[pjsip] Register failed in symbian using TLS transport

nir elkayam nir.elkayam at gmail.com
Tue Aug 11 06:22:07 EDT 2009


hi,
thanks for the update.
did they say when they are planing to implement this feature?
I didn't see it in the roadmap..

thanks again,


On Tue, Aug 11, 2009 at 12:08 PM, Vasyl Strutynskyy <
vasyl.strutynskyy at gmail.com> wrote:

> Guys,
>
> Some updates.
>
> I have discussed this problem with PJSIP support and after detailed
> investigation session we understood that TLS doesn't work under Symbian OS
> at all, because pjsip uses RSocket and OpenSSL (which is needed for TLS)
> uses Open C socket.
>
> PJSIP team plan to rewrite some layer which is responsible for
> communication.
>
> So we should wait for this feature...
>
> *Vasyl
>
> 2009/8/6 Vasyl Strutynskyy <vasyl.strutynskyy at gmail.com>
>
>> Unfortunately, we still can't successfully provide Registration over TLS
>> on Symbain.
>>
>> 1. *SSL_Connect() function returns some error -1*. As previously I
>> described.
>>
>> 2. Plus we have new results: on the server side we observe an incoming TLS
>> connection on port 5061 which is accepted, and the symbian client on the
>> phone immediately closes the connection without starting the TLS handshake.
>>
>> So there are some reasons on client side which don't allow to keep TCP
>> connection which is needed for TLS. So if TLS isn't keep alive we can't
>> provide nay SIP messages.
>>
>> Still working with this problem.
>>
>> *Vasyl
>>
>> 2009/8/6 nir elkayam <nir.elkayam at gmail.com>
>>
>> hi
>>>
>>> can u update on any succsess running TLS on symbian?
>>>
>>> thanks,
>>>
>>>
>>>
>>> On Wed, Aug 5, 2009 at 10:03 PM, Klaus Darilion <
>>> klaus.mailinglists at pernau.at> wrote:
>>>
>>>> Vasyl Strutynskyy wrote:
>>>>
>>>>> Klaus,
>>>>>
>>>>> I have tried create just TLS transport calling in ua.cpp
>>>>> status = pjsua_transport_create(PJSIP_TRANSPORT_TLS, &tcfg, &tid);
>>>>> but still the same problem.
>>>>>
>>>>> UDP + TLS means that I called
>>>>> status = pjsua_transport_create(PJSIP_TRANSPORT_UDP, &tcfg, &tid);
>>>>> status = pjsua_transport_create(PJSIP_TRANSPORT_TLS, &tcfg, &tid);
>>>>> because thought one TLS isn't enough.
>>>>>
>>>>
>>>> If you only want to use TLS there is no need to create a UDP transport.
>>>> TLS transport is enough.
>>>>
>>>>  Where exactly should I add "transport=tls" in ua.cpp ?
>>>>>
>>>>
>>>> I do not know ua.cpp. A solution would be to define a proxy with URI
>>>> sip:yourdomain.com;transport=tls
>>>>
>>>>  I'm trying TLS only with Symbian because I need only for Symbian.
>>>>>
>>>>
>>>> Unfortunately I have never tried Symbian yet thus I do not know it it
>>>> should work.
>>>>
>>>> Maybe this can help you:
>>>> http://discussion.forum.nokia.com/forum/showthread.php?t=93263
>>>>
>>>> regards
>>>> klaus
>>>>
>>>>
>>>>> Best Regards
>>>>> *Vasyl
>>>>>
>>>>> 2009/8/5 Klaus Darilion <klaus.mailinglists at pernau.at <mailto:
>>>>> klaus.mailinglists at pernau.at>>
>>>>>
>>>>>
>>>>>
>>>>>    Vasyl Strutynskyy schrieb:
>>>>>
>>>>>        The main point that error happens inside the client without even
>>>>>        sending any data.
>>>>>
>>>>>
>>>>>        Please read next statements in details to see what we are doing
>>>>>
>>>>>          1. We use PJSIP code gotten from SVN trunk approx one month
>>>>> ago.
>>>>>          2. We use symbian console application to provide testing
>>>>> (path:
>>>>>
>>>>>             pjproject\pjsip-apps\src\symbian_ua\).
>>>>>                1. Please be informed that we can successfully register
>>>>> and
>>>>>
>>>>>                   make outgoing call using this symbian console app
>>>>>        over UDP.
