Hi Matt,

The RURI you receive from the UAC side, does it contain a SIPS schema or a "transport=tls" indication ?

The error you see translates into "there is a conflict between the requests protocol and the interface you force". So even if you force the UDP interface, maybe the RURI may force the TLS protocol, leading to an internal conflict.

Regards,

Bogdan-Andrei Iancu
OpenSIPS Founder and Developer
http://www.opensips-solutions.com

On 23.08.2015 19:53, Matt Hamilton wrote:


We use Opensips (1.7.1, in the process of upgrading to 2.1) as a dispatcher to multiple Asterisk servers. Currently we are trying to set up TLS.



UAC -> Opensips -> Asterisk


TLS is available and enabled on all three. The traffic between UAC and Opensips is on TLS and encrypted. On the other hand, it's not encrypted between Opensips and Asterisk since we use force_send_socket (UDP) to the Asterisk servers. This is the way we want it - encrypted between UAC and Opensips and not encrypted between Opensips and Asterisk. The communication is fine, but we get a warning "core:get_send_socket: protocol/port mismatch" in our logs.


My question is: Is forcing TLS traffic thru UDP is the only way to get Opensips - Asterisk traffic is unencrypted?


Thanks,

Matt



_______________________________________________
Users mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

_______________________________________________
Users mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Reply via email to