Hi Jan,
Please, see attached the level 5 trace of the bug.
Jean
Le Mardi 11 août 2015 11h05, Jan Willamowius <jan@xxxxxxxxxxxxxx> a écrit :
Hi Jean,
what you describe in this mail is not the bug you showed in your first
posting:
> > 2015/08/01 13:53:34.184 0 assert.cxx(112) PWLib Assertion fail: Invalid array element, file /usr/local/ptlib-2.10.9//include/ptlib/array.h, line 1063, Error=22
This issue in your first mail is a bug in GnuGk that we should fix.
To do so I need a stack trace or at least a level 5 trace from when it occurs.
The errors your post now seem to be from forcing GnuGk to use TLS encryption
with an endpoint that does not support TLS.
Except for GnuGk and custom H323Plus endpoints I don't know any device that does
supports TLS.
Regards,
Jan
--
Jan Willamowius, Founder of the GNU Gatekeeper Project
EMail : jan@xxxxxxxxxxxxxx
Website: http://www.gnugk.org
Support: http://www.willamowius.com/gnugk-support.html
Relaxed Communications GmbH
Frahmredder 91
22393 Hamburg
Geschäftsführer: Jan Willamowius
HRB 125261 (Amtsgericht Hamburg)
USt-IdNr: DE286003584
Jean Lÿffffe9olein BEBEY wrote:
> Hi Jan,
> The problem occured when i call an openmcu number on the same server than gnugk. I stopped openmcu and i did other tests.
> ----------- test No 1: Only TLS Enabled
> [TLS]
> EnableTLS=1
> PrivateKey=/etc/asterisk/keys/pbx.xxx.com.pem
> Certificates=/etc/asterisk/keys/pbx.xxx.com.pem
> CAFile=/etc/asterisk/keys/sub.class1.server.ca.pem
> RequireRemoteCertificate=0
> [EP::test1]
> UseTLS=1
> - external user test1 can't call internal user test2 : i have this error in the log (file gnugnk_TLS_Only.log)
> ProxyChannel.cxx(12947) TLS TLS protocol error in SSL_connect(): 1 / error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol
>
>
> - internal user test2 can call external user test1 : it's ok
>
>
> ------------ test No 2: TLS + Media Encryption Enabled
> [RoutedMode]GKRouted=1
> H245Routed=0
> CallSignalPort=1721
> AcceptUnregisteredCalls=1H245TunnelingTranslation=1
> SupportNATedEndpoints=1
> H245PortRange=31000-31999
> Q931PortRange=30000-30999
> DropCallsByReleaseComplete=1EnableH46018=1SendReleaseCompleteOnDRQ=1
> EnableH235HalfCallMedia=1
> H235HalfCallMediaStrength=256
> RequireH235HalfCallMedia=1
> RemoveH235Call=192.168.1.0/24
> EnableH235HalfCallMediaKeyUpdates=1
> [TLS]
> EnableTLS=1
> PrivateKey=/etc/asterisk/keys/pbx.xxx.com.pem
> Certificates=/etc/asterisk/keys/pbx.xxx.com.pem
> CAFile=/etc/asterisk/keys/sub.class1.server.ca.pem
> RequireRemoteCertificate=0
> [EP::test1]
> UseTLS=1
>
> - external user test1 can't call internal user test2 : i have this error in the log (file gnugnk_TLS_MediaEncrypt.log)
> ProxyChannel.cxx(12947) TLS TLS protocol error in SSL_connect(): 1 / error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol
>
>
> - internal user test2 can call external user test1 but without audio and video : i have this error in the log (file gnugnk_TLS_MediaEncrypt.log)
> h235crypto.cxx(314) H235 Decrypt error: wrong final block lengthh235crypto.cxx(540) H235 EVP_DecryptFinal_ex() failed - incorrect padding ?
>
> Thank for any help.
> Jean
>
>
> Le Lundi 10 août 2015 12h01, Jan Willamowius <jan@xxxxxxxxxxxxxx> a écrit :
>
>
> Hi Jean.
>
> the best way to debug this would be for you to create a stack trace of
> the crash. See
> http://www.gnugk.org/gnugk-manual-14.html#ss14.3
>
> The trace you posted doesn't contain enough information to see what
> went wrong. We need at least a level 5 trace to see what was inside the
> message that cause the crash.
