Hello sir , when i enabled tls module in kamailio and i made the configurations in tls.cfg, kamailio always sent me that peer dont return certificate when i make requre_certficate=1
Please read the tls module documentation,
https://kamailio.org/docs/modules/devel/modules/tls.html#tls.p.require_certi...
when enabled it requires client to present certificate, but client does not have one, which is the likely cause of the problem.
Hope this helps.
On Mon, 2 Mar 2020, 14:34 ahmed moghazy, ahmed.m.moghazi@gmail.com wrote:
Hello sir , when i enabled tls module in kamailio and i made the configurations in tls.cfg, kamailio always sent me that peer dont return certificate when i make requre_certficate=1 _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
I put my own certficate in /res/raw/rootca.pem in linphone
Sent from my iPhone
On Mar 2, 2020, at 7:40 PM, M S shaheryarkh@gmail.com wrote:
Please read the tls module documentation,
https://kamailio.org/docs/modules/devel/modules/tls.html#tls.p.require_certi...
when enabled it requires client to present certificate, but client does not have one, which is the likely cause of the problem.
Hope this helps.
On Mon, 2 Mar 2020, 14:34 ahmed moghazy, ahmed.m.moghazi@gmail.com wrote: Hello sir , when i enabled tls module in kamailio and i made the configurations in tls.cfg, kamailio always sent me that peer dont return certificate when i make requre_certficate=1 _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Dude again, RTFM!
The TLS module has a quick how-to generate client and server certificates. Both must be issued by same CA and server must have all issued certificates along with CA, CRL and private key. The whole directory structure and what to put where is listed, along with how to configure kamailio.
On Mon, 2 Mar 2020, 20:27 ahmed moghazy, ahmed.m.moghazi@gmail.com wrote:
I put my own certficate in /res/raw/rootca.pem in linphone
Sent from my iPhone
On Mar 2, 2020, at 7:40 PM, M S shaheryarkh@gmail.com wrote:
Please read the tls module documentation,
https://kamailio.org/docs/modules/devel/modules/tls.html#tls.p.require_certi...
when enabled it requires client to present certificate, but client does not have one, which is the likely cause of the problem.
Hope this helps.
On Mon, 2 Mar 2020, 14:34 ahmed moghazy, ahmed.m.moghazi@gmail.com wrote:
Hello sir , when i enabled tls module in kamailio and i made the configurations in tls.cfg, kamailio always sent me that peer dont return certificate when i make requre_certficate=1 _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
I know that but i want voip program to be used with kamailio using tls i you could suggest one , thank you
Sent from my iPhone
On Mar 3, 2020, at 5:54 AM, M S shaheryarkh@gmail.com wrote:
Dude again, RTFM!
The TLS module has a quick how-to generate client and server certificates. Both must be issued by same CA and server must have all issued certificates along with CA, CRL and private key. The whole directory structure and what to put where is listed, along with how to configure kamailio.
On Mon, 2 Mar 2020, 20:27 ahmed moghazy, ahmed.m.moghazi@gmail.com wrote: I put my own certficate in /res/raw/rootca.pem in linphone
Sent from my iPhone
On Mar 2, 2020, at 7:40 PM, M S shaheryarkh@gmail.com wrote:
Please read the tls module documentation,
https://kamailio.org/docs/modules/devel/modules/tls.html#tls.p.require_certi...
when enabled it requires client to present certificate, but client does not have one, which is the likely cause of the problem.
Hope this helps.
On Mon, 2 Mar 2020, 14:34 ahmed moghazy, ahmed.m.moghazi@gmail.com wrote: Hello sir , when i enabled tls module in kamailio and i made the configurations in tls.cfg, kamailio always sent me that peer dont return certificate when i make requre_certficate=1 _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Any sip client will work with kamailio (as sip server) as long as it supports TLS and configured correctly. I mostly use Linphone, Xlite and some of my own sip clients that i have built over the years.
You simply need to follow the quick howto in tls module documentation (as i mentioned earlier) to generate client and server certificates. Then copy client cert along with CA to sip client, provide connection and authentication info and it should work fine.
For over simplified setup where you don't have client certificate or not sure how to configure one for any given sip client, you can disable "verify_certificate" option in tls module.
Hope this helps.
On Tue, 3 Mar 2020, 08:53 ahmed moghazy, ahmed.m.moghazi@gmail.com wrote:
I know that but i want voip program to be used with kamailio using tls i you could suggest one , thank you
Sent from my iPhone
On Mar 3, 2020, at 5:54 AM, M S shaheryarkh@gmail.com wrote:
Dude again, RTFM!