>>>>>                   We made some code changes for this purpose, because
>>>>> by
>>>>>                   default it didn't want to call.
>>>>>          3. Then we built PJSIP code with TLS support like described
>>>>> here
>>>>>
>>>>>             (http://trac.pjsip.org/repos/wiki/TLS). Additionaly
>>>>>        installed Open
>>>>>             C plugin for Symban with openssl library for that.
>>>>>          4. We tried to REGISTER to our proxy server which supports
>>>>>        TLS. For
>>>>>
>>>>>             that we changed code in *ua.cpp* file according to TLS
>>>>>        needs (add
>>>>>             prefixes as "sips:") plus created TLS transport. Also we
>>>>> tried
>>>>>             different combinations: TLS + TCP, TLS + UDP, just TLS, but
>>>>> the
>>>>>             same result no data sending to the server, everything
>>>>> happens
>>>>>             inside the client.
>>>>>
>>>>>
>>>>>    Actually sips is not necessary - sip is fine too. Just add the
>>>>>    transport=tls parameter to the request URI.
>>>>>
>>>>>    How can you try TLS+UDP. If you create the transport you can only
>>>>>    specify either TLS or UDP. If you use TLS, this is always TLS over
>>>>> TCP.
>>>>>
>>>>>    Have you tried using TLS without symbian?
>>>>>
>>>>>    regards
>>>>>    klaus
>>>>>
>>>>>
>>>>>                 // add TLS
>>>>>                 pjsua_transport_config_default(&tcfg);
>>>>>                 status = pjsua_transport_create(PJSIP_TRANSPORT_TLS,
>>>>>        &tcfg, &tid);
>>>>>                 if (status != PJ_SUCCESS) {
>>>>>                     pjsua_perror(THIS_FILE, "Error creating TLS
>>>>> transport",
>>>>>             status);
>>>>>                     pjsua_destroy();
>>>>>                     return status;
>>>>>                 }
>>>>>
>>>>>        Waiting for your response/suggestions.
>>>>>
>>>>>        Thanks in advance
>>>>>        *Vasyl
>>>>>
>>>>>
>>>>>        2009/8/5 Klaus Darilion <klaus.mailinglists at pernau.at
>>>>>        <mailto:klaus.mailinglists at pernau.at>
>>>>>        <mailto:klaus.mailinglists at pernau.at
>>>>>        <mailto:klaus.mailinglists at pernau.at>>>
>>>>>
>>>>>
>>>>>           I would try to debug the problem why the transport was
>>>>> destroyed.
>>>>>           Verify if TCP connection is established or not, if
>>>>>        ServerHello and
>>>>>           Cleint Hello are exchanged, or if the error happens inside
>>>>> the
>>>>>           client without even sending any data
>>>>>
>>>>>           klaus
>>>>>
>>>>>           Vasyl Strutynskyy schrieb:
>>>>>
>>>>>               Hi,
>>>>>
>>>>>               I have faced with the same problem, SSL_Connect() returns
>>>>> -1,
>>>>>               did you resolve this issue?
>>>>>
>>>>>               I have used console symbian app. Client logs below:
>>>>>
>>>>>                22:46:30.941    pjsua_acc.c  Account
>>>>>        sips:102 at morrigan.ua <sips%3A102 at morrigan.ua> <mailto:
>>>>> sips%3A102 at morrigan.ua <sips%253A102 at morrigan.ua>>
>>>>>               <mailto:sips%3A102 at morrigan.ua<sips%253A102 at morrigan.ua>
>>>>>        <mailto:sips%253A102 at morrigan.ua <sips%25253A102 at morrigan.ua>>>
>>>>>        <mailto:sips%3A102 at morrigan.ua <sips%253A102 at morrigan.ua><mailto:
>>>>> sips%253A102 at morrigan.ua <sips%25253A102 at morrigan.ua>>
>>>>>               <mailto:sips%253A102 at morrigan.ua<sips%25253A102 at morrigan.ua>
>>>>>        <mailto:sips%25253A102 at morrigan.ua<sips%2525253A102 at morrigan.ua>>>>
>>>>> added with id 1
>>>>>
>>>>>
>>>>>                22:46:30.950   tlsc0x727fbc  TLS client transport
>>>>> created
>>>>>                22:46:30.989   tlsc0x727fbc  TLS transport destroyed
