503 error when TLS enabled

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,
There was no problem if TLS disabled, but when I enabled TLS, the 503 error appeared occasionally.

I understand that 503 should be an error given by server, but the problem is we cannot find any log from our server side.

So I would like to know whether the connect rejected by PJSIP itself because the TLS problem.

Cheers.

On Jul 22, 2013, at 5:14 PM, pjsip-request at lists.pjsip.org wrote:

> Send pjsip mailing list submissions to
> 	pjsip at lists.pjsip.org
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> 	http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
> or, via email, send a message with subject or body 'help' to
> 	pjsip-request at lists.pjsip.org
> 
> You can reach the person managing the list at
> 	pjsip-owner at lists.pjsip.org
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of pjsip digest..."
> 
> 
> Today's Topics:
> 
>   1. Re: 503 error when TLS enabled (Khoa Pham)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Mon, 22 Jul 2013 16:14:26 +0700
> From: Khoa Pham <onmyway133@xxxxxxxxx>
> To: pjsip list <pjsip at lists.pjsip.org>
> Subject: Re: 503 error when TLS enabled
> Message-ID:
> 	<CAN+NExGo_n_RhqqM+fKEOp0c0aMezAQLV-qp40-CjgZ29vL-4Q at mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
> 
> Hi,
> 
> The "Connection reset by peer" is mostly caused by RST from your server. I
> think problem happens with TCP, too.
> You need to recheck your server max connection support
> 
> 
> 
> 
> On Mon, Jul 22, 2013 at 9:02 AM, Jack Ying <ayun8848 at gmail.com> wrote:
> 
>> Dear All,****
>> 
>> 
>> 
>> Currently, we have encountered the 503 error when TLS enabled, and here
>> is the Log:****
>> 
>> 
>> 
>> 15:52:46.820 tlsc0x1cabaa14  TLS connection closed
>> 
>> 15:52:46.821    pjsua_app.c  SIP TLS transport is disconnected from [
>> 8611766.c.talkingoa.com:9061]: Connection reset by peer [status=120054]***
>> *
>> 
>> 15:52:46.821    pjsua_app.c  TLS cipher used: 0x000035/AES256-SHA****
>> 
>> 15:52:46.821    pjsua_app.c  TLS cert info of [8611766.c.talkingoa.com
>> :9061]:****
>> 
>>  Version    : v3****
>> 
>>  Serial     : 01 3B ED****
>> 
>>  Subject    : *.talkingoa.com****
>> 
>> 
>> /description=riQ7Tyj49R21p0Ku/C=CN/ST=Jiangsu/L=Suzhou/O=\x00S\x00u\x00z\x00h\x00o\x00u\x00
>> \x00C\x00h\x00u\x00a\x00n\x00s\x00h\x00u\x00 \x00I\x00T\x00
>> \x00C\x00o\x00.\x00,\x00 \x00L\x00t\x00d\x00.\x00 \x00-\x00
>> \x82\xCF]\xDEm2\x96EO NfO\xE1`oy\xD1b\x80g\x09\x96PQlS\xF8/CN=*.
>> talkingoa.com/emailAddress=yingyun at coperator.net****
>> 
>>  Issuer     : StartCom Class 2 Primary Intermediate Server CA****
>> 
>>               /C=IL/O=StartCom Ltd./OU=Secure Digital Certificate
>> Signing/CN=StartCom Class 2 Primary Intermediate Server CA****
>> 
>>  Valid from : Wed 2013-02-20 00:46:47.000 GMT****
>> 
>>  Valid to   : Fri 2015-02-20 18:24:02.000 GMT****
>> 
>>  subjectAltName extension****
>> 
>>         DNS : *.talkingoa.com****
>> 
>>         DNS : talkingoa.com****
>> 
>> 
>> 
>> 15:52:46.821    pjsua_app.c  TLS cert verification result of [
>> 8611766.c.talkingoa.com:9061] : ****
>> 
>> 15:52:46.821    pjsua_app.c  - The certificate is untrusted****
>> 
>> 15:52:46.821    pjsua_app.c  - The issuer info in the certificate does not
>> match to the (candidate) issuer certificate****
>> 
>> 15:52:46.821    pjsua_app.c  PJSUA is configured to ignore TLS cert
>> verification errors****
>> 
>> 15:52:46.821    pjsua_app.c  ...Call 1 is DISCONNECTED [reason=503
>> (Connection reset by peer)]****
>> 
>> 15:52:46.827    pjsua_app.c  ...****
>> 
>>  [DISCONNCTD] To: sips:1086 at 8611766.c.talkingoa.com****
>> 
>> 
>> 
>> From the log I cannot find the exact solution of this problem. And the
>> error code is: 70016.****
>> 
>> 
>> 
>> Could anyone help me to figure out how to solve this problem, please?****
>> 
>> 
>> 
>> Cheers,****
>> 
>> Jack****
>> 
>> _______________________________________________
>> Visit our blog: http://blog.pjsip.org
>> 
>> pjsip mailing list
>> pjsip at lists.pjsip.org
>> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>> 
>> 
> 
> 
> -- 
> Khoa Pham
> HCMC University of Science
> www.fantageek.com
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://lists.pjsip.org/pipermail/pjsip_lists.pjsip.org/attachments/20130722/92f832dc/attachment.html>
> 
> ------------------------------
> 
> Subject: Digest Footer
> 
> _______________________________________________
> pjsip mailing list
> pjsip at lists.pjsip.org
> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
> 
> 
> ------------------------------
> 
> End of pjsip Digest, Vol 71, Issue 113
> **************************************




[Index of Archives]     [Asterisk Users]     [Asterisk App Development]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [Linux API]
  Powered by Linux