Guys, Some updates. I have discussed this problem with PJSIP support and after detailed investigation session we understood that TLS doesn't work under Symbian OS at all, because pjsip uses RSocket and OpenSSL (which is needed for TLS) uses Open C socket. PJSIP team plan to rewrite some layer which is responsible for communication. So we should wait for this feature... *Vasyl 2009/8/6 Vasyl Strutynskyy <vasyl.strutynskyy at gmail.com> > Unfortunately, we still can't successfully provide Registration over TLS on > Symbain. > > 1. *SSL_Connect() function returns some error -1*. As previously I > described. > > 2. Plus we have new results: on the server side we observe an incoming TLS > connection on port 5061 which is accepted, and the symbian client on the > phone immediately closes the connection without starting the TLS handshake. > > So there are some reasons on client side which don't allow to keep TCP > connection which is needed for TLS. So if TLS isn't keep alive we can't > provide nay SIP messages. > > Still working with this problem. > > *Vasyl > > 2009/8/6 nir elkayam <nir.elkayam at gmail.com> > > hi >> >> can u update on any succsess running TLS on symbian? >> >> thanks, >> >> >> >> On Wed, Aug 5, 2009 at 10:03 PM, Klaus Darilion < >> klaus.mailinglists at pernau.at> wrote: >> >>> Vasyl Strutynskyy wrote: >>> >>>> Klaus, >>>> >>>> I have tried create just TLS transport calling in ua.cpp >>>> status = pjsua_transport_create(PJSIP_TRANSPORT_TLS, &tcfg, &tid); >>>> but still the same problem. >>>> >>>> UDP + TLS means that I called >>>> status = pjsua_transport_create(PJSIP_TRANSPORT_UDP, &tcfg, &tid); >>>> status = pjsua_transport_create(PJSIP_TRANSPORT_TLS, &tcfg, &tid); >>>> because thought one TLS isn't enough. >>>> >>> >>> If you only want to use TLS there is no need to create a UDP transport. >>> TLS transport is enough. >>> >>> Where exactly should I add "transport=tls" in ua.cpp ? >>>> >>> >>> I do not know ua.cpp. A solution would be to define a proxy with URI sip: >>> yourdomain.com;transport=tls >>> >>> I'm trying TLS only with Symbian because I need only for Symbian. >>>> >>> >>> Unfortunately I have never tried Symbian yet thus I do not know it it >>> should work. >>> >>> Maybe this can help you: >>> http://discussion.forum.nokia.com/forum/showthread.php?t=93263 >>> >>> regards >>> klaus >>> >>> >>>> Best Regards >>>> *Vasyl >>>> >>>> 2009/8/5 Klaus Darilion <klaus.mailinglists at pernau.at <mailto: >>>> klaus.mailinglists at pernau.at>> >>>> >>>> >>>> >>>> Vasyl Strutynskyy schrieb: >>>> >>>> The main point that error happens inside the client without even >>>> sending any data. >>>> >>>> >>>> Please read next statements in details to see what we are doing >>>> >>>> 1. We use PJSIP code gotten from SVN trunk approx one month >>>> ago. >>>> 2. We use symbian console application to provide testing (path: >>>> >>>> pjproject\pjsip-apps\src\symbian_ua\). >>>> 1. Please be informed that we can successfully register >>>> and >>>> >>>> make outgoing call using this symbian console app >>>> over UDP. >>>> We made some code changes for this purpose, because by >>>> default it didn't want to call. >>>> 3. Then we built PJSIP code with TLS support like described >>>> here >>>> >>>> (http://trac.pjsip.org/repos/wiki/TLS). Additionaly >>>> installed Open >>>> C plugin for Symban with openssl library for that. >>>> 4. We tried to REGISTER to our proxy server which supports >>>> TLS. For >>>> >>>> that we changed code in *ua.cpp* file according to TLS >>>> needs (add >>>> prefixes as "sips:") plus created TLS transport. Also we >>>> tried >>>> different combinations: TLS + TCP, TLS + UDP, just TLS, but >>>> the >>>> same result no data sending to the server, everything >>>> happens >>>> inside the client. >>>> >>>> >>>> Actually sips is not necessary - sip is fine too. Just add the >>>> transport=tls parameter to the request URI. >>>> >>>> How can you try TLS+UDP. If you create the transport you can only >>>> specify either TLS or UDP. If you use TLS, this is always TLS over >>>> TCP. >>>> >>>> Have you tried using TLS without symbian? >>>> >>>> regards >>>> klaus >>>> >>>> >>>> // add TLS >>>> pjsua_transport_config_default(&tcfg); >>>> status = pjsua_transport_create(PJSIP_TRANSPORT_TLS, >>>> &tcfg, &tid); >>>> if (status != PJ_SUCCESS) { >>>> pjsua_perror(THIS_FILE, "Error creating TLS >>>> transport", >>>> status); >>>> pjsua_destroy(); >>>> return status; >>>> } >>>> >>>> Waiting for your response/suggestions. >>>> >>>> Thanks