<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div style="RIGHT: auto"><SPAN style="RIGHT: auto">Hi,</SPAN></div>
<div style="RIGHT: auto"><SPAN style="RIGHT: auto"> I set up tls and srtp with lyn and asterisk 1.8 before.</SPAN></div>
<div style="RIGHT: auto"><SPAN style="RIGHT: auto">I think your ssl connection is not setup . </SPAN></div>
<div style="RIGHT: auto"><SPAN style="RIGHT: auto">so, it may due to key and certificate problem.</SPAN></div>
<div style="RIGHT: auto"><SPAN style="RIGHT: auto">If the key and cert is ok with CA, the ssl connection will up auto......</SPAN></div>
<div style="RIGHT: auto"><SPAN style="RIGHT: auto"></SPAN> </div>
<div style="RIGHT: auto"><SPAN style="RIGHT: auto">I work this before and I can connect to lync server with TLS and srtp ....</SPAN></div>
<div style="RIGHT: auto"><SPAN style="RIGHT: auto">I my case, lync server is CA auth , asterisk is the client only ....</SPAN></div>
<div style="RIGHT: auto"><SPAN style="RIGHT: auto"></SPAN> </div>
<div style="RIGHT: auto"><SPAN style="RIGHT: auto"></SPAN> </div>
<div style="RIGHT: auto"><SPAN style="RIGHT: auto">Hope this can help you ...</SPAN></div>
<div style="RIGHT: auto"><SPAN style="RIGHT: auto"></SPAN> </div>
<div style="RIGHT: auto"><BR>
<BLOCKQUOTE style="BORDER-LEFT: rgb(16,16,255) 2px solid; MARGIN-TOP: 5px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; RIGHT: auto">
<DIV style="FONT-FAMILY: times new roman, new york, times, serif; FONT-SIZE: 12pt">
<DIV style="FONT-FAMILY: times new roman, new york, times, serif; FONT-SIZE: 12pt">
<DIV style="RIGHT: auto" dir=ltr><FONT size=2 face=Arial>
<DIV style="BORDER-BOTTOM: #ccc 1px solid; BORDER-LEFT: #ccc 1px solid; PADDING-BOTTOM: 0px; LINE-HEIGHT: 0; MARGIN: 5px 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; HEIGHT: 0px; FONT-SIZE: 0px; BORDER-TOP: #ccc 1px solid; BORDER-RIGHT: #ccc 1px solid; PADDING-TOP: 0px" class=hr readonly="true" contenteditable="false"></DIV><B><SPAN style="FONT-WEIGHT: bold">寄件人︰</SPAN></B> Chandrakant Solanki <solanki.chandrakant@gmail.com><BR><B><SPAN style="FONT-WEIGHT: bold">收件人︰</SPAN></B> Asterisk Users Mailing List - Non-Commercial Discussion <asterisk-users@lists.digium.com> <BR><B><SPAN style="FONT-WEIGHT: bold">傳送日期︰</SPAN></B> 2012年11月20日 (週二) 2:39 PM<BR><B><SPAN style="FONT-WEIGHT: bold">主題︰</SPAN></B> Re: [asterisk-users] tcptls ssl connection error<BR></FONT></DIV><BR>
<DIV id=yiv1414481187><SPAN style="FONT-FAMILY: verdana, sans-serif">Hello All,</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">Anyone have idea regarding below error.</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">After applying all patch, still faced the same issue.</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><BR style="FONT-FAMILY: verdana, sans-serif"><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">--</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">Regards,</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">Chandrakant Solanki</SPAN><BR style="FONT-FAMILY: verdana,
sans-serif"><BR style="FONT-FAMILY: verdana, sans-serif"><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">On Fri, Nov 9, 2012 at 11:39 AM, Chandrakant Solanki <<A href="mailto:solanki.chandrakant@gmail.com" rel=nofollow target=_blank ymailto="mailto:solanki.chandrakant@gmail.com">solanki.chandrakant@gmail.com</A>> wrote:</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">></SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">> Hello All,</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">></SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">> I am using asterisk 1.8.13.0 and which is running on TLS port and my request forwarded from opensips which is also run tls port.</SPAN><BR style="FONT-FAMILY: verdana,
sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">></SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">> On both end my certificate is same.</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">></SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">> During search about this error, I found below blog and apply patch, then also found below error.</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">></SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">> <A href="https://issues.asterisk.org/jira/browse/ASTERISK-18345" rel=nofollow target=_blank>https://issues.asterisk.org/jira/browse/ASTERISK-18345</A></SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">>
<A href="https://issues.asterisk.org/jira/browse/ASTERISK-20559" rel=nofollow target=_blank>https://issues.asterisk.org/jira/browse/ASTERISK-20559</A></SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">> Also applied r375023</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">></SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">> [Nov 8 21:57:34] ERROR[16357]: tcptls.c:89 ssl_close: SSL_shutdown() failed: 5</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">> [Nov 8 21:57:36] ERROR[16001]: tcptls.c:89 ssl_close: SSL_shutdown() failed: 5</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">> [Nov 8 21:57:37] == Problem setting up ssl connection:
error:00000000:lib(0):func(0):reason(0)</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">> [Nov 8 21:57:37] WARNING[19274]: tcptls.c:251 handle_tcptls_connection: FILE * open failed!</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">> [Nov 8 21:57:39] == Problem setting up ssl connection: error:00000000:lib(0):func(0):reason(0)</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">> [Nov 8 21:57:39] WARNING[19356]: tcptls.c:251 handle_tcptls_connection: FILE * open failed!</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">> [Nov 8 21:57:49] == Problem setting up ssl connection: error:00000000:lib(0):func(0):reason(0)</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">>
[Nov 8 21:57:49] WARNING[19357]: tcptls.c:251 handle_tcptls_connection: FILE * open failed!</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">></SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">></SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">> --</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">> Regards,</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">></SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><SPAN style="FONT-FAMILY: verdana, sans-serif">> Chandrakant Solanki</SPAN><BR style="FONT-FAMILY: verdana, sans-serif"><BR style="FONT-FAMILY: verdana, sans-serif"></DIV><BR>--<BR>_____________________________________________________________________<BR>-- Bandwidth and Colocation
Provided by <A href="http://www.api-digital.com/" target=_blank>http://www.api-digital.com/</A> --<BR>New to Asterisk? Join us for a live introductory webinar every Thurs:<BR> <A href="http://www.asterisk.org/hello" target=_blank>http://www.asterisk.org/hello</A><BR><BR>asterisk-users mailing list<BR>To UNSUBSCRIBE or update options visit:<BR> <A href="http://lists.digium.com/mailman/listinfo/asterisk-users" target=_blank>http://lists.digium.com/mailman/listinfo/asterisk-users</A><BR><BR></DIV></DIV></BLOCKQUOTE></div></div></body></html>