>
> Regards,
> Jan
>
> --
> Jan Willamowius, Founder of the GNU Gatekeeper Project
> EMail : jan@xxxxxxxxxxxxxx
> Website: http://www.gnugk.org
> Support: http://www.willamowius.com/gnugk-support.html
>
> Relaxed Communications GmbH
> Frahmredder 91
> 22393 Hamburg
> Geschäftsführer: Jan Willamowius
> HRB 125261 (Amtsgericht Hamburg)
> USt-IdNr: DE286003584
>
> Jean Lÿffffe9olein BEBEY wrote:
> > Hil all,
> > I have successfully compiled GNU 3.9 with theses options:
> > ----- ptlib :- ./configure --enable-openldap --enable-openssl
> > - make optnoshared
> > ----- h323plus./configure --enable-h235 --enable-h235-256 --enable-h46025 --enable-h46026
> > - make optnoshared
> > ------ gnugk./configure --enable-h46018
> > - make optnoshared
> >
> > -------- gatekeeper.iniI added the media encryption in [RoutedMode] :
> > EnableH235HalfCallMedia=1
> > H235HalfCallMediaStrength=256
> > RequireH235HalfCallMedia=0
> > RemoveH235Call=192.168.1.0/24
> >
> > and start gnugk :
> > Gatekeeper(GNU) Version(3.9.0) Ext(pthreads=1,radius=1,mysql=1,pgsql=1,firebird=0,odbc=0,sqlite=0,large_fdset=0,crypto/ssl=1,h46018=1,h46023=1,ldap=1,ssh=1,ipv6=0,h235media=1,lua=1,h46017=1,snmp=1,h46026=0) H323Plus(1.26.5) PTLib(2.10.9) Build(Aug 1 2015, 11:49:37) Sys(Linux x86_64 2.6.32-431.el6.x86_64)
> > When i make a call, i have this error :
> > 2015/08/01 13:53:30.732 2 RasSrv.cxx(177) RAS Read from 41.202.219.74:33554
> > 2015/08/01 13:53:30.732 2 RasSrv.cxx(283) RAS Received ARQ from 41.202.219.74:33554
> > 2015/08/01 13:53:30.733 1 RasSrv.cxx(412) RAS ARQ Received from 41.202.219.74:33554
> > 2015/08/01 13:53:30.733 2 RasTbl.cxx(1518) RASTBL Gateway 2475510801_endp matched by prefix 4, priority: 1
> > 2015/08/01 13:53:30.734 2 RasTbl.cxx(4727) CallTable::Insert(CALL) Call No. 1, total sessions : 1
> > 2015/08/01 13:53:30.734 2 RasSrv.cxx(451) ACF|41.202.219.74:33554|59434296_endp|5302|402:dialedDigits|jlbebey:h323_ID=3008:dialedDigits|false|1c-74-df-76-03-00-00-1f-03-da-0b-e8-01-a6-e7-95|ToBeDecided;
> > 2015/08/01 13:53:30.734 2 RasSrv.cxx(295) RAS Send ACF to 41.202.219.74:33554
> > 2015/08/01 13:53:33.022 1 ProxyChannel.cxx(3646) Removing External IP from destCallSignalAddr in Setup
> > 2015/08/01 13:53:33.022 2 gkacct.cxx(961) GKACCT Successfully logged event 1 for call no. 1
> > 2015/08/01 13:53:33.038 1 ProxyChannel.cxx(1583) Call 1: h245Routed=1 proxy=1
> > 2015/08/01 13:53:33.058 2 gkacct.cxx(961) GKACCT Successfully logged event 32 for call no. 1
> > 2015/08/01 13:53:34.000 2 RasSrv.cxx(177) RAS Read from 41.202.219.74:33554
> > 2015/08/01 13:53:34.000 2 RasSrv.cxx(283) RAS Received RRQ from 41.202.219.74:33554
> > 2015/08/01 13:53:34.001 1 RasSrv.cxx(412) RAS RRQ Received from 41.202.219.74:33554
> > 2015/08/01 13:53:34.002 2 RasSrv.cxx(295) RAS Send RCF to 41.202.219.74:33554
> > 2015/08/01 13:53:34.184 0 assert.cxx(112) PWLib Assertion fail: Invalid array element, file /usr/local/ptlib-2.10.9//include/ptlib/array.h, line 1063, Error=22
> >
> > Any help ?
