Hi Jean, it seems you are hitting the maximum size of ASN.1 arrays in PTLib: OpenMCU-ru offers a lot of codecs and when GnuGk adds an encrypted version for each, it goes over the default maximum of 128 entries.
Could you please set [Gatekeeper::Main] MaxASNArraySize=400 and report back if this fixes the error ? If that fixes the error, I'll add code to let GnuGk automatically check if it hits the limit and avoid the error. Also, beware that raising the limit in GnuGk can cause the creation of messages that go over the limits in other vendor implementations. Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : j...@willamowius.de Website: http://www.gnugk.org Support: http://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584 Jean Lÿffffe9olein BEBEY wrote: > Hi Jan, > Please, see attached the level 5 trace of the bug. > > > Jean > Le Mardi 11 août 2015 11h05, Jan Willamowius <j...@willamowius.de> a > écrit : > > > Hi Jean, > > what you describe in this mail is not the bug you showed in your first > posting: > > > > 2015/08/01 13:53:34.184 0 assert.cxx(112) PWLib Assertion > > > fail: Invalid array element, file > > > /usr/local/ptlib-2.10.9//include/ptlib/array.h, line 1063, Error=22 > > This issue in your first mail is a bug in GnuGk that we should fix. > To do so I need a stack trace or at least a level 5 trace from when it occurs. > > > The errors your post now seem to be from forcing GnuGk to use TLS encryption > with an endpoint that does not support TLS. > Except for GnuGk and custom H323Plus endpoints I don't know any device that > does > supports TLS. > > Regards, > Jan > > -- > Jan Willamowius, Founder of the GNU Gatekeeper Project > EMail : j...@willamowius.de > Website: http://www.gnugk.org > Support: http://www.willamowius.com/gnugk-support.html > > Relaxed Communications GmbH > Frahmredder 91 > 22393 Hamburg > Geschäftsführer: Jan Willamowius > HRB 125261 (Amtsgericht Hamburg) > USt-IdNr: DE286003584 > > Jean Lÿffffe9olein BEBEY wrote: > > Hi Jan, > > The problem occured when i call an openmcu number on the same server than > > gnugk. I stopped openmcu and i did other tests. > > ----------- test No 1: Only TLS Enabled > > [TLS] > > EnableTLS=1 > > PrivateKey=/etc/asterisk/keys/pbx.xxx.com.pem > > Certificates=/etc/asterisk/keys/pbx.xxx.com.pem > > CAFile=/etc/asterisk/keys/sub.class1.server.ca.pem > > RequireRemoteCertificate=0 > > [EP::test1] > > UseTLS=1 > > - external user test1 can't call internal user test2 : i have > > this error in the log (file gnugnk_TLS_Only.log) > > ProxyChannel.cxx(12947) TLS TLS protocol error in SSL_connect(): 1 / > > error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol > > > > > > - internal user test2 can call external user test1 : it's ok > > > > > > ------------ test No 2: TLS + Media Encryption Enabled > > [RoutedMode]GKRouted=1 > > H245Routed=0 > > CallSignalPort=1721 > > AcceptUnregisteredCalls=1H245TunnelingTranslation=1 > > SupportNATedEndpoints=1 > > H245PortRange=31000-31999 > > Q931PortRange=30000-30999 > > DropCallsByReleaseComplete=1EnableH46018=1SendReleaseCompleteOnDRQ=1 > > EnableH235HalfCallMedia=1 > > H235HalfCallMediaStrength=256 > > RequireH235HalfCallMedia=1 > > RemoveH235Call=192.168.1.0/24 > > EnableH235HalfCallMediaKeyUpdates=1 > > [TLS] > > EnableTLS=1 > > PrivateKey=/etc/asterisk/keys/pbx.xxx.com.pem > > Certificates=/etc/asterisk/keys/pbx.xxx.com.pem > > CAFile=/etc/asterisk/keys/sub.class1.server.ca.pem > > RequireRemoteCertificate=0 > > [EP::test1] > > UseTLS=1 > > > > - external user test1 can't call internal user test2 : i have > > this error in the log (file gnugnk_TLS_MediaEncrypt.log) > > ProxyChannel.cxx(12947) TLS TLS protocol error in SSL_connect(): 1 / > > error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol > > > > > > - internal user test2 can call external user test1 but without > >audio and video : i have this error in the log (file > >gnugnk_TLS_MediaEncrypt.log) > > h235crypto.cxx(314) H235 Decrypt error: wrong final block > > lengthh235crypto.cxx(540) H235 EVP_DecryptFinal_ex() failed - > > incorrect padding ? > > > > Thank for any help. > > Jean > > > > > > Le Lundi 10 août 2015 12h01, Jan Willamowius <j...