Re: [SR-Users] Kamailio TLS with intermediate CA certificates

2012-01-29 Thread Olle E. Johansson
29 jan 2012 kl. 22:27 skrev Daniel Pocock: > > > On 29/01/12 21:47, Iñaki Baz Castillo wrote: >> 2012/1/29 Daniel Pocock : >>> It's a little bit different in Apache, where the user specifies a file >>> containing intermediate certs - many of the CAs give instructions for >>> adding that file in

Re: [SR-Users] Registrar ignoring socket

2012-01-29 Thread Spencer Thomason
Hi Andreas, Everything is working correctly. I looked into it and it seems the socket address is simply ignored in the event that it doesn't match a local address. As I don't have clients behind NAT this is not causing any problems. Thanks for your confirmation. On Jan 29, 2012, at 3:46 PM,

Re: [SR-Users] Kamailio Redundancy examples/pointers required

2012-01-29 Thread Sammy Govind
Hi again, Though I've made redundant kamailio work from your suggestions and recent threads on same topic. Thanks guys. This is how I made kamailio redundant servers work, since I had two servers both using HeartBeat i.e a floating IP in between the Server A/ Server B. As mentioned by you guys; i

[SR-Users] save a Q850 cause reason from a reply

2012-01-29 Thread Uri Shacked
Hi, the gateway i use for sending call to pstn has an option of sending a header with Q850 reason. it looks like this: " Reason: Q.850;cause=17;text="UserBusy" Reason Protocols: Q.850 Cause: 17(0x11)[User busy] " now, i need to save the reason for reports. the reason chang

Re: [SR-Users] Registrar ignoring socket

2012-01-29 Thread Andreas Granig
Hi, On 01/28/2012 09:51 PM, Spencer Thomason wrote: > user on the proxys I receive an error message that the socket is unknown > and ignored (obviously because its on another machine). Is this just a > warning message or are there any consequences to doing it this way? Is > my topology flawed an

Re: [SR-Users] Kamailio TLS with intermediate CA certificates

2012-01-29 Thread Daniel Pocock
On 29/01/12 21:47, Iñaki Baz Castillo wrote: > 2012/1/29 Daniel Pocock : >> It's a little bit different in Apache, where the user specifies a file >> containing intermediate certs - many of the CAs give instructions for >> adding that file in Apache, but they make no mention of >> OpenSSL/Kamaili

[SR-Users] alias problem

2012-01-29 Thread Stoyan Mihaylov
My whole configuration is: [Sip clients] < = > Kamailio 3.2 <=> Asterisk servers (behind Kamailio) Asterisk servers have only local IP addresses, and I use t_relay instead of forward. Kamailio runs on same server as rtpproxy. Everything is fine if clients connect to Kamailio with its IP address - g

Re: [SR-Users] Kamailio TLS with intermediate CA certificates

2012-01-29 Thread Iñaki Baz Castillo
2012/1/29 Daniel Pocock : > It's a little bit different in Apache, where the user specifies a file > containing intermediate certs - many of the CAs give instructions for > adding that file in Apache, but they make no mention of > OpenSSL/Kamailio/concatenating everything, so I imagine people will

Re: [SR-Users] Registrar ignoring socket

2012-01-29 Thread Sammy Govind
Hi, Can you copy/paste the error message here. I've recently made kamailio work with floating IP(Heartbeat) and I was having similar issue but then I resolved due to help from community memebrs here. This is how I made kamailio work with floating IP. in */etc/sysctl.conf* file insert this line *ne

Re: [SR-Users] Kamailio TLS with intermediate CA certificates

2012-01-29 Thread Daniel Pocock
>> Construct the PEM file in this exact order: >> >> cat server.example.com.pem > chain-server.example.com.pem >> cat inter2.pem >> chain-server.example.com.pem >> cat inter1.pem >> chain-server.example.com.pem >> >> and then, in tls.cfg: >> >> certificate=chain-server.example.com.pem >> > > This

Re: [SR-Users] Kamailio TLS with intermediate CA certificates

2012-01-29 Thread Olle E. Johansson
29 jan 2012 kl. 13:11 skrev Daniel Pocock: > > > I found that my TLS client was not happy because my server cert is > signed by an intermediate root. > > A quick search in Google found other people mentioning the same problem, > but no solution or documentation. > > I've had a quick look in t

[SR-Users] Kamailio TLS with intermediate CA certificates

2012-01-29 Thread Daniel Pocock
I found that my TLS client was not happy because my server cert is signed by an intermediate root. A quick search in Google found other people mentioning the same problem, but no solution or documentation. I've had a quick look in the Kamailio source and I notice it is using the call:

[SR-Users] Kamailio for NATted users with ICE and TURN

2012-01-29 Thread Daniel Pocock
There are now a number of TURN implementations available: http://www.resiprocate.org/ReTurn_Overview http://turnserver.sourceforge.net/ and for many purposes TURN relays and ICE are much better than relying on NAT helper and rtpproxy When clients use ICE: - the client gets upset if Kamailio m