Displaying 20 results from an estimated 600 matches similar to: "Asterisk 11.11 with TCP/TLS SRTP and Grandstream gxp1450 not working"
2016 Oct 26
2
Problem setting up ssl connection
On 26-10-16 15:03, Dan Jenkins wrote:
>
>
> On Wed, Oct 26, 2016 at 1:46 PM, Jonas Kellens
> <jonas.kellens at telenet.be <mailto:jonas.kellens at telenet.be>> wrote:
>
> Hello
>
>
> I keep getting the following error when trying to connect to the
> Asterisk server using AMI :
>
> $socket = fsockopen("tls://11.22.33.44
>
2016 Oct 26
2
Problem setting up ssl connection
Hello
I keep getting the following error when trying to connect to the
Asterisk server using AMI :
$socket = fsockopen("tls://11.22.33.44","5039", $errno, $errstr, 5);
Erorr on CLI :
[Oct 26 14:38:19] ERROR[2992]: tcptls.c:609 handle_tcptls_connection:
Problem setting up ssl connection: error:14094418:SSL
routines:SSL3_READ_BYTES:tlsv1 alert unknown ca
[Oct 26 14:38:19]
2014 Aug 13
0
SRTP only from asterisk to extention possible
Hello,
trying to implement srtp with already working tls i somehow stuck with
srtp. If the extension has successfully registered a call from asterisk
to that extension works fine. But the other way round nothing happens.
[Aug 13 14:54:16] WARNING[31053]: chan_sip.c:3906 __sip_xmit: sip_xmit
of 0x7fc8880467e0 (len 609) to 123.456.789:36785 returned -2: Success
[Aug 13 14:54:20] NOTICE[31053]:
2019 Jul 05
2
unsolved: Re: solved: how to create a working certificate for using TLS?
On 7/5/19 9:32 PM, John Runyon wrote:
> On Fri, 5 Jul 2019 at 14:28, hw <hw at gc-24.de <mailto:hw at gc-24.de>> wrote:
>
> I thought about that and checked the configuration I've been using to
> create the certificate, and I can't see anywhere that it would expire
> earlier than after 3650 days. Is there another way to check this?
>
>
2019 Jun 26
2
how to create a working certificate for using TLS?
Hi,
how can I create a self-signed certificate for asterisk which
actually works? I had one that did work, and yesterday it suddenly
quit working for no reason. I had to spend hours to create another
one that would finally work, and it suddenly quit working today.
The certificate verifies just fine with
openssl verify -verbose -CAfile ca.crt asterisk.pem
Yet asterisk keeps saying:
2014 Mar 24
1
Problem with TLS/SRTP with Asterisk 11.8.1
Hi,
I followed the TLS/SRTP tutorial on the wiki [0] using Asterisk 11.8.1
on CentOS 6.5 x86_64 and CSipSimple on a Nexus with Android 4.4.x local
wifi. The phone seems to register but directly after that things fall
apart (turning SELinux off made no difference):
*CLI> -- Registered SIP 'encrypted' at 10.0.0.137:58079
> Saved useragent
2015 Mar 03
2
TLS, SRTP, Asterisk11 and Snom870s
On Tue, March 3, 2015 13:37, James Cloos wrote:
>>>>>> "JBB" == James B Byrne <byrnejb at harte-lyne.ca> writes:
>
> JBB> tcpenable=yes
> JBB> tlsenable=yes
> JBB> tlscertfile=/etc/pki/asterisk/ca.harte-lyne.hamilton.asterisk.crt
> JBB> tlscafile=/etc/pki/tls/certs/ca-bundle.crt
> JBB> tlsdontverifyserver=yes
> JBB>
2013 Mar 31
0
SRTP woes
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi,
I'm running Asterisk 11.3.0 on wheezy.
I'm trying to do TLS +SRTP with blink SIP clients as shown here
https://wiki.asterisk.org/wiki/display/AST/Secure+Calling+Tutorial.
TLS is fine and I can call between clients. SRTP is a different matter,
my SIP clients return: SIP 488 "Not acceptable Here"
I'm really stumped on this
2014 May 09
1
deactivate SRTP in asterisk 11
Hi all,
i try to deactivate SRTP in asterisk 11.
In sip.conf:
tlsenable=no
encryption=no
transport=udp
srtpcapable=no
but when I try to make a call comes following message:
[May 9 15:19:03] DEBUG[24745][C-00000086]: sip/sdp_crypto.c:285 sdp_crypto_process: Accepting crypto tag 1
[May 9 15:19:03] DEBUG[24745][C-00000086]: sip/sdp_crypto.c:310 sdp_crypto_offer: Crypto line: a=crypto:1
2015 Mar 03
0
TLS, SRTP, Asterisk11 and Snom870s
>>>>> "JBB" == James B Byrne <byrnejb at harte-lyne.ca> writes:
JBB> tcpenable=yes
JBB> tlsenable=yes
JBB> tlscertfile=/etc/pki/asterisk/ca.harte-lyne.hamilton.asterisk.crt
JBB> tlscafile=/etc/pki/tls/certs/ca-bundle.crt
JBB> tlsdontverifyserver=yes
JBB> tlscipher=ALL
JBB> tlsclientmethod=tlsv1
You are missing the tls key.
