<div dir="ltr">Chrome 35 broke all of this.... you need to be using DTLS now I believe.<div><br></div><div>I had working secure web sockets with asterisk 12.2.x and chrome 34.... and then google broke eveything :)</div><div>
<br></div><div>I have not yet got around to test out DTLS etc. with chrome 35</div><div><br></div><div>Just so I don't waste too much time when I go to test, does anyone know if all that's required for DTLS on the asterisk side is the following in sip.conf?</div>
<div><br></div><div><div>dtlsenable=yes</div><div>dtlsverify=yes</div><div>dtlsrekey=60</div><div>dtlscafile=/usr/local/share/ca-certificates/myCA.crt</div><div>dtlscertfile=/etc/ssl/mycert.com.pem</div><div>dtlssetup=actpass</div>
</div><div><br></div><div>I assume I also need TLS configs in http.conf</div></div><div class="gmail_extra"><br clear="all"><div><div dir="ltr">William Hetherington<div>w - <a href="http://www.willwh.com" target="_blank">www.willwh.com</a></div>
<div>t - @wmwh</div></div></div>
<br><br><div class="gmail_quote">On Wed, Jun 11, 2014 at 11:28 AM, Matthew Jordan <span dir="ltr"><<a href="mailto:mjordan@digium.com" target="_blank">mjordan@digium.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div><div class="h5"><br><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Jun 11, 2014 at 2:58 AM, Steve Ng <span dir="ltr"><<a href="mailto:steveng.1988@gmail.com" target="_blank">steveng.1988@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div>Have anyone tried using SIPML5 to connect to Asterisk over wss?</div>
<div><br></div><div>I'm having the error as shown below </div><div><br></div><div><div style="clear:right;border-bottom:1px solid rgb(240,240,240);padding:1px 22px 1px 0px;margin-left:24px;min-height:16px;color:rgb(48,57,66);font-family:Menlo,monospace;font-size:11px">
<span style="white-space:pre-wrap"><span>Connecting to '<a title="wss://54.254.228.251:8080/ws" style="color:rgb(84,84,84);text-decoration:none">wss://54.xxx.xxx.xxx:8080/ws</a>'</span> <a title="http://sipml5.org/SIPml-api.js?svn=224:1" style="float:right;text-align:right;max-width:100%;margin-left:4px;color:rgb(84,84,84);text-decoration:underline">SIPml-api.js?svn=224:1</a></span></div>
<div style="clear:right;border-bottom:1px solid rgb(240,240,240);padding:1px 22px 1px 0px;margin-left:24px;min-height:16px;color:rgb(48,57,66);font-family:Menlo,monospace;font-size:11px">
<span style="white-space:pre-wrap"><span>==stack event = starting</span> <a title="http://sipml5.org/SIPml-api.js?svn=224:1" style="float:right;text-align:right;max-width:100%;margin-left:4px;color:rgb(84,84,84);text-decoration:underline">SIPml-api.js?svn=224:1</a></span></div>
<div style="clear:right;border-bottom:1px solid rgb(240,240,240);padding:1px 22px 1px 0px;margin-left:24px;min-height:16px;color:rgb(48,57,66);font-family:Menlo,monospace;font-size:11px">
<span style="white-space:pre-wrap"><span>__tsip_transport_ws_onerror</span> <a title="http://sipml5.org/SIPml-api.js?svn=224:1" style="float:right;text-align:right;max-width:100%;margin-left:4px;color:rgb(84,84,84);text-decoration:underline">SIPml-api.js?svn=224:1</a></span></div>
<div style="clear:right;border-bottom:1px solid rgb(240,240,240);padding:1px 22px 1px 0px;margin-left:24px;min-height:16px;color:rgb(48,57,66);font-family:Menlo,monospace;font-size:11px">
<span style="white-space:pre-wrap"><span>__tsip_transport_ws_onclose</span> <a title="http://sipml5.org/SIPml-api.js?svn=224:1" style="float:right;text-align:right;max-width:100%;margin-left:4px;color:rgb(84,84,84);text-decoration:underline">SIPml-api.js?svn=224:1</a></span></div>
<div style="clear:right;border-bottom:1px solid rgb(240,240,240);padding:1px 22px 1px 0px;margin-left:24px;min-height:16px;color:rgb(48,57,66);font-family:Menlo,monospace;font-size:11px">
<span style="white-space:pre-wrap"><span>==stack event = failed_to_start</span> </span></div><div><br><br></div><div>Where if I'm connecting through ws://54.xxx.xxx.xxxx:8080/ws, it works fine. Any idea why? </div>
</div></div>
<br clear="all"></blockquote></div><br></div></div></div><div class="gmail_extra">There was a bug in secure WebSockets (tracked under ASTERISK-21930) that was fixed in Asterisk 11.9.0:<br><br><a href="http://downloads.asterisk.org/pub/telephony/asterisk/releases/asterisk-11.9.0-summary.html" target="_blank">http://downloads.asterisk.org/pub/telephony/asterisk/releases/asterisk-11.9.0-summary.html</a><br>
<br></div><div class="gmail_extra">Which version of Asterisk are you using? Is it 11.9.0 or later?<span class="HOEnZb"><font color="#888888"><br></font></span></div><span class="HOEnZb"><font color="#888888"><div class="gmail_extra">
<br>-- <br><div dir="ltr"><div>Matthew Jordan<br></div><div>Digium, Inc. | Engineering Manager</div>
<div>445 Jan Davis Drive NW - Huntsville, AL 35806 - USA</div><div>Check us out at: <a href="http://digium.com" target="_blank">http://digium.com</a> & <a href="http://asterisk.org" target="_blank">http://asterisk.org</a></div>
</div>
</div></font></span></div>
<br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></div><br></div>