[pjsip] Register failed in symbian using TLS transport

Vasyl Strutynskyy vasyl.strutynskyy at gmail.com
Thu Aug 6 16:10:44 EDT 2009


Unfortunately, we still can't successfully provide Registration over TLS on
Symbain.

1. *SSL_Connect() function returns some error -1*. As previously I
described.

2. Plus we have new results: on the server side we observe an incoming TLS
connection on port 5061 which is accepted, and the symbian client on the
phone immediately closes the connection without starting the TLS handshake.

So there are some reasons on client side which don't allow to keep TCP
connection which is needed for TLS. So if TLS isn't keep alive we can't
provide nay SIP messages.

Still working with this problem.

*Vasyl

2009/8/6 nir elkayam <nir.elkayam at gmail.com>

> hi
>
> can u update on any succsess running TLS on symbian?
>
> thanks,
>
>
>
> On Wed, Aug 5, 2009 at 10:03 PM, Klaus Darilion <
> klaus.mailinglists at pernau.at> wrote:
>
>> Vasyl Strutynskyy wrote:
>>
>>> Klaus,
>>>
>>> I have tried create just TLS transport calling in ua.cpp
>>> status = pjsua_transport_create(PJSIP_TRANSPORT_TLS, &tcfg, &tid);
>>> but still the same problem.
>>>
>>> UDP + TLS means that I called
>>> status = pjsua_transport_create(PJSIP_TRANSPORT_UDP, &tcfg, &tid);
>>> status = pjsua_transport_create(PJSIP_TRANSPORT_TLS, &tcfg, &tid);
>>> because thought one TLS isn't enough.
>>>
>>
>> If you only want to use TLS there is no need to create a UDP transport.
>> TLS transport is enough.
>>
>>  Where exactly should I add "transport=tls" in ua.cpp ?
>>>
>>
>> I do not know ua.cpp. A solution would be to define a proxy with URI sip:
>> yourdomain.com;transport=tls
>>
>>  I'm trying TLS only with Symbian because I need only for Symbian.
>>>
>>
>> Unfortunately I have never tried Symbian yet thus I do not know it it
>> should work.
>>
>> Maybe this can help you:
>> http://discussion.forum.nokia.com/forum/showthread.php?t=93263
>>
>> regards
>> klaus
>>
>>
>>> Best Regards
>>> *Vasyl
>>>
>>> 2009/8/5 Klaus Darilion <klaus.mailinglists at pernau.at <mailto:
>>> klaus.mailinglists at pernau.at>>
>>>
>>>
>>>
>>>    Vasyl Strutynskyy schrieb:
>>>
>>>        The main point that error happens inside the client without even
>>>        sending any data.
>>>
>>>
>>>        Please read next statements in details to see what we are doing
>>>
>>>          1. We use PJSIP code gotten from SVN trunk approx one month ago.
>>>          2. We use symbian console application to provide testing (path:
>>>
>>>             pjproject\pjsip-apps\src\symbian_ua\).
>>>                1. Please be informed that we can successfully register
>>> and
>>>
>>>                   make outgoing call using this symbian console app
>>>        over UDP.
>>>                   We made some code changes for this purpose, because by
>>>                   default it didn't want to call.
>>>          3. Then we built PJSIP code with TLS support like described here
>>>
>>>             (http://trac.pjsip.org/repos/wiki/TLS). Additionaly
>>>        installed Open
>>>             C plugin for Symban with openssl library for that.
>>>          4. We tried to REGISTER to our proxy server which supports
>>>        TLS. For
>>>
>>>             that we changed code in *ua.cpp* file according to TLS
>>>        needs (add
>>>             prefixes as "sips:") plus created TLS transport. Also we
>>> tried
>>>             different combinations: TLS + TCP, TLS + UDP, just TLS, but
>>> the
>>>             same result no data sending to the server, everything happens
>>>             inside the client.
>>>
>>>
>>>    Actually sips is not necessary - sip is fine too. Just add the
>>>    transport=tls parameter to the request URI.
>>>
>>>    How can you try TLS+UDP. If you create the transport you can only
>>>    specify either TLS or UDP. If you use TLS, this is always TLS over
>>> TCP.
>>>
>>>    Have you tried using TLS without symbian?
>>>
>>>    regards
>>>    klaus
>>>
>>>
>>>                 // add TLS
>>>                 pjsua_transport_config_default(&tcfg);
>>>                 status = pjsua_transport_create(PJSIP_TRANSPORT_TLS,
>>>        &tcfg, &tid);
>>>                 if (status != PJ_SUCCESS) {
>>>                     pjsua_perror(THIS_FILE, "Error creating TLS
>>> transport",
>>>             status);
>>>                     pjsua_destroy();
>>>                     return status;
>>>                 }
>>>
>>>        Waiting for your response/suggestions.
>>>
>>>        Thanks in advance
>>>        *Vasyl
>>>
>>>
>>>        2009/8/5 Klaus Darilion <klaus.mailinglists at pernau.at
>>>        <mailto:klaus.mailinglists at pernau.at>
>>>        <mailto:klaus.mailinglists at pernau.at
>>>        <mailto:klaus.mailinglists at pernau.at>>>
