Sponsor: VoiceMeUp - Corporate & Wholesale VoIP Services

VoIP Mailing List Archives
Mailing list archives for the VoIP community
 SearchSearch 

[Freeswitch-users] SRTP breaks my TLS session


 
Post new topic   Reply to topic    VoIP Mailing List Archives Forum Index -> freeSWITCH Users
View previous topic :: View next topic  
Author Message
lists at kavun.ch
Guest





PostPosted: Thu Feb 25, 2016 6:15 pm    Post subject: [Freeswitch-users] SRTP breaks my TLS session Reply with quote

Hello list,I thought I had solved this issue by reducing my codec list to a minimum, but it still persists, unfortunately. This was to reduce the TLS packet size.
Anytime I enable SRTP on my phones, outgoing calls will randomly fail. The problem goes away when I disable SRTP. I only work over TLS.
Incoming calls work reliably with or without SRTP.

How do you suggest debugging this?
I tried setting up a fresh instance of FS but the issue persists.
Now. It should be noted that calls fail sensibly more often when I have more than one account registered on the same server with the same device.

Any suggestion is welcome. Have you experienced this?

I’m running FreeSWITCH Version 1.6.5 on Debian. My phone in this case is a Yealink SIP-T46G running firmware 28.80.0.95.

E
Back to top
brian at freeswitch.org
Guest





PostPosted: Thu Feb 25, 2016 6:36 pm    Post subject: [Freeswitch-users] SRTP breaks my TLS session Reply with quote

Sounds like there may be a bug in the yealink if packet size is of issue on TCP/TLS connections.

On Thu, Feb 25, 2016 at 5:13 PM, Emrah <lists@kavun.ch (lists@kavun.ch)> wrote:
Quote:
Hello list,I thought I had solved this issue by reducing my codec list  to a minimum, but it still persists, unfortunately. This was to reduce the TLS packet size.
Anytime I enable SRTP on my phones, outgoing calls will randomly fail. The problem goes away when I disable SRTP. I only work over TLS.
Incoming calls work reliably with or without SRTP.


How do you suggest debugging this?
I tried setting up a fresh instance of FS but the issue persists.
Now. It should be noted that calls fail sensibly more often when I have more than one account registered on the same server with the same device.


Any suggestion is welcome. Have you experienced this? 


I’m running FreeSWITCH Version 1.6.5 on Debian. My phone in this case is a Yealink SIP-T46G running firmware 28.80.0.95.


E


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org (consulting@freeswitch.org)
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org)
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org




--

Brian West
brian@freeswitch.org (brian@freeswitch.org)


Twitter: @FreeSWITCH , @briankwest
http://www.freeswitchbook.com
http://www.freeswitchcookbook.com
Got Bugs? Report them here! | Reddit: /r/freeswitch
T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)
iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest
Back to top
mario_fs at mgtech.com
Guest





PostPosted: Fri Feb 26, 2016 12:39 am    Post subject: [Freeswitch-users] SRTP breaks my TLS session Reply with quote

You may want to run a pcap trace on the Yealink. It’s under settings->Configuration. Start/test/export.
Quote:
On Feb 25, 2016, at 3:35 PM, Brian West <brian@freeswitch.org (brian@freeswitch.org)> wrote:
Sounds like there may be a bug in the yealink if packet size is of issue on TCP/TLS connections.
On Thu, Feb 25, 2016 at 5:13 PM, Emrah <lists@kavun.ch (lists@kavun.ch)> wrote:
Quote:
Hello list,I thought I had solved this issue by reducing my codec list to a minimum, but it still persists, unfortunately. This was to reduce the TLS packet size.
Anytime I enable SRTP on my phones, outgoing calls will randomly fail. The problem goes away when I disable SRTP. I only work over TLS.
Incoming calls work reliably with or without SRTP.

How do you suggest debugging this?
I tried setting up a fresh instance of FS but the issue persists.
Now. It should be noted that calls fail sensibly more often when I have more than one account registered on the same server with the same device.

Any suggestion is welcome. Have you experienced this?

I’m running FreeSWITCH Version 1.6.5 on Debian. My phone in this case is a Yealink SIP-T46G running firmware 28.80.0.95.