in advance >>>> *Vasyl >>>> >>>> >>>> 2009/8/5 Klaus Darilion <klaus.mailinglists at pernau.at >>>> <mailto:klaus.mailinglists at pernau.at> >>>> <mailto:klaus.mailinglists at pernau.at >>>> <mailto:klaus.mailinglists at pernau.at>>> >>>> >>>> >>>> I would try to debug the problem why the transport was >>>> destroyed. >>>> Verify if TCP connection is established or not, if >>>> ServerHello and >>>> Cleint Hello are exchanged, or if the error happens inside the >>>> client without even sending any data >>>> >>>> klaus >>>> >>>> Vasyl Strutynskyy schrieb: >>>> >>>> Hi, >>>> >>>> I have faced with the same problem, SSL_Connect() returns >>>> -1, >>>> did you resolve this issue? >>>> >>>> I have used console symbian app. Client logs below: >>>> >>>> 22:46:30.941 pjsua_acc.c Account >>>> sips:102 at morrigan.ua <sips%3A102 at morrigan.ua> <mailto: >>>> sips%3A102 at morrigan.ua <sips%253A102 at morrigan.ua>> >>>> <mailto:sips%3A102 at morrigan.ua <sips%253A102 at morrigan.ua> >>>> <mailto:sips%253A102 at morrigan.ua <sips%25253A102 at morrigan.ua>>> >>>> <mailto:sips%3A102 at morrigan.ua <sips%253A102 at morrigan.ua><mailto: >>>> sips%253A102 at morrigan.ua <sips%25253A102 at morrigan.ua>> >>>> <mailto:sips%253A102 at morrigan.ua<sips%25253A102 at morrigan.ua> >>>> <mailto:sips%25253A102 at morrigan.ua<sips%2525253A102 at morrigan.ua>>>> >>>> added with id 1 >>>> >>>> >>>> 22:46:30.950 tlsc0x727fbc TLS client transport created >>>> 22:46:30.989 tlsc0x727fbc TLS transport destroyed with >>>> reason 171168: Unknown error when performing SSL connect() >>>> (PJSIP_TLS_ECONNECT) >>>> 22:46:30.990 tsx0x726cac Failed to send Request msg >>>> REGISTER/cseq=33140 (tdta0x727258)! err=171168 (Unknown >>>> error >>>> when performing SSL connect() (PJSIP_TLS_ECONNECT)) >>>> 22:46:31.001 pjsua_acc.c SIP registration failed, >>>> status=503 (Unknown error when performing SSL connect() >>>> (PJSIP_TLS_ECONNECT)) >>>> 22:46:31.031 sip_reg.c Error sending request, >>>> status=171168 >>>> 22:46:31.031 pjsua_acc.c Unable to create/send >>>> REGISTER: >>>> Unknown error when performing SSL connect() >>>> (PJSIP_TLS_ECONNECT) >>>> [status=171168] >>>> >>>> Thanks >>>> >>>> >>>> >>>> ------------------------------------------------------------------------ >>>> >>>> _______________________________________________ >>>> Visit our blog: http://blog.pjsip.org >>>> >>>> pjsip mailing list >>>> pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org> >>>> <mailto:pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>> >>>> >>>> >>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org >>>> >>>> >>>> _______________________________________________ >>>> Visit our blog: http://blog.pjsip.org >>>> >>>> pjsip mailing list >>>> pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org> >>>> <mailto:pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>> >>>> >>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org >>>> >>>> >>>> >>>> >>>> ------------------------------------------------------------------------ >>>> >>>> _______________________________________________ >>>> Visit our blog: http://blog.pjsip.org >>>> >>>> pjsip mailing list >>>> pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org> >>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org >>>> >>>> >>>> _______________________________________________ >>>> Visit our blog: http://blog.pjsip.org >>>> >>>> pjsip mailing list >>>> pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org> >>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org >>>> >>>> >>>> >>>> ------------------------------------------------------------------------ >>>> >>>> _______________________________________________ >>>> Visit our blog: http://blog.pjsip.org >>>> >>>> pjsip mailing list >>>> pjsip at lists.pjsip.org >>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org >>>> >>> >>> >>> _______________________________________________ >>> Visit our blog: http://blog.pjsip.org >>> >>> pjsip mailing list >>> pjsip at lists.pjsip.org >>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org >>> >> >> >> >> -- >> ??? ?????? >> ??: 050-3930056 >> nir.elkayam at gmail.com >> >> >> _______________________________________________ >> Visit our blog: http://blog.pjsip.org >> >> pjsip mailing list >> pjsip at lists.pjsip.org >> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org >> >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.pjsip.org/pipermail/pjsip_lists.pjsip.org/attachments/20090811/e5817028/attachment-0001.html>
