Failed to retrieve certificate for caller ID

[oscar.waloszczyk]

Hi,

I have a problem, when issuing a call with an explicit SIP URI, the following errors appear on the console;

[May 30 18:25:22] ERROR[1853] res_stir_shaken.c: Failed to retrieve certificate for caller ID ‘xxxx’
[May 30 18:25:22] ERROR[1853] res_pjsip_stir_shaken.c: Failed to sign STIR/SHAKEN payload
[May 31 16:37:55] ERROR[2038][C-0000001b] res_pjsip_header_funcs.c: This function requires a PJSIP channel.
[May 31 16:37:55] ERROR[1853] res_stir_shaken.c: Failed to retrieve certificate for caller ID ‘xxxx’
[May 31 16:37:55] ERROR[1853] res_pjsip_stir_shaken.c: Failed to sign STIR/SHAKEN payload

This is the only information i see in console.
I have tried with the following versio; 18.12, certified/18.9, 18.10

this would be my dialplan;

[function_outbound_call]
exten => _X.,1,NoOp(Dialing via ip)
same => n,Set(PJSIP_HEADER(add,X-did)=XXXXXX)
same => n,ExecIf($[!${EXISTS(${ChID})}]?Set(__ChID=${SHELL(/data/uuid)}))
same => n,Dial(PJSIP/default_endpoint/sip:${EXTEN}@10.244.120.237:3945,21,rRtTU(ANSWER^${UNIQUEID})b(predial^${EXTEN}^1))
same => n,Hangup()

Could you give me a hand with this?
thanks in advance

[jcolp]

What is the actual configuration? Are you trying to do STIR/SHAKEN? There was a release that had an issue where it would be attempted, but we released fixed versions[1] and there have been no subsequent reports. If you believe you are using other versions, you should double check with “core show version”.

[1] [ASTERISK-30024] Failed to sign STIR/SHAKEN payload with functionality not enabled - Digium/Asterisk JIRA

[david551]

That is not your complete dialplan. At the very least you are missing ANSWER and predial.

PJSIP_HEADER add needs to be run on an outgoing chan_pjsip channel, you are running it on an incoming channel of unknown technology.

What is the caller ID?

What is in your stir_shaken.conf?

To be useful the logging needs to be taken from the full log with a verbosity of at least 3, although 5 is commonly used.

You should not be using a certified version unless you have a support contract, and you should not be asking here if you do have one.

[oscar.waloszczyk]

hi.
I have finally done an unload of the module, and it already works for me. And delegate this to my sip proxy.
I’ll do some research on this later.

@david551 I appreciate the explanation of the “certified” version.

thank you very much for your clarifications.
Happy weekend!