Re : Re: error in version 3.9

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Jan, 

It's fixed the error.

Tanks.

Jean.

Envoyé depuis Yahoo Mail pour Android


De:"Jan Willamowius" <jan@xxxxxxxxxxxxxx>
Date:mer. j août AM à 11:52
Objet:Re: error in version 3.9

Hi Jean,

it seems you are hitting the maximum size of ASN.1 arrays in PTLib:
OpenMCU-ru offers a lot of codecs and when GnuGk adds an encrypted
version for each, it goes over the default maximum of 128 entries.

Could you please set

[Gatekeeper::Main]
MaxASNArraySize=400

and report back if this fixes the error ?

If that fixes the error, I'll add code to let GnuGk automatically check
if it hits the limit and avoid the error.

Also, beware that raising the limit in GnuGk can cause the creation of
messages that go over the limits in other vendor implementations.

Regards,
Jan

--
Jan Willamowius, Founder of the GNU Gatekeeper Project
EMail  : jan@xxxxxxxxxxxxxx
Website: http://www.gnugk.org
Support: http://www.willamowius.com/gnugk-support.html

Relaxed Communications GmbH
Frahmredder 91
22393 Hamburg
Geschäftsführer: Jan Willamowius
HRB 125261 (Amtsgericht Hamburg)
USt-IdNr: DE286003584


Jean Lÿffffe9olein BEBEY wrote:
> Hi Jan,
> Please, see attached the level 5 trace of the bug.