The config name is
2015 Mar 03
0
TLS, SRTP, Asterisk11 and Snom870s
Am 03.03.2015 um 18:16 schrieb James B. Byrne:
> CentOS-6.5 (FreePBX-2.6)
> Asterisk-11.14.2 (FreePBX)
> snom870-SIP 8.7.3.25.5
>
> I am having a very difficult time attempting to get TLS and SRTP
> working with Asterisk and anything else. At the moment I am trying to
> get TLS functioning with our Snom870 desk-sets. And I am not having
> much luck.
>
> Since this
2015 Mar 03
6
TLS, SRTP, Asterisk11 and Snom870s
CentOS-6.5 (FreePBX-2.6)
Asterisk-11.14.2 (FreePBX)
snom870-SIP 8.7.3.25.5
I am having a very difficult time attempting to get TLS and SRTP
working with Asterisk and anything else. At the moment I am trying to
get TLS functioning with our Snom870 desk-sets. And I am not having
much luck.
Since this is an extraordinarily (to me) Byzantine environemnt I am
going to ask if any of you have gotten
2016 Aug 24
2
TLS problem
Hi,
I?m trying to get TLS to work with asterisk and client phones,
and all I?m getting from asterisk is
[Aug 23 11:46:42] WARNING[1170]: tcptls.c:673 handle_tcptls_connection: FILE * open failed!
== Problem setting up ssl connection: error:00000000:lib(0):func(0):reason(0)
[Aug 23 11:46:44] WARNING[1171]: tcptls.c:673 handle_tcptls_connection: FILE * open failed!
when clients try to
2016 May 04
2
Asterisk 1.8 secure SIP session only
Hello, I am trying to secure SIP session with TLS on Asterisk Server 1.8. I
keep getter an error,
== Problem setting up ssl connection: error:14094418:SSL
routines:SSL3_READ_BYTES:tlsv1 alert unknown ca
[2016-05-04 09:31:17] WARNING[30032]: tcptls.c:254 handle_tcptls_connection:
FILE * open failed!
I tried both signed and self-signed cert to no avail.
Here is my Configuration:
Sip.conf
2016 Aug 26
3
TLS problem
Well, what immediately stands out is:
"FILE * open failed!"
Have you triple checked that the full filepath is correct and that the
user that Asterisk is running as has full permissions to access your
valid certificate file?
I have it working with microsip and a free TLS cert from LetsEncrypt.
When I get to the PC with that on, I can write up what settings I've
got if that helps?
2014 Nov 02
1
sslv3 alert handshake failure error
Hi All,
I am using "asterisk-11.12.0" version and I am trying to setup secure call
(TLS + SRTP) between two extensions and while making a call, I got
following error
*CLI> == Using SIP RTP CoS mark 5
-- Executing [6004 at from-office:1] Dial("SIP/6003-00000000",
"SIP/6004,20") in new stack
== Using SIP RTP CoS mark 5
-- Called SIP/6004
SSL certificate
2014 Jun 08
1
iPhone TLS reg problem: FILE * open failed
Hi,
I'm trying to setup an iPhone 4S (iOS 7.1.1) with Linphone to register
with TLS to an Asterisk 11.10.0 box. The registration fails and I see
this in the Asterisk console:
== Problem setting up ssl connection: error:00000000:
lib(0):func(0):reason(0)
[Jun 8 15:33:39] WARNING[8555]: tcptls.c:274 handle_tcptls_connection:
FILE * open failed!
Anyone know what that error means? The
2015 Jun 05
2
Problem with SIP-TLS
Hi list!
I'm trying to configure my Asterisk to accept SIP-TLS connections, too.
I followed this HowTo:
http://remiphilippe.fr/sips-on-asterisk-sip-security-with-tls/
But as soon I try to connect to my Asterisk using SIP-TLS I get on
Asterisk-CLI:
== Problem setting up ssl connection:
error:140760FC:lib(20):func(118):reason(252) [Jun 5 20:16:25]
WARNING[20826]: tcptls.c:669
2019 Jul 05
3
unsolved: Re: solved: how to create a working certificate for using TLS?
On 7/5/19 9:22 PM, Steve Murphy wrote:
> hw--
>
> I see this kind of behavior when the certificate expires... you've
> probably checked this, but sometimes we
> miss little details like that.
I thought about that and checked the configuration I've been using to
create the certificate, and I can't see anywhere that it would expire
earlier than after 3650 days. Is
2018 Feb 08
3
pjsip trunking configuration issue
Greetings !
My goal is to get Twilio trunking working, and with TLS/SRTP.
I see this concerning message in my log:
[Feb 7 16:50:26] ERROR[20596] res_sorcery_config.c: Could not create an object of type 'endpoint' with id ?twilio' from configuration file ?pjsip.conf?
Thus, ?pjsip show endpoints? does not show the endpoint for the Twilio trunk.
Hoping for a sanity check of