E

_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org (consulting@freeswitch.org) FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org) http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org


--
Brian Westbrian@freeswitch.org (brian@freeswitch.org)

Twitter: @FreeSWITCH , @briankwesthttp://www.freeswitchbook.comhttp://www.freeswitchcookbook.com
Got Bugs? Report them here! | Reddit: /r/freeswitch
T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest










_________________________________________________________________________Professional FreeSWITCH Consulting Services: consulting@freeswitch.org (consulting@freeswitch.org)http://www.freeswitchsolutions.comOfficial FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon.comFreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-usersUNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org
Back to top
lists at kavun.ch
Guest





PostPosted: Fri Feb 26, 2016 4:39 am    Post subject: [Freeswitch-users] SRTP breaks my TLS session Reply with quote

Thanks for this.

This isn’t just a yealink thing. I’ve encountered sporadic issues with soft phones and other desk phones as well.

I didn’t use the PCap capture feature because I had assumed it would give me a bunch of TLS packets. I’ll test that and revert back.

How can we explain that I have more calls failing if I register multiple accounts?

Emrah
Quote:
On Feb 26, 2016, at 6:37 AM, Mario G <mario_fs@mgtech.com (mario_fs@mgtech.com)> wrote:
You may want to run a pcap trace on the Yealink. It’s under settings->Configuration. Start/test/export.
Quote:
On Feb 25, 2016, at 3:35 PM, Brian West <brian@freeswitch.org (brian@freeswitch.org)> wrote:
Sounds like there may be a bug in the yealink if packet size is of issue on TCP/TLS connections.
On Thu, Feb 25, 2016 at 5:13 PM, Emrah <lists@kavun.ch (lists@kavun.ch)> wrote:
Quote:
Hello list,I thought I had solved this issue by reducing my codec list to a minimum, but it still persists, unfortunately. This was to reduce the TLS packet size.
Anytime I enable SRTP on my phones, outgoing calls will randomly fail. The problem goes away when I disable SRTP. I only work over TLS.
Incoming calls work reliably with or without SRTP.

How do you suggest debugging this?
I tried setting up a fresh instance of FS but the issue persists.
Now. It should be noted that calls fail sensibly more often when I have more than one account registered on the same server with the same device.

Any suggestion is welcome. Have you experienced this?

I’m running FreeSWITCH Version 1.6.5 on Debian. My phone in this case is a Yealink SIP-T46G running firmware 28.80.0.95.

E

_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org (consulting@freeswitch.org) FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org) http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org


--
Brian Westbrian@freeswitch.org (brian@freeswitch.org)

Twitter: @FreeSWITCH , @briankwesthttp://www.freeswitchbook.comhttp://www.freeswitchcookbook.com
Got Bugs? Report them here! | Reddit: /r/freeswitch
T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest










_________________________________________________________________________Professional FreeSWITCH Consulting Services: consulting@freeswitch.org (consulting@freeswitch.org)http://www.freeswitchsolutions.comOfficial FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon.comFreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-usersUNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org



_________________________________________________________________________Professional FreeSWITCH Consulting Services: consulting@freeswitch.org (consulting@freeswitch.org)http://www.freeswitchsolutions.comOfficial FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon.comFreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-usersUNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org
Back to top
lists at kavun.ch
Guest





PostPosted: Sun Feb 28, 2016 1:35 pm    Post subject: [Freeswitch-users] SRTP breaks my TLS session Reply with quote

Hello there,I can confirm that a PCAP gives me a bunch of TLS packets.
How do you suggest debugging this?

Thanks!
Quote:
On Feb 26, 2016, at 10:36 AM, Emrah <lists@kavun.ch (lists@kavun.ch)> wrote:
Thanks for this.

This isn’t just a yealink thing. I’ve encountered sporadic issues with soft phones and other desk phones as well.

I didn’t use the PCap capture feature because I had assumed it would give me a bunch of TLS packets. I’ll test that and revert back.

How can we explain that I have more calls failing if I register multiple accounts?

Emrah
Quote:
On Feb 26, 2016, at 6:37 AM, Mario G <mario_fs@mgtech.com (mario_fs@mgtech.com)> wrote:
You may want to run a pcap trace on the Yealink. It’s under settings->Configuration. Start/test/export.
Quote:
On Feb 25, 2016, at 3:35 PM, Brian West <brian@freeswitch.org (brian@freeswitch.org)> wrote:
Sounds like there may be a bug in the yealink if packet size is of issue on TCP/TLS connections.
On Thu, Feb 25, 2016 at 5:13 PM, Emrah <lists@kavun.ch (lists@kavun.ch)> wrote:
Quote:
Hello list,I thought I had solved this issue by reducing my codec list to a minimum, but it still persists, unfortunately. This was to reduce the TLS packet size.
Anytime I enable SRTP on my phones, outgoing calls will randomly fail. The problem goes away when I disable SRTP. I only work over TLS.
Incoming calls work reliably with or without SRTP.

