Sslv3 alert bad record mac - PJSIP

Hai all,

I have an asterisk server installed with the version Asterisk 16.20.0 with pjsip PJPROJECT version currently running against: 2.10. I have the PJSIP users created and registered with doaminame using TLS. Presently I have observed an issue where my all PJSIP endpoint goes unreachable.

As checked this I have noticed whenever all endpoints go unreachable before that I get below the warning in asterisk logs

[Jul 16 08:23:42] WARNING[11334] pjproject: SSL SSL_ERROR_SSL (Read): Level: 0 err: <336151548> len: 65535 peer: 100.101.12.13:32902

[Jul 16 08:23:42] VERBOSE[30847] res_pjsip_registrar.c: Removed contact ‘sip:146761@100.101.12.13:32902;transport=TLS;x-ast-orig-host=11.194.6.266:5060’ from AOR ‘146761’ due to shutdown
[Jul 16 08:23:42] VERBOSE[31117] res_pjsip/pjsip_options.c: Contact 146761/sip:146761@100.101.12.13:32902;transport=TLS;x-ast-orig-host=11.194.6.266:5060 has been deleted
[Jul 16 08:23:42] VERBOSE[31117] res_pjsip/pjsip_configuration.c: Endpoint 146761 is now Unreachable
[Jul 16 08:23:42] VERBOSE[23282] res_pjsip_registrar.c: Removed contact ‘sip:146666@100.101.12.13:32902;transport=TLS;x-ast-orig-host=10.193.3.228:5060’ from AOR ‘146666’ due to shutdown
[Jul 16 08:23:42] VERBOSE[5384] res_pjsip_registrar.c: Removed contact ‘sip:166565@100.101.12.13:32902;transport=TLS;x-ast-orig-host=11.211.111.22:5060’ from AOR ‘166565’ due to shutdown
[Jul 16 08:23:42] VERBOSE[31117] res_pjsip/pjsip_options.c: Contact 146666/sip:146666@100.101.12.13:32902;transport=TLS;x-ast-orig-host=10.193.3.228:5060 has been deleted
[Jul 16 08:23:42] VERBOSE[31117] res_pjsip/pjsip_configuration.c: Endpoint 146666 is now Unreachable

I have checked the network end of the pjsip endpoints but there was no issue found at the network level also below is a sample configuration for reference.

[transport-tls]
type=transport
protocol=tls
bind=0.0.0.0:5061
external_media_address=10.596.123
external_signaling_address=10.596.123
cert_file=/etc/asterisk/ssl2.crt
priv_key_file=/etc/asterisk/ssl.key
ca_list_file=/etc/asterisk/ssl.crt
ca_list_path=/etc/asterisk
method=sslv23

[123456]
type=aor
max_contacts=3
remove_existing=yes

[123456]
type=auth
auth_type=userpass
username=123456
password=123456

[123456]
type=endpoint
aors=123456
auth=123456
context=from-server
disallow=all
allow=alaw
dtmf_mode=rfc4733
media_encryption=sdes
rewrite_contact=yes ; necessary if endpoint does not know/register public ip:port
ice_support=yes
direct_media=no
rtp_symmetric=yes
rtp_symmetric=yes

I have also checked the SSL certificate and all seems fine this issue is happening intermittently like 3 times a day.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.