hi, thanks for the update. did they say when they are planing to implement this feature? I didn't see it in the roadmap.. thanks again, On Tue, Aug 11, 2009 at 12:08 PM, Vasyl Strutynskyy < vasyl.strutynskyy at gmail.com> wrote: > Guys, > > Some updates. > > I have discussed this problem with PJSIP support and after detailed > investigation session we understood that TLS doesn't work under Symbian OS > at all, because pjsip uses RSocket and OpenSSL (which is needed for TLS) > uses Open C socket. > > PJSIP team plan to rewrite some layer which is responsible for > communication. > > So we should wait for this feature... > > *Vasyl > > 2009/8/6 Vasyl Strutynskyy <vasyl.strutynskyy at gmail.com> > >> Unfortunately, we still can't successfully provide Registration over TLS >> on Symbain. >> >> 1. *SSL_Connect() function returns some error -1*. As previously I >> described. >> >> 2. Plus we have new results: on the server side we observe an incoming TLS >> connection on port 5061 which is accepted, and the symbian client on the >> phone immediately closes the connection without starting the TLS handshake. >> >> So there are some reasons on client side which don't allow to keep TCP >> connection which is needed for TLS. So if TLS isn't keep alive we can't >> provide nay SIP messages. >> >> Still working with this problem. >> >> *Vasyl >> >> 2009/8/6 nir elkayam <nir.elkayam at gmail.com> >> >> hi >>> >>> can u update on any succsess running TLS on symbian? >>> >>> thanks, >>> >>> >>> >>> On Wed, Aug 5, 2009 at 10:03 PM, Klaus Darilion < >>> klaus.mailinglists at pernau.at> wrote: >>> >>>> Vasyl Strutynskyy wrote: >>>> >>>>> Klaus, >>>>> >>>>> I have tried create just TLS transport calling in ua.cpp >>>>> status = pjsua_transport_create(PJSIP_TRANSPORT_TLS, &tcfg, &tid); >>>>> but still the same problem. >>>>> >>>>> UDP + TLS means that I called >>>>> status = pjsua_transport_create(PJSIP_TRANSPORT_UDP, &tcfg, &tid); >>>>> status = pjsua_transport_create(PJSIP_TRANSPORT_TLS, &tcfg, &tid); >>>>> because thought one TLS isn't enough. >>>>> >>>> >>>> If you only want to use TLS there is no need to create a UDP transport. >>>> TLS transport is enough. >>>> >>>> Where exactly should I add "transport=tls" in ua.cpp ? >>>>> >>>> >>>> I do not know ua.cpp. A solution would be to define a proxy with URI >>>> sip:yourdomain.com;transport=tls >>>> >>>> I'm trying TLS only with Symbian because I need only for Symbian. >>>>> >>>> >>>> Unfortunately I have never tried Symbian yet thus I do not know it it >>>> should work. >>>> >>>> Maybe this can help you: >>>> http://discussion.forum.nokia.com/forum/showthread.php?t=93263 >>>> >>>> regards >>>> klaus >>>> >>>> >>>>> Best Regards >>>>> *Vasyl >>>>> >>>>> 2009/8/5 Klaus Darilion <klaus.mailinglists at pernau.at <mailto: >>>>> klaus.mailinglists at pernau.at>> >>>>> >>>>> >>>>> >>>>> Vasyl Strutynskyy schrieb: >>>>> >>>>> The main point that error happens inside the client without even >>>>> sending any data. >>>>> >>>>> >>>>> Please read next statements in details to see what we are doing >>>>> >>>>> 1. We use PJSIP code gotten from SVN trunk approx one month >>>>> ago. >>>>> 2. We use symbian console application to provide testing >>>>> (path: >>>>> >>>>> pjproject\pjsip-apps\src\symbian_ua\). >>>>> 1. Please be informed that we can successfully register >>>>> and >>>>> >>>>> make outgoing call using this symbian console app >>>>> over UDP. >>>>> We made some code changes for this purpose, because >>>>> by >>>>> default it didn't want to call. >>>>> 3. Then we built PJSIP code with TLS support like described >>>>> here >>>>> >>>>> (http://trac.pjsip.org/repos/wiki/TLS). Additionaly >>>>> installed Open >>>>> C plugin for Symban with openssl library for that. >>>>> 4. We tried to REGISTER to our proxy server which supports >>>>> TLS. For >>>>> >>>>> that we changed code in *ua.cpp* file according to TLS >>>>> needs (add >>>>> prefixes as "sips:") plus created TLS transport. Also we >>>>> tried >>>>> different combinations: TLS + TCP, TLS + UDP, just TLS, but >>>>> the >>>>> same result no data sending to the server, everything >>>>> happens >>>>> inside the client. >>>>> >>>>> >>>>> Actually sips is not necessary - sip is fine too. Just add the >>>>> transport=tls parameter to the request URI. >>>>> >>>>> How can you try TLS+UDP. If you create the transport you can only >>>>> specify either TLS or UDP. If you use TLS, this is always TLS over >>>>> TCP. >>>>> >>>>> Have you tried using TLS without symbian? >>>>> >>>>> regards >>>>> klaus >>>>> >>>>> >>>>> // add TLS >>>>> pjsua_transport_config_default(&tcfg); >>>>> status = pjsua_transport_create(PJSIP_TRANSPORT_TLS, >>>>> &tcfg, &tid); >>>>> if (status != PJ_SUCCESS) { >>>>> pjsua_perror(THIS_FILE, "Error creating TLS >>>>> transport", >>>>> status); >>>>> pjsua_destroy(); >>>>> return status; >>>>> } >>>>> >>>>> Waiting for your response/suggestions. >>>>> >>>>> Thanks in advance >>>>> *Vasyl >>>>> >>>>> >>>>> 2009/8/5 Klaus Darilion <klaus.mailinglists at pernau.at >>>>> <mailto:klaus.mailinglists at pernau.at> >>>>> <mailto:klaus.mailinglists at pernau.at >>>>> <mailto:klaus.mailinglists at pernau.at>>> >>>>> >>>>> >>>>> I would try to debug the problem why the transport was >>>>> destroyed. >>>>> Verify if TCP connection is established or not, if >>>>> ServerHello and >>>>> Cleint Hello are exchanged, or if the error happens inside >>>>> the >>>>> client without even sending any data >>>>> >>>>> klaus >>>>> >>>>> Vasyl Strutynskyy schrieb: >>>>> >>>>> Hi, >>>>> >>>>> I have faced with the same problem, SSL_Connect() returns >>>>> -1, >>>>> did you resolve this issue? >>>>> >>>>> I have used console symbian app. Client logs below: >>>>> >>>>> 22:46:30.941 pjsua_acc.c Account >>>>> sips:102 at morrigan.ua <sips%3A102 at morrigan.ua> <mailto: >>>>> sips%3A102 at morrigan.ua <sips%253A102 at morrigan.ua>> >>>>> <mailto:sips%3A102 at morrigan.ua<sips%253A102 at morrigan.ua> >>>>> <mailto:sips%253A102 at morrigan.ua <sips%25253A102 at morrigan.ua>>> >>>>> <mailto:sips%3A102 at morrigan.ua <sips%253A102 at morrigan.ua><mailto: >>>>> sips%253A102 at morrigan.ua <sips%25253A102 at morrigan.ua>> >>>>> <mailto:sips%253A102 at morrigan.ua<sips%25253A102 at morrigan.ua> >>>>> <mailto:sips%25253A102 at morrigan.ua<sips%2525253A102 at morrigan.ua>>>> >>>>> added with id 1 >>>>> >>>>> >>>>> 22:46:30.950 tlsc0x727fbc TLS client transport >>>>> created >>>>> 22:46:30.989 tlsc0x727fbc TLS transport destroyed >>>>> with >>>>> reason 171168: Unknown error when performing SSL >>>>> connect() >>>>> (PJSIP_TLS_ECONNECT) >>>>> 22:46:30.990 tsx0x726cac Failed to send Request msg >>>>> REGISTER/cseq=33140 (tdta0x727258)! err=171168 (Unknown >>>>> error >>>>> when performing SSL connect() (PJSIP_TLS_ECONNECT)) >>>>> 22:46:31.001 pjsua_acc.c SIP registration failed, >>>>> status=503 (Unknown error when performing SSL connect() >>>>> (PJSIP_TLS_ECONNECT)) >>>>> 22:46:31.031 sip_reg.c Error sending request, >>>>> status=171168 >>>>> 22:46:31.031 pjsua_acc.c Unable to create/send >>>>> REGISTER: >>>>> Unknown error when performing SSL connect() >>>>> (PJSIP_TLS_ECONNECT) >>>>> [status=171168] >>>>> >>>>> Thanks >>>>> >>>>> >>>>> >>>>> ------------------------------------------------------------------------ >>>>> >>>>> _______________________________________________ >>>>> Visit our blog: http://blog.pjsip.org >>>>> >>>>> pjsip mailing list >>>>> pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org> >>>>> <mailto:pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>> >>>>> >>>>> >>>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org >>>>> >>>>> >>>>> _______________________________________________ >>>>> Visit our blog: http://blog.pjsip.org >>>>> >>>>> pjsip mailing list >>>>> pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org> >>>>> <mailto:pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org>> >>>>> >>>>> >>>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org >>>>> >>>>> >>>>> >>>>> >>>>> ------------------------------------------------------------------------ >>>>> >>>>> _______________________________________________ >>>>> Visit our blog: http://blog.pjsip.org >>>>> >>>>> pjsip mailing list >>>>> pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org> >>>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org >>>>> >>>>> >>>>> _______________________________________________ >>>>> Visit our blog: http://blog.pjsip.org >>>>> >>>>> pjsip mailing list >>>>> pjsip at lists.pjsip.org <mailto:pjsip at lists.pjsip.org> >>>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org >>>>> >>>>> >>>>> >>>>> >>>>> ------------------------------------------------------------------------ >>>>> >>>>> _______________________________________________ >>>>> Visit our blog: http://blog.pjsip.org >>>>> >>>>> pjsip mailing list >>>>> pjsip at lists.pjsip.org >>>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org >>>>> >>>> >>>> >>>> _______________________________________________ >>>> Visit our blog: http://blog.pjsip.org >>>> >>>> pjsip mailing list >>>> pjsip at lists.pjsip.org >>>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org >>>> >>> >>> >>> >>> -- >>> ??? ?????? >>> ??: 050-3930056 >>> nir.elkayam at gmail.com >>> >>> >>> _______________________________________________ >>> Visit our blog: http://blog.pjsip.org >>> >>> pjsip mailing list >>> pjsip at lists.pjsip.org >>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org >>> >>> >> > > _______________________________________________ > Visit our blog: http://blog.pjsip.org > > pjsip mailing list > pjsip at lists.pjsip.org > http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org > > -- ??? ?????? ??: 050-3930056 nir.elkayam at gmail.com -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.pjsip.org/pipermail/pjsip_lists.pjsip.org/attachments/20090811/91e09b16/attachment-0001.html>
