[Users] openser with TLS

[Bogdan-Andrei Iancu]

Hi Joao,

try yo start openser in foreground - set fork=no and log_stderror=yes in 
your config. Maybe you will get a hint.

regards,
bogdan

Joao Pereira wrote:

> Yes, I did "ps fax" and there was no OpenSER.
> How can I find the error? Even with a higher debug level, there are no 
> errors in the stdout:
> (debug level = 8)
>
> Listening on
> Aliases:
>             *: mex.fccn.pt:*
>             *: XXX.XXX.XXX.XXX:*
>
> 0(22568) fm_malloc_init: F_OPTIMIZE=16384, /ROUNDTO=2048
> 0(22568) fm_malloc_init: F_HASH_SIZE=2067, fm_block size=16548
> 0(22568) fm_malloc_init(0xf4eb1000, 33554432), start=0xf4eb1000
> 0(22568) shm_mem_init: success
> 0(0) core dump limits set to 4294967295
> 0(0) DEBUG: init_mod: postgres
> postgres - initializing
> 0(0) DEBUG: init_mod: sl_module
> stateless - initializing
> 0(0) DEBUG: register_fifo_cmd: new command (sl_stats) registered
> 0(0) unixsock_register_cmd: New command (sl_stats) registered
> 0(0) DEBUG: MD5 calculated: 1d0376a2244771bba12e9da5f03652d9
> 0(0) DEBUG: init_mod: tm
> 0(0) TM - (size of cell=2832, sip_msg=768) initializing...
> 0(0) Call-ID initialization: '2ffddfe3'
> 0(0) DEBUG: register_fifo_cmd: new command (t_uac_dlg) registered
> 0(0) DEBUG: register_fifo_cmd: new command (t_uac_cancel) registered
> 0(0) DEBUG: register_fifo_cmd: new command (t_hash) registered
> 0(0) DEBUG: register_fifo_cmd: new command (t_reply) registered
> 0(0) unixsock_register_cmd: New command (t_uac_dlg) registered
> 0(0) unixsock_register_cmd: New command (t_uac_cancel) registered
> 0(0) unixsock_register_cmd: New command (t_hash) registered
> 0(0) unixsock_register_cmd: New command (t_reply) registered
> [root at mex openser-1.0.1-tls]#  0(0) DEBUG: lock_initialize: lock 
> initialization started
> 0(0) DEBUG: register_fifo_cmd: new command (t_stats) registered
> 0(0) unixsock_register_cmd: New command (t_stats) registered
>
>
> Could be a problem in the certificates?
> Joao Pereira
>
> Daniel-Constantin Mierla wrote:
>
>> Hello,
>>
>> did you check with "ps auxw | grep openser"? Wasn't there any openser 
>> process running. From the logs looks like openser started ok (tm 
>> module initialized succesfully - is it tm you last module in the 
>> loadmodule list?).
>>
>> Cheers,
>> Daniel
>>
>>
>> On 03/22/06 14:21, Joao Pereira wrote:
>>
>>> Hello to all
>>> Im trying to put OpenSER to work with TLS.
>>> I created the certificates, and configured openser.cfg. ("openser 
>>> -c" shows no errors)
>>> But when I start OpenSER, there are no errors, but the server 
>>> doesn't start:
>>> It says this (with debug level 4) :
>>>
>>> Listening on
>>> Aliases:
>>>             *: mex.fccn.pt:*
>>>             *: XXX.XXX.XXX.XXX:*
>>>
>>> 0(22549) fm_malloc_init: F_OPTIMIZE=16384, /ROUNDTO=2048
>>> 0(22549) fm_malloc_init: F_HASH_SIZE=2067, fm_block size=16548
>>> 0(22549) fm_malloc_init(0xf4eb1000, 33554432), start=0xf4eb1000
>>> 0(22549) shm_mem_init: success
>>> 0(0) core dump limits set to 4294967295
>>> 0(0) DEBUG: init_mod: postgres
>>> postgres - initializing
>>> 0(0) DEBUG: init_mod: sl_module
>>> stateless - initializing
>>> 0(0) DEBUG: register_fifo_cmd: new command (sl_stats) registered
>>> 0(0) unixsock_register_cmd: New command (sl_stats) registered
>>> 0(0) DEBUG: MD5 calculated: 1d0376a2244771bba12e9da5f03652d9
>>> 0(0) DEBUG: init_mod: tm
>>> 0(0) TM - (size of cell=2832, sip_msg=768) initializing...
>>> 0(0) Call-ID initialization: '6efffbed'
>>> 0(0) DEBUG: register_fifo_cmd: new command (t_uac_dlg) registered
>>> 0(0) DEBUG: register_fifo_cmd: new command (t_uac_cancel) registered
>>> 0(0) DEBUG: register_fifo_cmd: new command (t_hash) registered
>>> 0(0) DEBUG: register_fifo_cmd: new command (t_reply) registered
>>> 0(0) unixsock_register_cmd: New command (t_uac_dlg) registered
>>> 0(0) unixsock_register_cmd: New command (t_uac_cancel) registered
>>> 0(0) unixsock_register_cmd: New command (t_hash) registered
>>> 0(0) unixsock_register_cmd: New command (t_reply) registered
>>> [root at mex openser-1.0.1-tls]#  0(0) DEBUG: lock_initialize: lock 
>>> initialization started
>>> 0(0) DEBUG: register_fifo_cmd: new command (t_stats) registered
>>> 0(0) unixsock_register_cmd: New command (t_stats) registered
>>>
>>>
>>> and nothing happens... OpenSER isnt runnig :(
>>> -------------------------------------------------------------------------------------------------------------- 
>>>
>>>
>>> this is a part of my openser.cfg:
>>>
>>> listen = tls:XXX.XXX.XXX.XXX
>>>
>>> tls_port_no = 5062
>>> tls_method=SSLv23
>>>
>>> tls_certificate="/services/openser/openser-1.0.1-tls/tls/tools/rootCA/cacert.pem" 
>>>
>>> tls_private_key="/services/openser/openser-1.0.1-tls/tls/tools/rootCA/private/cakey.pem" 
>>>
>>> tls_ca_list="/services/openser/openser-1.0.1-tls/tls/tools/rootCA/certs/01.pem" 
>>>
>>>
>>> tls_ciphers_list="NULL-SHA:NULL-MD5:AES256-SHA:AES128-SHA"
>>>
>>> tls_verify = 1
>>> tls_require_certificate = 1
>>> tls_handshake_timeout=119    # number of seconds
>>> tls_send_timeout=121         # number of seconds
>>>
>>>
>>> If you know whats the problem, please tell me :)
>>> Thanks
>>> Joao Pereira
>>>
>>> _______________________________________________
>>> Users mailing list
>>> Users at openser.org
>>> http://openser.org/cgi-bin/mailman/listinfo/users
>>>
>
>
> _______________________________________________
> Users mailing list
> Users at openser.org
> http://openser.org/cgi-bin/mailman/listinfo/users
>