How do you suggest debugging this?
I tried setting up a fresh instance of FS but the issue persists.
Now. It should be noted that calls fail sensibly more often when I have more than one account registered on the same server with the same device.

Any suggestion is welcome. Have you experienced this?

I’m running FreeSWITCH Version 1.6.5 on Debian. My phone in this case is a Yealink SIP-T46G running firmware 28.80.0.95.

E

_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org (consulting@freeswitch.org) FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org) http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org


--
Brian Westbrian@freeswitch.org (brian@freeswitch.org)

Twitter: @FreeSWITCH , @briankwesthttp://www.freeswitchbook.comhttp://www.freeswitchcookbook.com
Got Bugs? Report them here! | Reddit: /r/freeswitch
T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest










_________________________________________________________________________Professional FreeSWITCH Consulting Services: consulting@freeswitch.org (consulting@freeswitch.org)http://www.freeswitchsolutions.comOfficial FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon.comFreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-usersUNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org



_________________________________________________________________________Professional FreeSWITCH Consulting Services: consulting@freeswitch.org (consulting@freeswitch.org)http://www.freeswitchsolutions.comOfficial FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon.comFreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-usersUNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org




Back to top
lists at kavun.ch
Guest





PostPosted: Tue Mar 01, 2016 6:46 am    Post subject: [Freeswitch-users] SRTP breaks my TLS session Reply with quote

Hello all,Pinging the list in search of brilliant minds for more recommendations on how to solve this overwhelmingly frustrating issue.

I just love FS and all it lets me accomplish. But this bug and the unpredictability and inability to effectively troubleshoot just leaves a bad impression, accentuated by the fact that no one seems to care about it. I call it a bug because I do not experience this issue with other SIP servers.

Who is available to exchange SIP credentials in order to cross-test this? Especially if you believe you are immunized!

Best,
Emrah

Quote:
On Feb 28, 2016, at 7:33 PM, Emrah <lists@kavun.ch (lists@kavun.ch)> wrote:
Hello there,I can confirm that a PCAP gives me a bunch of TLS packets.
How do you suggest debugging this?

Thanks!
Quote:
On Feb 26, 2016, at 10:36 AM, Emrah <lists@kavun.ch (lists@kavun.ch)> wrote:
Thanks for this.

This isn’t just a yealink thing. I’ve encountered sporadic issues with soft phones and other desk phones as well.

I didn’t use the PCap capture feature because I had assumed it would give me a bunch of TLS packets. I’ll test that and revert back.

How can we explain that I have more calls failing if I register multiple accounts?

Emrah
Quote:
On Feb 26, 2016, at 6:37 AM, Mario G <mario_fs@mgtech.com (mario_fs@mgtech.com)> wrote:
You may want to run a pcap trace on the Yealink. It’s under settings->Configuration. Start/test/export.
Quote:
On Feb 25, 2016, at 3:35 PM, Brian West <brian@freeswitch.org (brian@freeswitch.org)> wrote:
Sounds like there may be a bug in the yealink if packet size is of issue on TCP/TLS connections.
On Thu, Feb 25, 2016 at 5:13 PM, Emrah <lists@kavun.ch (lists@kavun.ch)> wrote:
Quote:
Hello list,I thought I had solved this issue by reducing my codec list to a minimum, but it still persists, unfortunately. This was to reduce the TLS packet size.
Anytime I enable SRTP on my phones, outgoing calls will randomly fail. The problem goes away when I disable SRTP. I only work over TLS.
Incoming calls work reliably with or without SRTP.

How do you suggest debugging this?
I tried setting up a fresh instance of FS but the issue persists.
Now. It should be noted that calls fail sensibly more often when I have more than one account registered on the same server with the same device.

Any suggestion is welcome. Have you experienced this?

I’m running FreeSWITCH Version 1.6.5 on Debian. My phone in this case is a Yealink SIP-T46G running firmware 28.80.0.95.