@willamowius.de> a > >écrit : > > > > > > Hi Jean. > > > > the best way to debug this would be for you to create a stack trace of > > the crash. See > > http://www.gnugk.org/gnugk-manual-14.html#ss14.3 > > > > The trace you posted doesn't contain enough information to see what > > went wrong. We need at least a level 5 trace to see what was inside the > > message that cause the crash. > > > > Regards, > > Jan > > > > -- > > Jan Willamowius, Founder of the GNU Gatekeeper Project > > EMail : j...@willamowius.de > > Website: http://www.gnugk.org > > Support: http://www.willamowius.com/gnugk-support.html > > > > Relaxed Communications GmbH > > Frahmredder 91 > > 22393 Hamburg > > Geschäftsführer: Jan Willamowius > > HRB 125261 (Amtsgericht Hamburg) > > USt-IdNr: DE286003584 > > > > Jean Lÿffffe9olein BEBEY wrote: > > > Hil all, > > > I have successfully compiled GNU 3.9 with theses options: > > > ----- ptlib :- ./configure --enable-openldap --enable-openssl > > > - make optnoshared > > > ----- h323plus./configure --enable-h235 --enable-h235-256 --enable-h46025 > > > --enable-h46026 > > > - make optnoshared > > > ------ gnugk./configure --enable-h46018 > > > - make optnoshared > > > > > > -------- gatekeeper.iniI added the media encryption in [RoutedMode] : > > > EnableH235HalfCallMedia=1 > > > H235HalfCallMediaStrength=256 > > > RequireH235HalfCallMedia=0 > > > RemoveH235Call=192.168.1.0/24 > > > > > > and start gnugk : > > > Gatekeeper(GNU) Version(3.9.0) > > > Ext(pthreads=1,radius=1,mysql=1,pgsql=1,firebird=0,odbc=0,sqlite=0,large_fdset=0,crypto/ssl=1,h46018=1,h46023=1,ldap=1,ssh=1,ipv6=0,h235media=1,lua=1,h46017=1,snmp=1,h46026=0) > > > H323Plus(1.26.5) PTLib(2.10.9) Build(Aug 1 2015, 11:49:37) Sys(Linux > > > x86_64 2.6.32-431.el6.x86_64) > > > When i make a call, i have this error : > > > 2015/08/01 13:53:30.732 2 RasSrv.cxx(177) RAS Read from > > > 41.202.219.74:33554 > > > 2015/08/01 13:53:30.732 2 RasSrv.cxx(283) RAS Received > > > ARQ from 41.202.219.74:33554 > > > 2015/08/01 13:53:30.733 1 RasSrv.cxx(412) RAS ARQ > > > Received from 41.202.219.74:33554 > > > 2015/08/01 13:53:30.733 2 RasTbl.cxx(1518) RASTBL Gateway > > > 2475510801_endp matched by prefix 4, priority: 1 > > > 2015/08/01 13:53:30.734 2 RasTbl.cxx(4727) > > > CallTable::Insert(CALL) Call No. 1, total sessions : 1 > > > 2015/08/01 13:53:30.734 2 RasSrv.cxx(451) > > > ACF|41.202.219.74:33554|59434296_endp|5302|402:dialedDigits|jlbebey:h323_ID=3008:dialedDigits|false|1c-74-df-76-03-00-00-1f-03-da-0b-e8-01-a6-e7-95|ToBeDecided; > > > 2015/08/01 13:53:30.734 2 RasSrv.cxx(295) RAS Send ACF > > > to 41.202.219.74:33554 > > > 2015/08/01 13:53:33.022 1 ProxyChannel.cxx(3646) Removing External > > > IP from destCallSignalAddr in Setup > > > 2015/08/01 13:53:33.022 2 gkacct.cxx(961) GKACCT > > > Successfully logged event 1 for call no. 1 > > > 2015/08/01 13:53:33.038 1 ProxyChannel.cxx(1583) Call 1: > > > h245Routed=1 proxy=1 > > > 2015/08/01 13:53:33.058 2 gkacct.cxx(961) GKACCT > > > Successfully logged event 32 for call no. 1 > > > 2015/08/01 13:53:34.000 2 RasSrv.cxx(177) RAS Read from > > > 41.202.219.74:33554 > > > 2015/08/01 13:53:34.000 2 RasSrv.cxx(283) RAS Received > > > RRQ from 41.202.219.74:33554 > > > 2015/08/01 13:53:34.001 1 RasSrv.cxx(412) RAS RRQ > > > Received from 41.202.219.74:33554 > > > 2015/08/01 13:53:34.002 2 RasSrv.cxx(295) RAS Send RCF > > > to 41.202.219.74:33554 > > > 2015/08/01 13:53:34.184 0 assert.cxx(112) PWLib Assertion > > > fail: Invalid array element, file > > > /usr/local/ptlib-2.10.9//include/ptlib/array.h, line 1063, Error=22 > > > > > > Any help ? > > > > > > Jean ------------------------------------------------------------------------------ _______________________________________________________ Posting: mailto:Openh323gk-users@lists.sourceforge.net Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/
