[pjsip] Register failed in symbian using TLS transport

Vasyl Strutynskyy vasyl.strutynskyy at gmail.com
Tue Aug 11 06:26:01 EDT 2009


You don't see in road map because this problem has been detected yesterday.

They said in 3 weeks they will try to do their best.

*Vasyl

2009/8/11 nir elkayam <nir.elkayam at gmail.com>

> hi,
> thanks for the update.
> did they say when they are planing to implement this feature?
> I didn't see it in the roadmap..
>
> thanks again,
>
>
> On Tue, Aug 11, 2009 at 12:08 PM, Vasyl Strutynskyy <
> vasyl.strutynskyy at gmail.com> wrote:
>
>> Guys,
>>
>> Some updates.
>>
>> I have discussed this problem with PJSIP support and after detailed
>> investigation session we understood that TLS doesn't work under Symbian OS
>> at all, because pjsip uses RSocket and OpenSSL (which is needed for TLS)
>> uses Open C socket.
>>
>> PJSIP team plan to rewrite some layer which is responsible for
>> communication.
>>
>> So we should wait for this feature...
>>
>> *Vasyl
>>
>> 2009/8/6 Vasyl Strutynskyy <vasyl.strutynskyy at gmail.com>
>>
>>> Unfortunately, we still can't successfully provide Registration over TLS
>>> on Symbain.
>>>
>>> 1. *SSL_Connect() function returns some error -1*. As previously I
>>> described.
>>>
>>> 2. Plus we have new results: on the server side we observe an incoming
>>> TLS connection on port 5061 which is accepted, and the symbian client on the
>>> phone immediately closes the connection without starting the TLS handshake.
>>>
>>> So there are some reasons on client side which don't allow to keep TCP
>>> connection which is needed for TLS. So if TLS isn't keep alive we can't
>>> provide nay SIP messages.
>>>
>>> Still working with this problem.
>>>
>>> *Vasyl
>>>
>>> 2009/8/6 nir elkayam <nir.elkayam at gmail.com>
>>>
>>> hi
>>>>
>>>> can u update on any succsess running TLS on symbian?
>>>>
>>>> thanks,
>>>>
>>>>
>>>>
>>>> On Wed, Aug 5, 2009 at 10:03 PM, Klaus Darilion <
>>>> klaus.mailinglists at pernau.at> wrote:
>>>>
>>>>> Vasyl Strutynskyy wrote:
>>>>>
>>>>>> Klaus,
>>>>>>
>>>>>> I have tried create just TLS transport calling in ua.cpp
>>>>>> status = pjsua_transport_create(PJSIP_TRANSPORT_TLS, &tcfg, &tid);
>>>>>> but still the same problem.
>>>>>>
>>>>>> UDP + TLS means that I called
>>>>>> status = pjsua_transport_create(PJSIP_TRANSPORT_UDP, &tcfg, &tid);
>>>>>> status = pjsua_transport_create(PJSIP_TRANSPORT_TLS, &tcfg, &tid);
>>>>>> because thought one TLS isn't enough.
>>>>>>
>>>>>
>>>>> If you only want to use TLS there is no need to create a UDP transport.
>>>>> TLS transport is enough.
>>>>>
>>>>>  Where exactly should I add "transport=tls" in ua.cpp ?
>>>>>>
>>>>>
>>>>> I do not know ua.cpp. A solution would be to define a proxy with URI
>>>>> sip:yourdomain.com;transport=tls
>>>>>
>>>>>  I'm trying TLS only with Symbian because I need only for Symbian.
>>>>>>
>>>>>
>>>>> Unfortunately I have never tried Symbian yet thus I do not know it it
>>>>> should work.
>>>>>
>>>>> Maybe this can help you:
>>>>> http://discussion.forum.nokia.com/forum/showthread.php?t=93263
>>>>>
>>>>> regards
>>>>> klaus
>>>>>
>>>>>
>>>>>> Best Regards
>>>>>> *Vasyl
>>>>>>
>>>>>> 2009/8/5 Klaus Darilion <klaus.mailinglists at pernau.at <mailto:
>>>>>> klaus.mailinglists at pernau.at>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>    Vasyl Strutynskyy schrieb:
>>>>>>
>>>>>>        The main point that error happens inside the client without
>>>>>> even
>>>>>>        sending any data.
>>>>>>
>>>>>>
>>>>>>        Please read next statements in details to see what we are doing
>>>>>>
>>>>>>          1. We use PJSIP code gotten from SVN trunk approx one month
>>>>>> ago.
>>>>>>          2. We use symbian console application to provide testing
>>>>>> (path:
>>>>>>
>>>>>>             pjproject\pjsip-apps\src\symbian_ua\).
>>>>>>                1. Please be informed that we can successfully register
>>>>>> and