>>>>> with
>>>>>               reason 171168: Unknown error when performing SSL
>>>>> connect()
>>>>>               (PJSIP_TLS_ECONNECT)
>>>>>                22:46:30.990    tsx0x726cac  Failed to send Request msg
>>>>>               REGISTER/cseq=33140 (tdta0x727258)! err=171168 (Unknown
>>>>> error
>>>>>               when performing SSL connect() (PJSIP_TLS_ECONNECT))
>>>>>                22:46:31.001    pjsua_acc.c  SIP registration failed,
>>>>>               status=503 (Unknown error when performing SSL connect()
>>>>>               (PJSIP_TLS_ECONNECT))
>>>>>                22:46:31.031      sip_reg.c  Error sending request,
>>>>>        status=171168
>>>>>                22:46:31.031    pjsua_acc.c  Unable to create/send
>>>>> REGISTER:
>>>>>               Unknown error when performing SSL connect()
>>>>>        (PJSIP_TLS_ECONNECT)
>>>>>               [status=171168]
>>>>>
>>>>>               Thanks
>>>>>
>>>>>
>>>>>
>>>>> ------------------------------------------------------------------------
>>>>>
>>>>>               _______________________________________________
>>>>>               Visit our blog: http://blog.pjsip.org
>>>>>
>>>>>               pjsip mailing list
>>>>>               pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>
>>>>>        <mailto:pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>>
>>>>>
>>>>>
>>>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>>>
>>>>>
>>>>>           _______________________________________________
>>>>>           Visit our blog: http://blog.pjsip.org
>>>>>
>>>>>           pjsip mailing list
>>>>>           pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>
>>>>>        <mailto:pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>>
>>>>>
>>>>>
>>>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>  ------------------------------------------------------------------------
>>>>>
>>>>>        _______________________________________________
>>>>>        Visit our blog: http://blog.pjsip.org
>>>>>
>>>>>        pjsip mailing list
>>>>>        pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>
>>>>>        http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>>>
>>>>>
>>>>>    _______________________________________________
>>>>>    Visit our blog: http://blog.pjsip.org
>>>>>
>>>>>    pjsip mailing list
>>>>>    pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>
>>>>>    http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> ------------------------------------------------------------------------
>>>>>
>>>>> _______________________________________________
>>>>> Visit our blog: http://blog.pjsip.org
>>>>>
>>>>> pjsip mailing list
>>>>> pjsip at lists.pjsip.org
>>>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Visit our blog: http://blog.pjsip.org
>>>>
>>>> pjsip mailing list
>>>> pjsip at lists.pjsip.org
>>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>>
>>>
>>>
>>>
>>> --
>>> ניר אלקיים
>>> טל: 050-3930056
>>> nir.elkayam at gmail.com
>>>
>>>
>>> _______________________________________________
>>> Visit our blog: http://blog.pjsip.org
>>>
>>> pjsip mailing list
>>> pjsip at lists.pjsip.org
>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>
>>>
>>
>
> _______________________________________________
> Visit our blog: http://blog.pjsip.org
>
> pjsip mailing list
> pjsip at lists.pjsip.org
> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>
>


-- 
ניר אלקיים
טל: 050-3930056
nir.elkayam at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.pjsip.org/pipermail/pjsip_lists.pjsip.org/attachments/20090811/91e09b16/attachment.html>


More information about the pjsip mailing list