http://www.kamailio.org/dokuwiki/doku.php/tls:create-certificates

which only describes to listen on udp and tcp

listen=udp:<ip-address-for-receiving-sip-requests>:5060 listen=tcp:<ip-address-for-receiving-sip-requests>:5060

It is not until I listen on both TCP and LTS does it work.

You document http://kamailio.org/docs/modules/4.0.x/modules/tls.htmlseems to lack of these "listen"

Right. But it's in the core cookbook. We should propably add the listen to the TLS docs too.

Thanks!

/O

On Wed, Mar 20, 2013 at 4:10 PM, Olle E. Johansson oej@edvina.net wrote:

20 mar 2013 kl. 07:55 skrev Daniel-Constantin Mierla miconda@gmail.com:

Hello,

when tls module is installed, a self signed pair of certificate-private key is generated in /usr/local/etc/kamailio

If you need one that is signed by a trusted CA (e.g., Verisign), you will have to buy it.

Cheers, Daniel

On 3/19/13 8:08 AM, Khoa Pham wrote:

Hi,

I want to enable TLS in Kamailio, as in here http://kamailio.org/docs/modules/stable/modules/tls.html

But how can I get the certificate and private key ?

The documentation for the TLS module actually includes a quick howto. http://kamailio.org/docs/modules/4.0.x/modules/tls.html

What part of this needs clarification? Please help us make the documentation better if there are parts you do not undertand or isn't explained.

Thanks, /O

---

SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

-- Khoa Pham HCMC University of Science Faculty of Information Technology _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

_______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

---

SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

Hello,

iirc, the error is signaled as part of redis response pseudo-variable (as type field or so). But indeed can be more logical as you present.

It is kind of typical behavior not to start when not able to connect to backend (e.g., even for like mysql, etc.). This could be changed, as there are options to reconnect at runtime, just that nobody took the time to do it...

If you make a patch for any or both of these change, we will get the in -- if you are not a developer and is not convenient to do it, I will do it sometime soon, in this devel cycle, but I may need your assistance to test.

Cheers, Daniel

On 3/20/13 5:54 PM, pars3c wrote:

Hello,

i'm using the Redis module, but the function "redis_cmd" doesn't return false if there is some problem on the database.

if(redis_cmd("srv1","$var(redis_credit)", "r")) {

$var(credit_op)=$redis(r=>value);

xlog("L_INFO","xxxxxxx -- \n");

} else { xlog("L_INFO","yyyyyyyy -- \n");}

If I stop the redis db, and make a call , it enter in the "if" statement and write the log xxx . I think that , if the db is down, it should enter in the "else" and write the yyyy log.

Where is the error ?

Why , if the db is down, and I try to restart kamailio, it don't start ?

It write in the log , that the connection is broken and it remain stopped.

Thanks

---

SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

Hello,

I am going to try to fix this.

Regards, Vicente.

On 03/21/2013 09:28 AM, pars3c wrote:

Hi Daniel,

thanks for your answer, I've tried now to log the variable "$redis(r=>info)" that, as documented, should contain an error message from REDIS, but in this case , REDIS is down and the log is <null >.

Thanks for your help and your work.

*Da:*sr-users-bounces@lists.sip-router.org [mailto:sr-users-bounces@lists.sip-router.org] *Per conto di *Daniel-Constantin Mierla *Inviato:* giovedì 21 marzo 2013 07:59 *A:* Kamailio (SER) - Users Mailing List *Oggetto:* Re: [SR-Users] Redis module problem

Hello,

iirc, the error is signaled as part of redis response pseudo-variable (as type field or so). But indeed can be more logical as you present.

It is kind of typical behavior not to start when not able to connect to backend (e.g., even for like mysql, etc.). This could be changed, as there are options to reconnect at runtime, just that nobody took the time to do it...

If you make a patch for any or both of these change, we will get the in -- if you are not a developer and is not convenient to do it, I will do it sometime soon, in this devel cycle, but I may need your assistance to test.