>>>>>>
>>>>>>                   make outgoing call using this symbian console app
>>>>>>        over UDP.
>>>>>>                   We made some code changes for this purpose, because
>>>>>> by
>>>>>>                   default it didn't want to call.
>>>>>>          3. Then we built PJSIP code with TLS support like described
>>>>>> here
>>>>>>
>>>>>>             (http://trac.pjsip.org/repos/wiki/TLS). Additionaly
>>>>>>        installed Open
>>>>>>             C plugin for Symban with openssl library for that.
>>>>>>          4. We tried to REGISTER to our proxy server which supports
>>>>>>        TLS. For
>>>>>>
>>>>>>             that we changed code in *ua.cpp* file according to TLS
>>>>>>        needs (add
>>>>>>             prefixes as "sips:") plus created TLS transport. Also we
>>>>>> tried
>>>>>>             different combinations: TLS + TCP, TLS + UDP, just TLS,
>>>>>> but the
>>>>>>             same result no data sending to the server, everything
>>>>>> happens
>>>>>>             inside the client.
>>>>>>
>>>>>>
>>>>>>    Actually sips is not necessary - sip is fine too. Just add the
>>>>>>    transport=tls parameter to the request URI.
>>>>>>
>>>>>>    How can you try TLS+UDP. If you create the transport you can only
>>>>>>    specify either TLS or UDP. If you use TLS, this is always TLS over
>>>>>> TCP.
>>>>>>
>>>>>>    Have you tried using TLS without symbian?
>>>>>>
>>>>>>    regards
>>>>>>    klaus
>>>>>>
>>>>>>
>>>>>>                 // add TLS
>>>>>>                 pjsua_transport_config_default(&tcfg);
>>>>>>                 status = pjsua_transport_create(PJSIP_TRANSPORT_TLS,
>>>>>>        &tcfg, &tid);
>>>>>>                 if (status != PJ_SUCCESS) {
>>>>>>                     pjsua_perror(THIS_FILE, "Error creating TLS
>>>>>> transport",
>>>>>>             status);
>>>>>>                     pjsua_destroy();
>>>>>>                     return status;
>>>>>>                 }
>>>>>>
>>>>>>        Waiting for your response/suggestions.
>>>>>>
>>>>>>        Thanks in advance
>>>>>>        *Vasyl
>>>>>>
>>>>>>
>>>>>>        2009/8/5 Klaus Darilion <klaus.mailinglists at pernau.at
>>>>>>        <mailto:klaus.mailinglists at pernau.at>
>>>>>>        <mailto:klaus.mailinglists at pernau.at
>>>>>>        <mailto:klaus.mailinglists at pernau.at>>>
>>>>>>
>>>>>>
>>>>>>           I would try to debug the problem why the transport was
>>>>>> destroyed.
>>>>>>           Verify if TCP connection is established or not, if
>>>>>>        ServerHello and
>>>>>>           Cleint Hello are exchanged, or if the error happens inside
>>>>>> the
>>>>>>           client without even sending any data
>>>>>>
>>>>>>           klaus
>>>>>>
>>>>>>           Vasyl Strutynskyy schrieb:
>>>>>>
>>>>>>               Hi,
>>>>>>
>>>>>>               I have faced with the same problem, SSL_Connect()
>>>>>> returns -1,
>>>>>>               did you resolve this issue?
>>>>>>
>>>>>>               I have used console symbian app. Client logs below:
>>>>>>
>>>>>>                22:46:30.941    pjsua_acc.c  Account
>>>>>>        sips:102 at morrigan.ua <sips%3A102 at morrigan.ua> <mailto:
>>>>>> sips%3A102 at morrigan.ua <sips%253A102 at morrigan.ua>>
>>>>>>               <mailto:sips%3A102 at morrigan.ua<sips%253A102 at morrigan.ua>
>>>>>>        <mailto:sips%253A102 at morrigan.ua <sips%25253A102 at morrigan.ua>
>>>>>> >>
>>>>>>        <mailto:sips%3A102 at morrigan.ua <sips%253A102 at morrigan.ua><mailto:
>>>>>> sips%253A102 at morrigan.ua <sips%25253A102 at morrigan.ua>>
>>>>>>               <mailto:sips%253A102 at morrigan.ua<sips%25253A102 at morrigan.ua>
>>>>>>        <mailto:sips%25253A102 at morrigan.ua<sips%2525253A102 at morrigan.ua>>>>
>>>>>> added with id 1
>>>>>>
>>>>>>
>>>>>>                22:46:30.950   tlsc0x727fbc  TLS client transport
>>>>>> created
>>>>>>                22:46:30.989   tlsc0x727fbc  TLS transport destroyed
>>>>>> with
>>>>>>               reason 171168: Unknown error when performing SSL
>>>>>> connect()
>>>>>>               (PJSIP_TLS_ECONNECT)
>>>>>>                22:46:30.990    tsx0x726cac  Failed to send Request msg
>>>>>>               REGISTER/cseq=33140 (tdta0x727258)! err=171168 (Unknown
>>>>>> error
>>>>>>               when performing SSL connect() (PJSIP_TLS_ECONNECT))
>>>>>>                22:46:31.001    pjsua_acc.c  SIP registration failed,
>>>>>>               status=503 (Unknown error when performing SSL connect()
>>>>>>               (PJSIP_TLS_ECONNECT))
>>>>>>                22:46:31.031      sip_reg.c  Error sending request,
>>>>>>        status=171168
>>>>>>                22:46:31.031    pjsua_acc.c  Unable to create/send
>>>>>> REGISTER:
>>>>>>               Unknown error when performing SSL connect()
>>>>>>        (PJSIP_TLS_ECONNECT)
>>>>>>               [status=171168]
>>>>>>
>>>>>>               Thanks
>>>>>>
>>>>>>
>>>>>>
>>>>>> ------------------------------------------------------------------------
>>>>>>
>>>>>>               _______________________________________________
>>>>>>               Visit our blog: http://blog.pjsip.org
>>>>>>
>>>>>>               pjsip mailing list
>>>>>>               pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>
>>>>>>        <mailto:pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>>
>>>>>>
>>>>>>
>>>>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>>>>
>>>>>>
>>>>>>           _______________________________________________
>>>>>>           Visit our blog: http://blog.pjsip.org
>>>>>>
>>>>>>           pjsip mailing list
>>>>>>           pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>
>>>>>>        <mailto:pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>>
>>>>>>
>>>>>>
>>>>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>  ------------------------------------------------------------------------
>>>>>>
>>>>>>        _______________________________________________
>>>>>>        Visit our blog: http://blog.pjsip.org
>>>>>>
>>>>>>        pjsip mailing list
>>>>>>        pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>
>>>>>>        http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>>>>
>>>>>>
>>>>>>    _______________________________________________
>>>>>>    Visit our blog: http://blog.pjsip.org
>>>>>>
>>>>>>    pjsip mailing list
>>>>>>    pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>
>>>>>>    http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> ------------------------------------------------------------------------
>>>>>>
>>>>>> _______________________________________________
>>>>>> Visit our blog: http://blog.pjsip.org
>>>>>>
>>>>>> pjsip mailing list
>>>>>> pjsip at lists.pjsip.org
>>>>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>>>>
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> Visit our blog: http://blog.pjsip.org
>>>>>
>>>>> pjsip mailing list
>>>>> pjsip at lists.pjsip.org
>>>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> ניר אלקיים
>>>> טל: 050-3930056
>>>> nir.elkayam at gmail.com
>>>>
>>>>
>>>> _______________________________________________
>>>> Visit our blog: http://blog.pjsip.org
>>>>
>>>> pjsip mailing list
>>>> pjsip at lists.pjsip.org
>>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>>>
>>>>
>>>
>>
>> _______________________________________________
>> Visit our blog: http://blog.pjsip.org
>>
>> pjsip mailing list
>> pjsip at lists.pjsip.org
>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>>
>>
>
>
> --
> ניר אלקיים
> טל: 050-3930056
> nir.elkayam at gmail.com
>
>
> _______________________________________________
> Visit our blog: http://blog.pjsip.org
>
> pjsip mailing list
> pjsip at lists.pjsip.org
> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.pjsip.org/pipermail/pjsip_lists.pjsip.org/attachments/20090811/226dcdfa/attachment.html>


More information about the pjsip mailing list