<div dir="ltr">@Moacir, thanks<div><br></div><div style>1. You said that "<span style="font-family:arial,sans-serif;font-size:13px"> then use "listen="my ip address" and all enabled services will be bound to the especified IP address." So which port does Kamailio listen for TCP and TLS? How does client know which port to connect to Kamailio ?</span></div>
<div style><span style="font-family:arial,sans-serif;font-size:13px"><br></span></div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Mar 21, 2013 at 12:41 AM, Moacir Ferreira <span dir="ltr"><<a href="mailto:moacirferreira@hotmail.com" target="_blank">moacirferreira@hotmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div dir="ltr">Hummm. When I start playing with Kamailio I had some problems that were related to the compilation process not really to the final product. Now, if you comment out the listen statement then all server interfaces will listen for all enabled services (SIP-UDP, SIP-TCP and SIP-TLS if you enabled it). AS a troubleshooting suggestion, just comment out the "listen" statement and all enabled services will bind to all available IP interfaces. If it works, then use "listen="my ip address" and all enabled services will be bound to the especified IP address.<br>
<br>Best regards,<br> <br>Moacir<br><div><div></div><hr>From: <a href="mailto:oej@edvina.net" target="_blank">oej@edvina.net</a><br>Date: Wed, 20 Mar 2013 12:43:06 +0100<br>To: <a href="mailto:sr-users@lists.sip-router.org" target="_blank">sr-users@lists.sip-router.org</a><br>
Subject: Re: [SR-Users] How to enable TLS in Kamailio ?<div><div class="h5"><br><br><br><div><div>20 mar 2013 kl. 10:33 skrev Khoa Pham <<a href="mailto:onmyway133@gmail.com" target="_blank">onmyway133@gmail.com</a>>:</div>
<br><blockquote><div dir="ltr">Hi Olle,<div><br></div><div>I follow these 2 tutorials</div><div>1. <a href="http://nil.uniza.sk/network-security/tls/configuring-tls-support-kamailio-31-howto" target="_blank">http://nil.uniza.sk/network-security/tls/configuring-tls-support-kamailio-31-howto</a></div>
<div>which only describes to listen on tls</div><div><br></div><div><pre style="padding:0.75em 1.5em;border:1px solid rgb(221,221,221);line-height:13.18px;font-size:12px;background-color:rgb(238,238,238)">listen=tls:<a href="http://158.193.139.51:5061/" target="_blank">158.193.139.51:5061</a></pre>
</div><div>2. <a href="http://www.kamailio.org/dokuwiki/doku.php/tls:create-certificates" target="_blank">http://www.kamailio.org/dokuwiki/doku.php/tls:create-certificates</a></div>
<div>which only describes to listen on udp and tcp</div><div><pre style="padding:0.5em;border:1px dashed rgb(140,172,187);line-height:1.1em;overflow:auto;font-size:12px;background-color:rgb(247,249,250)"> listen=udp:<ip-address-for-receiving-sip-requests>:5060
listen=tcp:<ip-address-for-receiving-sip-requests>:5060 </pre></div><div><br></div><div>It is not until I listen on both TCP and LTS does it work.</div><div><br></div><div>You document <a href="http://kamailio.org/docs/modules/4.0.x/modules/tls.html" target="_blank">http://kamailio.org/docs/modules/4.0.x/modules/tls.html</a> seems to lack of these "listen"</div>
</div></blockquote>Right.</div><div>But it's in the core cookbook. We should propably add the listen to the TLS docs too.</div><div><br></div><div>Thanks!</div><div><br></div><div>/O<br><blockquote><div dir="ltr">
<div><br></div></div><div><br><br><div>On Wed, Mar 20, 2013 at 4:10 PM, Olle E. Johansson <span dir="ltr"><<a href="mailto:oej@edvina.net" target="_blank">oej@edvina.net</a>></span> wrote:<br>
<blockquote style="padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid"><div><br><div><div>20 mar 2013 kl. 07:55 skrev Daniel-Constantin Mierla <<a href="mailto:miconda@gmail.com" target="_blank">miconda@gmail.com</a>>:</div>
<div><br><blockquote>
<div>
Hello,<br>
<br>
when tls module is installed, a self signed pair of
certificate-private key is generated in /usr/local/etc/kamailio<br>
<br>
If you need one that is signed by a trusted CA (e.g., Verisign), you
will have to buy it.<br>
<br>
Cheers,<br>
Daniel<br>
<br>
<div>On 3/19/13 8:08 AM, Khoa Pham wrote:<br>
</div>
<blockquote>
<div dir="ltr">Hi,
<div><br>
I want to enable TLS in Kamailio, as in here <a href="http://kamailio.org/docs/modules/stable/modules/tls.html" target="_blank">http://kamailio.org/docs/modules/stable/modules/tls.html</a></div>
<div><br>
</div>
<div>
But how can I get the certificate and private key ?<br clear="all">
</div></div></blockquote></div></blockquote><br></div></div><div>The documentation for the TLS module actually includes a quick howto.</div><div><a href="http://kamailio.org/docs/modules/4.0.x/modules/tls.html" target="_blank">http://kamailio.org/docs/modules/4.0.x/modules/tls.html</a></div>
<div><br></div><div>What part of this needs clarification? Please help us make the documentation better if there are parts you do not undertand or isn't explained.</div><div><br></div><div>Thanks,</div><div>/O</div><br>
</div><br>_______________________________________________<br>
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br>
<a href="mailto:sr-users@lists.sip-router.org" target="_blank">sr-users@lists.sip-router.org</a><br>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><span>Khoa Pham</span><br><span>HCMC University of Science</span><br>
<span>Faculty of Information Technology</span><br>
</div>
_______________________________________________<br>SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br><a href="mailto:sr-users@lists.sip-router.org" target="_blank">sr-users@lists.sip-router.org</a><br>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><br></blockquote></div><br><br>_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
<a href="mailto:sr-users@lists.sip-router.org" target="_blank">sr-users@lists.sip-router.org</a>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a></div></div></div> </div></div>
<br>_______________________________________________<br>
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br>
<a href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a><br>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><span style="color:rgb(0,0,0)">Khoa Pham</span><br style="color:rgb(0,0,0)"><span style="color:rgb(0,0,0)">HCMC University of Science</span><br style="color:rgb(0,0,0)">
<span style="color:rgb(0,0,0)">Faculty of Information Technology</span><br>
</div>