Hi all,
I have encourage a problem about TLS here. But when I switch to UDP of TCP it works.
the case is :
server is asterisk 11.6
client is linphone running on IOS.
I have setup the TLS related configuration in sip.conf and use the a signed certificate.
the SSL handshake is finished and the client change the state to trying.
after this, the registration is failed.
but when I try to register on the sip server supported by the linphone via TLS , it works , registration , audio , everything is fine
the log on the client side shows error in ssl_read() after sending out a ‘trying’ packet.
and ‘Receive error on channel’
and on the server side, it shows
[Dec 4 12:44:17] ERROR[15565]: tcptls.c:451 ast_tcptls_client_start: Unable to connect SIP socket to 202.166.80.6:59934: Connection timed out
[Dec 4 12:44:29] WARNING[14879]: chan_sip.c:3905 __sip_xmit: sip_xmit of 0x7f1604035ad0 (len 587) to 202.166.80.6:42901 returned -2: Success
[Dec 4 12:44:45] ERROR[15567]: tcptls.c:451 ast_tcptls_client_start: Unable to connect SIP socket to 119.56.124.130:3355: Connection timed out
[Dec 4 12:45:19] WARNING[14879]: chan_sip.c:3905 __sip_xmit: sip_xmit of 0x7f1604035ad0 (len 587) to 202.166.80.6:42901 returned -2: Success
[Dec 4 12:45:27] ERROR[15569]: tcptls.c:451 ast_tcptls_client_start: Unable to connect SIP socket to 202.166.80.6:59934: Connection timed out
[Dec 4 12:45:55] ERROR[15571]: tcptls.c:451 ast_tcptls_client_start: Unable to connect SIP socket to 119.56.124.130:3355: Connection timed out
[Dec 4 12:46:02] ERROR[15577]: tcptls.c:451 ast_tcptls_client_start: Unable to connect SIP socket to 119.56.124.130:3355: No route to host
[Dec 4 12:46:09] WARNING[14879]: chan_sip.c:3905 __sip_xmit: sip_xmit of 0x7f1604035ad0 (len 587) to 202.166.80.6:42901 returned -2: Success
[Dec 4 12:46:37] ERROR[15575]: tcptls.c:451 ast_tcptls_client_start: Unable to connect SIP socket to 202.166.80.6:59934: Connection timed out
[Dec 4 12:47:19] ERROR[15579]: tcptls.c:451 ast_tcptls_client_start: Unable to connect SIP socket to 119.56.124.130:3355: Connection timed out
it has different behavior for wifi and 3G , 202.166.80.6 is the outbound ip for my wifi ,which only shows timed out , but for the 3G , ‘119.56.124.130’ it aslo show no route to host.
my sip.conf
tcpenable=yes
tcpbindaddr=0.0.0.0
tlsenable=yes
tlsbindaddr=0.0.0.0
tlscertfile=/etc/asterisk/keys/asterisk.pem
tlscafile=/etc/asterisk/keys/ca.crt
tlscipher=ALL
tlsclientmethod=tlsv1 ;none of the others seem to work with Blink as the client
tlsdontverifyserver=yes
directmedia=nonat
[100]
type=friend
secret=100
qualify=2000
host=dynamic
mailbox=100@default
transport=tls,tcp,udp
I googleing around for 2 days but didn’t find any solution.
is there any suggestion?
Thanks…