> >
> > Jean
> >
>
>
>
what you describe in this mail is not the bug you showed in your first
posting:
> > 2015/08/01 13:53:34.184 0 assert.cxx(112) PWLib Assertion fail: Invalid array element, file /usr/local/ptlib-2.10.9//include/ptlib/array.h, line 1063, Error=22
This issue in your first mail is a bug in GnuGk that we should fix.
To do so I need a stack trace or at least a level 5 trace from when it occurs.
The errors your post now seem to be from forcing GnuGk to use TLS encryption
with an endpoint that does not support TLS.
Except for GnuGk and custom H323Plus endpoints I don't know any device that does
supports TLS.
Regards,
Jan
--
Jan Willamowius, Founder of the GNU Gatekeeper Project
EMail : jan@xxxxxxxxxxxxxx
Website: http://www.gnugk.org
Support: http://www.willamowius.com/gnugk-support.html
Relaxed Communications GmbH
Frahmredder 91
22393 Hamburg
Geschäftsführer: Jan Willamowius
HRB 125261 (Amtsgericht Hamburg)
USt-IdNr: DE286003584
Jean Lÿffffe9olein BEBEY wrote:
> Hi Jan,
> The problem occured when i call an openmcu number on the same server than gnugk. I stopped openmcu and i did other tests.
> ----------- test No 1: Only TLS Enabled
> [TLS]
> EnableTLS=1
> PrivateKey=/etc/asterisk/keys/pbx.xxx.com.pem
> Certificates=/etc/asterisk/keys/pbx.xxx.com.pem
> CAFile=/etc/asterisk/keys/sub.class1.server.ca.pem
> RequireRemoteCertificate=0
> [EP::test1]
> UseTLS=1
> - external user test1 can't call internal user test2 : i have this error in the log (file gnugnk_TLS_Only.log)
> ProxyChannel.cxx(12947) TLS TLS protocol error in SSL_connect(): 1 / error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol
>
>
> - internal user test2 can call external user test1 : it's ok
>
>
> ------------ test No 2: TLS + Media Encryption Enabled
> [RoutedMode]GKRouted=1
> H245Routed=0
> CallSignalPort=1721
> AcceptUnregisteredCalls=1H245TunnelingTranslation=1
> SupportNATedEndpoints=1
> H245PortRange=31000-31999
> Q931PortRange=30000-30999
> DropCallsByReleaseComplete=1EnableH46018=1SendReleaseCompleteOnDRQ=1
> EnableH235HalfCallMedia=1
> H235HalfCallMediaStrength=256
> RequireH235HalfCallMedia=1
> RemoveH235Call=192.168.1.0/24
> EnableH235HalfCallMediaKeyUpdates=1
> [TLS]
> EnableTLS=1
> PrivateKey=/etc/asterisk/keys/pbx.xxx.com.pem
> Certificates=/etc/asterisk/keys/pbx.xxx.com.pem
> CAFile=/etc/asterisk/keys/sub.class1.server.ca.pem
> RequireRemoteCertificate=0
> [EP::test1]
> UseTLS=1
>
> - external user test1 can't call internal user test2 : i have this error in the log (file gnugnk_TLS_MediaEncrypt.log)
> ProxyChannel.cxx(12947) TLS TLS protocol error in SSL_connect(): 1 / error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol
>
>
> - internal user test2 can call external user test1 but without audio and video : i have this error in the log (file gnugnk_TLS_MediaEncrypt.log)
> h235crypto.cxx(314) H235 Decrypt error: wrong final block lengthh235crypto.cxx(540) H235 EVP_DecryptFinal_ex() failed - incorrect padding ?
>
> Thank for any help.
> Jean
>
>
> Le Lundi 10 août 2015 12h01, Jan Willamowius <jan@xxxxxxxxxxxxxx> a écrit :
>
>
> Hi Jean.
>
> the best way to debug this would be for you to create a stack trace of
> the crash. See
> http://www.gnugk.org/gnugk-manual-14.html#ss14.3
>
> The trace you posted doesn't contain enough information to see what
> went wrong. We need at least a level 5 trace to see what was inside the
> message that cause the crash.