The TLS module has a quick how-to generate client and server certificates. Both must be issued by same CA and server must have all issued certificates along with CA, CRL and private key. The whole directory structure and what to put where is listed, along with how to configure kamailio.
On Mon, 2 Mar 2020, 20:27 ahmed moghazy, ahmed.m.moghazi@gmail.com wrote:
I put my own certficate in /res/raw/rootca.pem in linphone
Sent from my iPhone
On Mar 2, 2020, at 7:40 PM, M S shaheryarkh@gmail.com wrote:
Please read the tls module documentation,
https://kamailio.org/docs/modules/devel/modules/tls.html#tls.p.require_certi...
when enabled it requires client to present certificate, but client does not have one, which is the likely cause of the problem.
Hope this helps.
On Mon, 2 Mar 2020, 14:34 ahmed moghazy, ahmed.m.moghazi@gmail.com wrote:
Hello sir , when i enabled tls module in kamailio and i made the configurations in tls.cfg, kamailio always sent me that peer dont return certificate when i make requre_certficate=1 _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
I generate those certificates and i put then in linphone source code i want to enable require_certficate=1 could you help me how and where to put the certificates and linphone peer return it ? , thank you
On Mar 3, 2020, at 10:52 AM, M S shaheryarkh@gmail.com wrote:
Any sip client will work with kamailio (as sip server) as long as it supports TLS and configured correctly. I mostly use Linphone, Xlite and some of my own sip clients that i have built over the years.
You simply need to follow the quick howto in tls module documentation (as i mentioned earlier) to generate client and server certificates. Then copy client cert along with CA to sip client, provide connection and authentication info and it should work fine.
For over simplified setup where you don't have client certificate or not sure how to configure one for any given sip client, you can disable "verify_certificate" option in tls module.
Hope this helps.
On Tue, 3 Mar 2020, 08:53 ahmed moghazy, ahmed.m.moghazi@gmail.com wrote: I know that but i want voip program to be used with kamailio using tls i you could suggest one , thank you
Sent from my iPhone
On Mar 3, 2020, at 5:54 AM, M S shaheryarkh@gmail.com wrote:
Dude again, RTFM!
The TLS module has a quick how-to generate client and server certificates. Both must be issued by same CA and server must have all issued certificates along with CA, CRL and private key. The whole directory structure and what to put where is listed, along with how to configure kamailio.
On Mon, 2 Mar 2020, 20:27 ahmed moghazy, ahmed.m.moghazi@gmail.com wrote: I put my own certficate in /res/raw/rootca.pem in linphone
Sent from my iPhone
On Mar 2, 2020, at 7:40 PM, M S shaheryarkh@gmail.com wrote:
Please read the tls module documentation,
https://kamailio.org/docs/modules/devel/modules/tls.html#tls.p.require_certi...
when enabled it requires client to present certificate, but client does not have one, which is the likely cause of the problem.
Hope this helps.
On Mon, 2 Mar 2020, 14:34 ahmed moghazy, ahmed.m.moghazi@gmail.com wrote: Hello sir , when i enabled tls module in kamailio and i made the configurations in tls.cfg, kamailio always sent me that peer dont return certificate when i make requre_certficate=1 _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
If i want to make users in groups for example two Groups group A and group B and each group has 4 users but users in group A couldn't Call users in group B?
On Mar 3, 2020, at 10:36 PM, ahmed moghazy ahmed.m.moghazi@gmail.com wrote:
I generate those certificates and i put then in linphone source code i want to enable require_certficate=1 could you help me how and where to put the certificates and linphone peer return it ? , thank you
On Mar 3, 2020, at 10:52 AM, M S shaheryarkh@gmail.com wrote:
Any sip client will work with kamailio (as sip server) as long as it supports TLS and configured correctly. I mostly use Linphone, Xlite and some of my own sip clients that i have built over the years.
You simply need to follow the quick howto in tls module documentation (as i mentioned earlier) to generate client and server certificates. Then copy client cert along with CA to sip client, provide connection and authentication info and it should work fine.
For over simplified setup where you don't have client certificate or not sure how to configure one for any given sip client, you can disable "verify_certificate" option in tls module.
Hope this helps.
On Tue, 3 Mar 2020, 08:53 ahmed moghazy, ahmed.m.moghazi@gmail.com wrote: I know that but i want voip program to be used with kamailio using tls i you could suggest one , thank you
Sent from my iPhone
On Mar 3, 2020, at 5:54 AM, M S shaheryarkh@gmail.com wrote:
Dude again, RTFM!