>>>
>>>
>>>           I would try to debug the problem why the transport was
>>> destroyed.
>>>           Verify if TCP connection is established or not, if
>>>        ServerHello and
>>>           Cleint Hello are exchanged, or if the error happens inside the
>>>           client without even sending any data
>>>
>>>           klaus
>>>
>>>           Vasyl Strutynskyy schrieb:
>>>
>>>               Hi,
>>>
>>>               I have faced with the same problem, SSL_Connect() returns
>>> -1,
>>>               did you resolve this issue?
>>>
>>>               I have used console symbian app. Client logs below:
>>>
>>>                22:46:30.941    pjsua_acc.c  Account
>>>        sips:102 at morrigan.ua <sips%3A102 at morrigan.ua> <mailto:
>>> sips%3A102 at morrigan.ua <sips%253A102 at morrigan.ua>>
>>>               <mailto:sips%3A102 at morrigan.ua <sips%253A102 at morrigan.ua>
>>>        <mailto:sips%253A102 at morrigan.ua <sips%25253A102 at morrigan.ua>>>
>>>        <mailto:sips%3A102 at morrigan.ua <sips%253A102 at morrigan.ua><mailto:
>>> sips%253A102 at morrigan.ua <sips%25253A102 at morrigan.ua>>
>>>               <mailto:sips%253A102 at morrigan.ua<sips%25253A102 at morrigan.ua>
>>>        <mailto:sips%25253A102 at morrigan.ua <sips%2525253A102 at morrigan.ua>>>>
>>> added with id 1
>>>
>>>
>>>                22:46:30.950   tlsc0x727fbc  TLS client transport created
>>>                22:46:30.989   tlsc0x727fbc  TLS transport destroyed with
>>>               reason 171168: Unknown error when performing SSL connect()
>>>               (PJSIP_TLS_ECONNECT)
>>>                22:46:30.990    tsx0x726cac  Failed to send Request msg
>>>               REGISTER/cseq=33140 (tdta0x727258)! err=171168 (Unknown
>>> error
>>>               when performing SSL connect() (PJSIP_TLS_ECONNECT))
>>>                22:46:31.001    pjsua_acc.c  SIP registration failed,
>>>               status=503 (Unknown error when performing SSL connect()
>>>               (PJSIP_TLS_ECONNECT))
>>>                22:46:31.031      sip_reg.c  Error sending request,
>>>        status=171168
>>>                22:46:31.031    pjsua_acc.c  Unable to create/send
>>> REGISTER:
>>>               Unknown error when performing SSL connect()
>>>        (PJSIP_TLS_ECONNECT)
>>>               [status=171168]
>>>
>>>               Thanks
>>>
>>>
>>>
>>> ------------------------------------------------------------------------
>>>
>>>               _______________________________________________
>>>               Visit our blog: http://blog.pjsip.org
>>>
>>>               pjsip mailing list
>>>               pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>
>>>        <mailto:pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>>
>>>
>>>
>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>
>>>
>>>           _______________________________________________
>>>           Visit our blog: http://blog.pjsip.org
>>>
>>>           pjsip mailing list
>>>           pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>
>>>        <mailto:pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>>
>>>
>>>           http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>
>>>
>>>
>>>
>>>  ------------------------------------------------------------------------
>>>
>>>        _______________________________________________
>>>        Visit our blog: http://blog.pjsip.org
>>>
>>>        pjsip mailing list
>>>        pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>
>>>        http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>
>>>
>>>    _______________________________________________
>>>    Visit our blog: http://blog.pjsip.org
>>>
>>>    pjsip mailing list
>>>    pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>
>>>    http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>
>>>
>>>
>>> ------------------------------------------------------------------------
>>>
>>> _______________________________________________
>>> Visit our blog: http://blog.pjsip.org
>>>
>>> pjsip mailing list
>>> pjsip at lists.pjsip.org
>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>
>>
>>
>> _______________________________________________
>> Visit our blog: http://blog.pjsip.org
>>
>> pjsip mailing list
>> pjsip at lists.pjsip.org
>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>
>
>
>
> --
> ניר אלקיים
> טל: 050-3930056
> nir.elkayam at gmail.com
>
>
> _______________________________________________
> Visit our blog: http://blog.pjsip.org
>
> pjsip mailing list
> pjsip at lists.pjsip.org
> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.pjsip.org/pipermail/pjsip_lists.pjsip.org/attachments/20090806/0fa742e5/attachment.html>


More information about the pjsip mailing list