>
> Regards,
> Jan
>
> --
> Jan Willamowius, Founder of the GNU Gatekeeper Project
> EMail : jan@xxxxxxxxxxxxxx
> Website: http://www.gnugk.org
> Support: http://www.willamowius.com/gnugk-support.html
>
> Relaxed Communications GmbH
> Frahmredder 91
> 22393 Hamburg
> Geschäftsführer: Jan Willamowius
> HRB 125261 (Amtsgericht Hamburg)
> USt-IdNr: DE286003584
>
> Jean Lÿffffe9olein BEBEY wrote:
> > Hil all,
> > I have successfully compiled GNU 3.9 with theses options:
> > ----- ptlib :- ./configure --enable-openldap --enable-openssl
> > - make optnoshared
> > ----- h323plus./configure --enable-h235 --enable-h235-256 --enable-h46025 --enable-h46026
> > - make optnoshared
> > ------ gnugk./configure --enable-h46018
> > - make optnoshared
> >
> > -------- gatekeeper.iniI added the media encryption in [RoutedMode] :
> > EnableH235HalfCallMedia=1
> > H235HalfCallMediaStrength=256
> > RequireH235HalfCallMedia=0
> > RemoveH235Call=192.168.1.0/24
> >
> > and start gnugk :
> > Gatekeeper(GNU) Version(3.9.0) Ext(pthreads=1,radius=1,mysql=1,pgsql=1,firebird=0,odbc=0,sqlite=0,large_fdset=0,crypto/ssl=1,h46018=1,h46023=1,ldap=1,ssh=1,ipv6=0,h235media=1,lua=1,h46017=1,snmp=1,h46026=0) H323Plus(1.26.5) PTLib(2.10.9) Build(Aug 1 2015, 11:49:37) Sys(Linux x86_64 2.6.32-431.el6.x86_64)
> > When i make a call, i have this error :
> > 2015/08/01 13:53:30.732 2 RasSrv.cxx(177) RAS Read from 41.202.219.74:33554
> > 2015/08/01 13:53:30.732 2 RasSrv.cxx(283) RAS Received ARQ from 41.202.219.74:33554
> > 2015/08/01 13:53:30.733 1 RasSrv.cxx(412) RAS ARQ Received from 41.202.219.74:33554
> > 2015/08/01 13:53:30.733 2 RasTbl.cxx(1518) RASTBL Gateway 2475510801_endp matched by prefix 4, priority: 1
> > 2015/08/01 13:53:30.734 2 RasTbl.cxx(4727) CallTable::Insert(CALL) Call No. 1, total sessions : 1
> > 2015/08/01 13:53:30.734 2 RasSrv.cxx(451) ACF|41.202.219.74:33554|59434296_endp|5302|402:dialedDigits|jlbebey:h323_ID=3008:dialedDigits|false|1c-74-df-76-03-00-00-1f-03-da-0b-e8-01-a6-e7-95|ToBeDecided;
> > 2015/08/01 13:53:30.734 2 RasSrv.cxx(295) RAS Send ACF to 41.202.219.74:33554
> > 2015/08/01 13:53:33.022 1 ProxyChannel.cxx(3646) Removing External IP from destCallSignalAddr in Setup
> > 2015/08/01 13:53:33.022 2 gkacct.cxx(961) GKACCT Successfully logged event 1 for call no. 1
> > 2015/08/01 13:53:33.038 1 ProxyChannel.cxx(1583) Call 1: h245Routed=1 proxy=1
> > 2015/08/01 13:53:33.058 2 gkacct.cxx(961) GKACCT Successfully logged event 32 for call no. 1
> > 2015/08/01 13:53:34.000 2 RasSrv.cxx(177) RAS Read from 41.202.219.74:33554
> > 2015/08/01 13:53:34.000 2 RasSrv.cxx(283) RAS Received RRQ from 41.202.219.74:33554
> > 2015/08/01 13:53:34.001 1 RasSrv.cxx(412) RAS RRQ Received from 41.202.219.74:33554
> > 2015/08/01 13:53:34.002 2 RasSrv.cxx(295) RAS Send RCF to 41.202.219.74:33554
> > 2015/08/01 13:53:34.184 0 assert.cxx(112) PWLib Assertion fail: Invalid array element, file /usr/local/ptlib-2.10.9//include/ptlib/array.h, line 1063, Error=22
> >
> > Any help ?
> >
> > Jean
> >
>
>
>
Attachment:
gnugk_trace.log
Description: Binary data
------------------------------------------------------------------------------
_______________________________________________________ Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/