The TLS module has a quick how-to generate client and server certificates. Both must be issued by same CA and server must have all issued certificates along with CA, CRL and private key. The whole directory structure and what to put where is listed, along with how to configure kamailio.
On Mon, 2 Mar 2020, 20:27 ahmed moghazy, ahmed.m.moghazi@gmail.com wrote: I put my own certficate in /res/raw/rootca.pem in linphone
Sent from my iPhone
> On Mar 2, 2020, at 7:40 PM, M S shaheryarkh@gmail.com wrote: > Please read the tls module documentation,
https://kamailio.org/docs/modules/devel/modules/tls.html#tls.p.require_certi...
when enabled it requires client to present certificate, but client does not have one, which is the likely cause of the problem.
Hope this helps.
> On Mon, 2 Mar 2020, 14:34 ahmed moghazy, ahmed.m.moghazi@gmail.com wrote: > Hello sir , > when i enabled tls module in kamailio and i made the configurations in tls.cfg, > kamailio always sent me that peer dont return certificate when i make requre_certficate=1 > _______________________________________________ > Kamailio (SER) - Users Mailing List > sr-users@lists.kamailio.org > https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
Hello,
this could be done with a database query (e.g. with sqlops module). If you are looking for a dedicated interface, there is for example the group module: https://kamailio.org/docs/modules/devel/modules/group.html
Cheers,
Henning
-- Henning Westerholt – https://skalatan.de/blog/ Kamailio services – https://gilawa.comhttps://gilawa.com/
From: sr-users sr-users-bounces@lists.kamailio.org On Behalf Of ahmed moghazy Sent: Tuesday, March 10, 2020 8:53 PM To: Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org Subject: Re: [SR-Users] (no subject)
If i want to make users in groups for example two Groups group A and group B and each group has 4 users but users in group A couldn't Call users in group B?
On Mar 3, 2020, at 10:36 PM, ahmed moghazy <ahmed.m.moghazi@gmail.commailto:ahmed.m.moghazi@gmail.com> wrote: I generate those certificates and i put then in linphone source code i want to enable require_certficate=1 could you help me how and where to put the certificates and linphone peer return it ? , thank you
On Mar 3, 2020, at 10:52 AM, M S <shaheryarkh@gmail.commailto:shaheryarkh@gmail.com> wrote: Any sip client will work with kamailio (as sip server) as long as it supports TLS and configured correctly. I mostly use Linphone, Xlite and some of my own sip clients that i have built over the years.
You simply need to follow the quick howto in tls module documentation (as i mentioned earlier) to generate client and server certificates. Then copy client cert along with CA to sip client, provide connection and authentication info and it should work fine.
For over simplified setup where you don't have client certificate or not sure how to configure one for any given sip client, you can disable "verify_certificate" option in tls module.
Hope this helps.
On Tue, 3 Mar 2020, 08:53 ahmed moghazy, <ahmed.m.moghazi@gmail.commailto:ahmed.m.moghazi@gmail.com> wrote: I know that but i want voip program to be used with kamailio using tls i you could suggest one , thank you Sent from my iPhone
On Mar 3, 2020, at 5:54 AM, M S <shaheryarkh@gmail.commailto:shaheryarkh@gmail.com> wrote: Dude again, RTFM!
The TLS module has a quick how-to generate client and server certificates. Both must be issued by same CA and server must have all issued certificates along with CA, CRL and private key. The whole directory structure and what to put where is listed, along with how to configure kamailio.
On Mon, 2 Mar 2020, 20:27 ahmed moghazy, <ahmed.m.moghazi@gmail.commailto:ahmed.m.moghazi@gmail.com> wrote: I put my own certficate in /res/raw/rootca.pem in linphone Sent from my iPhone
On Mar 2, 2020, at 7:40 PM, M S <shaheryarkh@gmail.commailto:shaheryarkh@gmail.com> wrote: Please read the tls module documentation,
https://kamailio.org/docs/modules/devel/modules/tls.html#tls.p.require_certi...
when enabled it requires client to present certificate, but client does not have one, which is the likely cause of the problem.
Hope this helps.
On Mon, 2 Mar 2020, 14:34 ahmed moghazy, <ahmed.m.moghazi@gmail.commailto:ahmed.m.moghazi@gmail.com> wrote: Hello sir , when i enabled tls module in kamailio and i made the configurations in tls.cfg, kamailio always sent me that peer dont return certificate when i make requre_certficate=1 _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.orgmailto:sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
-
ahmed moghazy -
Henning Westerholt -
M S