Cheers, Daniel

On 3/20/13 5:54 PM, pars3c wrote:

Hello,

i'm using the Redis module, but the function "redis_cmd" doesn't
return false if there is some problem on the database.

if(redis_cmd("srv1","$var(redis_credit)", "r")) {

$var(credit_op)=$redis(r=>value);

xlog("L_INFO","xxxxxxx -- \n");

} else { xlog("L_INFO","yyyyyyyy -- \n");}

If I stop the redis db, and make a call , it enter in the "if"
statement and write the log xxx .  I think that , if the db is
down, it should enter in the "else" and write the yyyy log.

Where is the error ?

Why , if the db is down, and I try to restart kamailio, it don't
start ?

It write in the log , that the connection is broken and it remain
stopped.

Thanks




_______________________________________________

SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list

sr-users@lists.sip-router.org  <mailto:sr-users@lists.sip-router.org>

http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

-- Daniel-Constantin Mierla -http://www.asipto.com http://twitter.com/#!/miconda http://twitter.com/#%21/miconda -http://www.linkedin.com/in/miconda Kamailio World Conference, April 16-17, 2013, Berlin

-http://conference.kamailio.com -

Nessun virus nel messaggio. Controllato da AVG - www.avg.com http://www.avg.com Versione: 2013.0.2904 / Database dei virus: 2641/6185 - Data di rilascio: 17/03/2013

---

SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

Hi pars3c,

could you paste the part of the log where redis_cmd is executed?

Thanks, Vicente.

On 03/21/2013 09:28 AM, pars3c wrote:

Hi Daniel,

thanks for your answer, I've tried now to log the variable "$redis(r=>info)" that, as documented, should contain an error message from REDIS, but in this case , REDIS is down and the log is <null >.

Thanks for your help and your work.

*Da:*sr-users-bounces@lists.sip-router.org [mailto:sr-users-bounces@lists.sip-router.org] *Per conto di *Daniel-Constantin Mierla *Inviato:* giovedì 21 marzo 2013 07:59 *A:* Kamailio (SER) - Users Mailing List *Oggetto:* Re: [SR-Users] Redis module problem

Hello,

iirc, the error is signaled as part of redis response pseudo-variable (as type field or so). But indeed can be more logical as you present.

It is kind of typical behavior not to start when not able to connect to backend (e.g., even for like mysql, etc.). This could be changed, as there are options to reconnect at runtime, just that nobody took the time to do it...

If you make a patch for any or both of these change, we will get the in -- if you are not a developer and is not convenient to do it, I will do it sometime soon, in this devel cycle, but I may need your assistance to test.

Cheers, Daniel

On 3/20/13 5:54 PM, pars3c wrote:

Hello,

i'm using the Redis module, but the function "redis_cmd" doesn't
return false if there is some problem on the database.

if(redis_cmd("srv1","$var(redis_credit)", "r")) {

$var(credit_op)=$redis(r=>value);

xlog("L_INFO","xxxxxxx -- \n");

} else { xlog("L_INFO","yyyyyyyy -- \n");}

If I stop the redis db, and make a call , it enter in the "if"
statement and write the log xxx .  I think that , if the db is
down, it should enter in the "else" and write the yyyy log.

Where is the error ?

Why , if the db is down, and I try to restart kamailio, it don't
start ?

It write in the log , that the connection is broken and it remain
stopped.

Thanks




_______________________________________________

SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list

sr-users@lists.sip-router.org  <mailto:sr-users@lists.sip-router.org>

http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

-- Daniel-Constantin Mierla -http://www.asipto.com http://twitter.com/#!/miconda http://twitter.com/#%21/miconda -http://www.linkedin.com/in/miconda Kamailio World Conference, April 16-17, 2013, Berlin

-http://conference.kamailio.com -

Nessun virus nel messaggio. Controllato da AVG - www.avg.com http://www.avg.com Versione: 2013.0.2904 / Database dei virus: 2641/6185 - Data di rilascio: 17/03/2013

---

SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users