[OpenSIPS-Users] phone not getting regsitered using TLS

ideanet help ideanethelp at gmail.com
Fri Jul 15 13:20:15 UTC 2022


Hi experts,

One of my phones (SNOM M9) is not able to register using TLS.

Here are the logs from opensips and ssldump. Maybe someone can pinpoint the
issue?


Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10604]
DBG:core:handle_new_connect: new connection: 0x7f16d2ba3bd8 80 flags: 001c
Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10604] DBG:core:send2worker: to
tcp worker 0 (0), 0x7f16d2ba3bd8 rw 1
Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598]
DBG:proto_tls:proto_tls_conn_init: looking up TLS server domain
[xx.xx.xx.xx:5061]
Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598]
DBG:tls_mgm:tls_find_server_domain: found TLS server domain:
sip.tls.mysipdomain.com
Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598]
DBG:tls_openssl:openssl_tls_conn_init: Creating a whole new ssl connection
Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598]
DBG:tls_openssl:openssl_tls_conn_init: Setting in ACCEPT mode (server)
Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] DBG:core:handle_io: We
have received conn 0x7f16d2ba3bd8 with rw 1 on fd 4
Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598] DBG:core:io_watch_add:
[TCP_worker] io_watch_add op (4 on 74) (0x8f91e0, 4, 19, 0x7f16d2ba3bd8,1),
fd_no=4/83886
Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598]
DBG:proto_tls:tls_read_req: Using the global ( per process ) buff
Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598]
DBG:tls_openssl:openssl_tls_update_fd: New fd is 4
Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598]
DBG:proto_tls:tls_read_req: SSL accept/connect still pending!
Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598]
DBG:proto_tls:tls_read_req: Using the global ( per process ) buff
Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598]
DBG:tls_openssl:openssl_tls_update_fd: New fd is 4
Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598]
ERROR:tls_openssl:openssl_tls_accept: SSL_ERROR_SYSCALL err=Success(0)
Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598]
ERROR:tls_openssl:openssl_tls_accept: New TLS connection from
myphoneIP.xx.xx:2987 failed to accept
Jul 15 13:02:12 opensips: Jul 15 13:02:12 [10598]
ERROR:proto_tls:tls_read_req: failed to do pre-tls handshake!

_________________________

ssldump logs:


New TCP connection #3: myphoneIP.xx.xx(2082) <-> sip.tls.mysipdomain.com
(5061)
3 1  0.0280 (0.0280)  C>S  Handshake
      ClientHello
        Version 3.1
        cipher suites
        TLS_RSA_WITH_RC4_128_MD5
        TLS_RSA_WITH_RC4_128_SHA
        compression methods
                  NULL
        extensions
          server_name
              host_name: sip.tls.mysipdomain.com
        ja3 string: 769,4-5,0,,
        ja3 fingerprint: 8305e724a7c9f16b323465d289bc54a1
3 2  0.0353 (0.0072)  S>C  Handshake
      ServerHello
        Version 3.1
        session_id[0]=

        cipherSuite         TLS_RSA_WITH_RC4_128_SHA
        compressionMethod                   NULL
        extensions
          server_name
        ja3s string: 769,5,0
        ja3s fingerprint: 99f916287a3ac1de732520956ab94b77
3 3  0.0353 (0.0000)  S>C  Handshake
      Certificate
3 4  0.0353 (0.0000)  S>C  Handshake
      ServerHelloDone
3    0.0653 (0.0299)  C>S  TCP FIN
3    0.0656 (0.0003)  S>C  TCP FIN
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20220716/156f26bd/attachment.html>


More information about the Users mailing list