[asterisk-bugs] [JIRA] (ASTERISK-27474) PJSIP TLS Unstable

[Ross Beer (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-27474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=240563#comment-240563 ] 

Ross Beer commented on ASTERISK-27474:
--------------------------------------

The issue only appears to be when there are a number of endpoints on a server. For example, on test servers, I am unable to replicate the issue.

The issue shows up in two ways, with the phone dropping offline. A Wireshark shows a FIN packet is sent while the phone is idle, therefore the phone keeps re-registering. The second way is if the phone is registered and an outbound call is made, the TLS connection will either end with a FIN packet during the call or when the BYE is sent from the phone.

Is there a way I can monitor PJSIP's TLS error responses, in previously reported issues this was caused by PJSIP tearing down a TLS connection at a higher level?

> PJSIP TLS Unstable
> ------------------
>
>                 Key: ASTERISK-27474
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-27474
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_pjsip
>    Affects Versions: 13.18.2, GIT
>         Environment: Fedora 23
>            Reporter: Ross Beer
>
> When an endpoint is using chan_pjsip TLS  and there are a number of TLS connections, Asterisk starts to close connections incorrectly.
> This is fairly severe, to the point that any phone doesn't stay registered for more than a few seconds at a time.
> On performing a Wireshark, it is clear to see that Asterisk is sending FIN packets which in turn close the active TLS connection.
> I believe this is related to a previous ticket which was resolved by a patch being included with the bundled version 2.6 of PJSIP. ( ASTERISK-27001 and ASTERISK-27347)
> Other connection-oriented protocols such as TCP are not affected by this issue.



--
This message was sent by Atlassian JIRA
(v6.2#6252)