E

_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org (consulting@freeswitch.org) FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org) http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org


--
Brian Westbrian@freeswitch.org (brian@freeswitch.org)

Twitter: @FreeSWITCH , @briankwesthttp://www.freeswitchbook.comhttp://www.freeswitchcookbook.com
Got Bugs? Report them here! | Reddit: /r/freeswitch
T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest










_________________________________________________________________________Professional FreeSWITCH Consulting Services: consulting@freeswitch.org (consulting@freeswitch.org)http://www.freeswitchsolutions.comOfficial FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon.comFreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-usersUNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org



_________________________________________________________________________Professional FreeSWITCH Consulting Services: consulting@freeswitch.org (consulting@freeswitch.org)http://www.freeswitchsolutions.comOfficial FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon.comFreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-usersUNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org








Back to top
lists at kavun.ch
Guest





PostPosted: Wed Mar 02, 2016 3:06 pm    Post subject: [Freeswitch-users] SRTP breaks my TLS session Reply with quote

This issue seems to be very connected to the network topology of the client. I am now having this problem with Bria on iOS.On FreeSWITCH there is hardly anything. First invite results in a 407 proxy required, and after that the session fails and FS reports a wrong_call_state.
Is there anyone here using tLS willing to provide me with a SIP account to test this over their instance of FreeSWITCH?

Cheers
Quote:
On Mar 1, 2016, at 12:45 PM, Emrah <lists@kavun.ch (lists@kavun.ch)> wrote:
Hello all,Pinging the list in search of brilliant minds for more recommendations on how to solve this overwhelmingly frustrating issue.

I just love FS and all it lets me accomplish. But this bug and the unpredictability and inability to effectively troubleshoot just leaves a bad impression, accentuated by the fact that no one seems to care about it. I call it a bug because I do not experience this issue with other SIP servers.

Who is available to exchange SIP credentials in order to cross-test this? Especially if you believe you are immunized!

Best,
Emrah

Quote:
On Feb 28, 2016, at 7:33 PM, Emrah <lists@kavun.ch (lists@kavun.ch)> wrote:
Hello there,I can confirm that a PCAP gives me a bunch of TLS packets.
How do you suggest debugging this?

Thanks!
Quote:
On Feb 26, 2016, at 10:36 AM, Emrah <lists@kavun.ch (lists@kavun.ch)> wrote:
Thanks for this.

This isn’t just a yealink thing. I’ve encountered sporadic issues with soft phones and other desk phones as well.

I didn’t use the PCap capture feature because I had assumed it would give me a bunch of TLS packets. I’ll test that and revert back.

How can we explain that I have more calls failing if I register multiple accounts?

Emrah
Quote:
On Feb 26, 2016, at 6:37 AM, Mario G <mario_fs@mgtech.com (mario_fs@mgtech.com)> wrote:
You may want to run a pcap trace on the Yealink. It’s under settings->Configuration. Start/test/export.
Quote:
On Feb 25, 2016, at 3:35 PM, Brian West <brian@freeswitch.org (brian@freeswitch.org)> wrote:
Sounds like there may be a bug in the yealink if packet size is of issue on TCP/TLS connections.
On Thu, Feb 25, 2016 at 5:13 PM, Emrah <lists@kavun.ch (lists@kavun.ch)> wrote:
Quote:
Hello list,I thought I had solved this issue by reducing my codec list to a minimum, but it still persists, unfortunately. This was to reduce the TLS packet size.
Anytime I enable SRTP on my phones, outgoing calls will randomly fail. The problem goes away when I disable SRTP. I only work over TLS.
Incoming calls work reliably with or without SRTP.

How do you suggest debugging this?
I tried setting up a fresh instance of FS but the issue persists.
Now. It should be noted that calls fail sensibly more often when I have more than one account registered on the same server with the same device.

Any suggestion is welcome. Have you experienced this?

I’m running FreeSWITCH Version 1.6.5 on Debian. My phone in this case is a Yealink SIP-T46G running firmware 28.80.0.95.

E

_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org (consulting@freeswitch.org) FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org) http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org


--
Brian Westbrian@freeswitch.org (brian@freeswitch.org)

Twitter: @FreeSWITCH , @briankwesthttp://www.freeswitchbook.comhttp://www.freeswitchcookbook.com
Got Bugs? Report them here! | Reddit: /r/freeswitch
T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest










_________________________________________________________________________Professional FreeSWITCH Consulting Services: consulting@freeswitch.org (consulting@freeswitch.org)http://www.freeswitchsolutions.comOfficial FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon.comFreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-usersUNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org



_________________________________________________________________________Professional FreeSWITCH Consulting Services: consulting@freeswitch.org (consulting@freeswitch.org)http://www.freeswitchsolutions.comOfficial FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon.comFreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-usersUNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org












Back to top
Display posts from previous:   
Post new topic   Reply to topic    VoIP Mailing List Archives Forum Index -> freeSWITCH Users All times are GMT - 5 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group

VoiceMeUp - Corporate & Wholesale VoIP Services