>
> Jean
>      Le Mardi 11 août 2015 11h05, Jan Willamowius <jan@xxxxxxxxxxxxxx> a écrit :
>   
>
>  Hi Jean,
>
> what you describe in this mail is not the bug you showed in your first
> posting:
>
> > > 2015/08/01 13:53:34.184 0             assert.cxx(112)   PWLib   Assertion fail: Invalid array element, file /usr/local/ptlib-2.10.9//include/ptlib/array.h, line 1063, Error=22
>
> This issue in your first mail is a bug in GnuGk that we should fix.
> To do so I need a stack trace or at least a level 5 trace from when it occurs.
>
>
> The errors your post now seem to be from forcing GnuGk to use TLS encryption
> with an endpoint that does not support TLS.
> Except for GnuGk and custom H323Plus endpoints I don't know any device that does
> supports TLS.
>
> Regards,
> Jan
>
> --
> Jan Willamowius, Founder of the GNU Gatekeeper Project
> EMail  : jan@xxxxxxxxxxxxxx
> Website: http://www.gnugk.org
> Support: http://www.willamowius.com/gnugk-support.html
>
> Relaxed Communications GmbH
> Frahmredder 91
> 22393 Hamburg
> Geschäftsführer: Jan Willamowius
> HRB 125261 (Amtsgericht Hamburg)
> USt-IdNr: DE286003584
>
> Jean Lÿffffe9olein BEBEY wrote:
> > Hi Jan,
> > The problem occured when i call an openmcu number on the same server than gnugk. I stopped openmcu and i did other tests.
> > -----------  test No 1: Only TLS Enabled
> > [TLS]
> > EnableTLS=1
> > PrivateKey=/etc/asterisk/keys/pbx.xxx.com.pem
> > Certificates=/etc/asterisk/keys/pbx.xxx.com.pem
> > CAFile=/etc/asterisk/keys/sub.class1.server.ca.pem
> > RequireRemoteCertificate=0
> > [EP::test1]
> > UseTLS=1
> >           - external user test1 can't call internal user test2 : i have this error in the log (file gnugnk_TLS_Only.log)
> >  ProxyChannel.cxx(12947)    TLS    TLS protocol error in SSL_connect(): 1 / error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol
> >
> >
> >            -  internal user test2 can call external user test1 : it's ok
> >
> >
> > ------------  test No 2: TLS + Media Encryption Enabled
> > [RoutedMode]GKRouted=1
> > H245Routed=0
> > CallSignalPort=1721
> > AcceptUnregisteredCalls=1H245TunnelingTranslation=1
> > SupportNATedEndpoints=1
> > H245PortRange=31000-31999
> > Q931PortRange=30000-30999
> > DropCallsByReleaseComplete=1EnableH46018=1SendReleaseCompleteOnDRQ=1
> > EnableH235HalfCallMedia=1
> > H235HalfCallMediaStrength=256
> > RequireH235HalfCallMedia=1
> > RemoveH235Call=192.168.1.0/24
> > EnableH235HalfCallMediaKeyUpdates=1
> > [TLS]
> > EnableTLS=1
> > PrivateKey=/etc/asterisk/keys/pbx.xxx.com.pem
> > Certificates=/etc/asterisk/keys/pbx.xxx.com.pem
> > CAFile=/etc/asterisk/keys/sub.class1.server.ca.pem
> > RequireRemoteCertificate=0
> > [EP::test1]
> > UseTLS=1
> >
> >           - external user test1 can't call internal user test2 : i have this error in the log (file gnugnk_TLS_MediaEncrypt.log)
> >  ProxyChannel.cxx(12947)    TLS    TLS protocol error in SSL_connect(): 1 / error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol
> >
> >
> >            -  internal user test2 can call external user test1 but without audio and video : i have this error in the log (file gnugnk_TLS_MediaEncrypt.log)
> > h235crypto.cxx(314)    H235    Decrypt error: wrong final block lengthh235crypto.cxx(540)    H235    EVP_DecryptFinal_ex() failed - incorrect padding ?
> >
> > Thank for any help.
> > Jean
> >
> >
> >      Le Lundi 10 août 2015 12h01, Jan Willamowius <jan@xxxxxxxxxxxxxx> a écrit :
> >   
> >
> >  Hi Jean.
> >
> > the best way to debug this would be for you to create a stack trace of
> > the crash. See
> > http://www.gnugk.org/gnugk-manual-14.html#ss14.3
> >
> > The trace you posted doesn't contain enough information to see what
> > went wrong. We need at least a level 5 trace to see what was inside the
> > message that cause the crash.
> >
> > Regards,
> > Jan
> >
> > --
> > Jan Willamowius, Founder of the GNU Gatekeeper Project
> > EMail  : jan@xxxxxxxxxxxxxx
> > Website: http://www.gnugk.org
> > Support: http://www.willamowius.com/gnugk-support.html
> >
> > Relaxed Communications GmbH
> > Frahmredder 91
> > 22393 Hamburg
> > Geschäftsführer: Jan Willamowius
> > HRB 125261 (Amtsgericht Hamburg)
> > USt-IdNr: DE286003584
> >
> > Jean Lÿffffe9olein BEBEY wrote:
> > > Hil all,
> > > I have successfully compiled GNU 3.9 with theses options:
> > > ----- ptlib :- ./configure --enable-openldap --enable-openssl
> > > - make optnoshared
> > > ----- h323plus./configure --enable-h235 --enable-h235-256 --enable-h46025 --enable-h46026
> > > - make optnoshared
> > > ------ gnugk./configure --enable-h46018
> > > - make optnoshared
> > >
> > > -------- gatekeeper.iniI added the media encryption in [RoutedMode] :
> > > EnableH235HalfCallMedia=1
> > > H235HalfCallMediaStrength=256
> > > RequireH235HalfCallMedia=0
> > > RemoveH235Call=192.168.1.0/24
> > >
> > > and start gnugk :
> > > Gatekeeper(GNU) Version(3.9.0) Ext(pthreads=1,radius=1,mysql=1,pgsql=1,firebird=0,odbc=0,sqlite=0,large_fdset=0,crypto/ssl=1,h46018=1,h46023=1,ldap=1,ssh=1,ipv6=0,h235media=1,lua=1,h46017=1,snmp=1,h46026=0) H323Plus(1.26.5) PTLib(2.10.9) Build(Aug  1 2015, 11:49:37) Sys(Linux x86_64 2.6.32-431.el6.x86_64)
> > > When i make a call, i have this error :
> > > 2015/08/01 13:53:30.732 2             RasSrv.cxx(177)   RAS     Read from 41.202.219.74:33554
> > > 2015/08/01 13:53:30.732 2             RasSrv.cxx(283)   RAS     Received ARQ from 41.202.219.74:33554
> > > 2015/08/01 13:53:30.733 1             RasSrv.cxx(412)   RAS     ARQ Received from 41.202.219.74:33554
> > > 2015/08/01 13:53:30.733 2             RasTbl.cxx(1518)  RASTBL  Gateway 2475510801_endp matched by prefix 4, priority: 1
> > > 2015/08/01 13:53:30.734 2             RasTbl.cxx(4727)  CallTable::Insert(CALL) Call No. 1, total sessions : 1
> > > 2015/08/01 13:53:30.734 2             RasSrv.cxx(451)   ACF|41.202.219.74:33554|59434296_endp|5302|402:dialedDigits|jlbebey:h323_ID=3008:dialedDigits|false|1c-74-df-76-03-00-00-1f-03-da-0b-e8-01-a6-e7-95|ToBeDecided;
> > > 2015/08/01 13:53:30.734 2             RasSrv.cxx(295)   RAS     Send ACF to 41.202.219.74:33554
> > > 2015/08/01 13:53:33.022 1       ProxyChannel.cxx(3646)  Removing External IP from destCallSignalAddr in Setup
> > > 2015/08/01 13:53:33.022 2             gkacct.cxx(961)   GKACCT  Successfully logged event 1 for call no. 1
> > > 2015/08/01 13:53:33.038 1       ProxyChannel.cxx(1583)  Call 1: h245Routed=1 proxy=1
> > > 2015/08/01 13:53:33.058 2             gkacct.cxx(961)   GKACCT  Successfully logged event 32 for call no. 1
> > > 2015/08/01 13:53:34.000 2             RasSrv.cxx(177)   RAS     Read from 41.202.219.74:33554
> > > 2015/08/01 13:53:34.000 2             RasSrv.cxx(283)   RAS     Received RRQ from 41.202.219.74:33554
> > > 2015/08/01 13:53:34.001 1             RasSrv.cxx(412)   RAS     RRQ Received from 41.202.219.74:33554
> > > 2015/08/01 13:53:34.002 2             RasSrv.cxx(295)   RAS     Send RCF to 41.202.219.74:33554
> > > 2015/08/01 13:53:34.184 0             assert.cxx(112)   PWLib   Assertion fail: Invalid array element, file /usr/local/ptlib-2.10.9//include/ptlib/array.h, line 1063, Error=22
> > >
> > > Any help ?
> > >
> > > Jean
------------------------------------------------------------------------------
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux