Genesys CTI User Forum

Genesys CTI User Forum => Genesys CTI Technical Discussion => Topic started by: alexandercoachman on October 03, 2011, 03:59:02 PM

Title: SIPServer TLS, without certificate
Post by: alexandercoachman on October 03, 2011, 03:59:02 PM

I would like to connect my SIP Server to an external gateway. We have problems with the TCP connections (doesnt arrives a TCP ACK), so we would like to try with TLS.

I set this option in the SIPServer application to 5061, I restarted the SIPServer but the netstat doesnt shows the listening port. In the SIP server logs I found:

7:21:57.250:(1) TLS options not configured correctly for port=5061.

I know, that I should use a certificate, but it doesnt work without this?

Rgds, Sandor

Title: Re: SIPServer TLS, without certificate
Post by: René on October 03, 2011, 06:25:24 PM

Hi,

Certificate is mandatory for TLS and it cannot work without it. Please read some info about TLS (SSL) to understand how it works.

R.

Title: Re: SIPServer TLS, without certificate
Post by: alexandercoachman on October 03, 2011, 08:54:17 PM

Thanks René.

Title: Re: SIPServer TLS, without certificate
Post by: alexandercoachman on October 04, 2011, 11:15:13 AM

Should I configure another genesys components with TLS, or is it enough on the trunk DN? Should I configure it on VoIP DN (treatment service)?

We have a working TLS connection between SIPServer and an external gateway, but when the media stream starts, (in logs it seems that everything works fine) on the client videoconferencing system doesnt appear any video or voice...

Any ideas?

Title: Re: SIPServer TLS, without certificate
Post by: alexandercoachman on October 04, 2011, 11:15:55 AM

And this is the same problem with using TCP.
??? ??? ??? ??? ??? ??? ??? ??? ???

I dont have any idea how to resolve this...

Title: Re: SIPServer TLS, without certificate
Post by: rpenney on October 06, 2011, 12:54:00 PM

Wireshark is your friend  :D

See where you can span the traffic and use the features of Wireshark to look at the SIP messages and the RTP streams.

You can often get the gateway to span the traffic for you.

Add the TLS certificates into wireshark and it will decode the streams.

What are you using to generate the video or voice?

Title: Re: SIPServer TLS, without certificate
Post by: Allan on October 12, 2011, 01:55:11 PM

Refer page 87 of the Security Deployment guide onwards

Title: Re: SIPServer TLS, without certificate
Post by: alexandercoachman on October 12, 2011, 03:10:00 PM

Thank you Allan.
It works now with thumbprint.

Sandor