| 00:23.36 | *** join/#asterisk matrix1233 (~matrix123@2a04:cec0:11d8:b1f4:3d6e:f664:a2e6:b84d) |
| 00:24.46 | *** join/#asterisk spatel (~spatel@pool-96-237-230-175.bstnma.fios.verizon.net) |
| 00:25.23 | *** join/#asterisk Offer (~Offer@5.28.154.204) |
| 00:46.17 | *** join/#asterisk Offer (~Offer@5.28.154.204) |
| 00:58.16 | *** join/#asterisk Offer (~Offer@5.28.154.204) |
| 01:18.00 | *** join/#asterisk fredcwbr-GO (~fred@2804:7f3:582:6079:325a:3aff:fe9e:9855) |
| 01:24.58 | *** join/#asterisk Offer (~Offer@5.28.154.204) |
| 01:51.39 | *** join/#asterisk sawgood (~sawgood@unaffiliated/sawgood) |
| 02:56.29 | *** join/#asterisk JonathanD (~JonathanD@freenode/staff/jonathand) |
| 03:06.41 | *** join/#asterisk teitoklien (~teitoklie@2401:4900:3144:91f2:bd:3cac:2bb9:e13f) |
| 03:06.50 | *** part/#asterisk teitoklien (~teitoklie@2401:4900:3144:91f2:bd:3cac:2bb9:e13f) |
| 03:28.00 | *** join/#asterisk lostpacket (~lostpacke@2a01:4c8:c91:1c4a:1:2:21e2:156e) |
| 03:28.17 | *** part/#asterisk lostpacket (~lostpacke@2a01:4c8:c91:1c4a:1:2:21e2:156e) |
| 03:34.10 | *** join/#asterisk DannyA (~DannyA@cpe-74-64-125-9.nyc.res.rr.com) |
| 03:34.51 | DannyA | hey all. so im working with logging for the first time. the "full" log has been working fine, except tonight, when i went to look at the log, it stopped logging as of a few hours ago. the file size is a few mb's, and the disk space on the machine is fine. |
| 03:35.06 | DannyA | is there something that would cause asterisk to stop logging for some reason? |
| 04:01.49 | *** join/#asterisk hfb (~hfb@cpe-172-117-13-65.socal.res.rr.com) |
| 04:22.21 | *** join/#asterisk gerhard7 (~gerhard7@ip5657ee30.direct-adsl.nl) |
| 04:32.27 | *** join/#asterisk t- (tom@freenode/staff/tomaw) |
| 04:47.10 | *** join/#asterisk bmg505 (~leon@41.144.139.228) |
| 05:21.25 | *** join/#asterisk derPlexus (~plexus@ip-176-198-128-59.hsi05.unitymediagroup.de) |
| 05:41.42 | *** join/#asterisk tomaluca95 (~quassel@kde/developer/tomaluca) |
| 06:07.17 | *** join/#asterisk miralin (~Thunderbi@195.209.246.194) |
| 06:12.18 | *** join/#asterisk miralin1 (~Thunderbi@195.209.246.194) |
| 06:21.15 | *** join/#asterisk tsal (~tsal@i59F4AFE8.versanet.de) |
| 06:43.29 | *** join/#asterisk sinaowolabi (~Sina@102.134.114.7) |
| 06:51.51 | *** join/#asterisk Nivex (nivex@triton.nivex.net) |
| 06:52.04 | *** join/#asterisk lankanmon (~LKNnet@CPEb4fbe4e331bd-CM64777d632380.cpe.net.cable.rogers.com) |
| 07:21.55 | *** join/#asterisk Chainsaw (~chainsaw@gentoo/developer/chainsaw) |
| 07:22.40 | *** join/#asterisk sa02irc (~mbax@155-079-043-212.ip-addr.inexio.net) |
| 07:41.27 | wdoekes | DannyA: I'd start by (a) generating something for the log and see if it ends up in the console but not in the log and (b) check if asterisk is holding on to the right files (see /proc/$(pidof asterisk)/fd ) and (c) lastly check what happens with 'logger reload' |
| 07:43.09 | *** join/#asterisk zapata (~zapata@2a02:1748:fad4:7260:395c:bc6:4cb1:3542) |
| 07:44.04 | *** join/#asterisk pchero_work (~pchero@2a02:a210:2241:6480:11df:ce74:8296:9f05) |
| 07:46.04 | *** join/#asterisk life_of_e (~life_of_e@108-95-189-245.lightspeed.irvnca.sbcglobal.net) |
| 07:47.39 | *** join/#asterisk life_of_e (~life_of_e@108-95-189-245.lightspeed.irvnca.sbcglobal.net) |
| 08:03.49 | *** join/#asterisk ganbold_ (~ganbold@202.21.108.8) |
| 08:14.42 | *** join/#asterisk mahafyi (~quassel@42.111.131.247) |
| 08:43.20 | *** join/#asterisk sekil (~sekil@178-222-1-219.dynamic.isp.telekom.rs) |
| 08:50.00 | *** join/#asterisk pabe (pabematrix@gateway/shell/matrix.org/x-upyskmjrpfgkrtiw) |
| 08:54.42 | *** join/#asterisk ShellyRoll (~ShellyRol@c-67-170-30-252.hsd1.wa.comcast.net) |
| 08:58.11 | *** join/#asterisk ruben23 (~ruben@49.149.110.51) |
| 09:11.40 | *** join/#asterisk Testeree (xavier8338@gateway/shell/matrix.org/x-corqhihzsmvthynh) |
| 09:33.22 | *** join/#asterisk war9407 (war@2600:4040:4001:1e00::f7aa) |
| 09:35.06 | *** join/#asterisk cryptic (~cryptic@142.196.139.17) |
| 09:54.29 | *** join/#asterisk Ai9zO5AP (~BQcdf9eiZ@gateway/tor-sasl/ai9zo5ap) |
| 10:04.24 | *** join/#asterisk fredcwbr-GO (~fred@2804:7f3:582:6079:325a:3aff:fe9e:9855) |
| 10:13.14 | *** join/#asterisk war9407 (war@2600:4040:4001:1e00::f7aa) |
| 10:15.28 | *** join/#asterisk stux|work (stux@endurance.xzibition.com) |
| 10:27.38 | *** join/#asterisk pchero_work (~pchero@51.247.195.35.bc.googleusercontent.com) |
| 10:33.55 | *** join/#asterisk sa02irc (~mbax@155-079-043-212.ip-addr.inexio.net) |
| 11:05.55 | *** join/#asterisk Offer (~Offer@5.28.154.204) |
| 11:10.17 | *** join/#asterisk miralin (~Thunderbi@178.34.160.50) |
| 11:10.39 | *** join/#asterisk miralin1 (~Thunderbi@195.209.246.194) |
| 11:20.14 | *** join/#asterisk ganbold (~ganbold@202.21.108.8) |
| 11:31.07 | *** join/#asterisk matrix1233 (~matrix123@2a04:cec0:11d8:b1f4:b8d4:2eb9:9596:3b9c) |
| 11:36.56 | *** join/#asterisk pchero_work (~pchero@2a02:a210:2241:6480:b432:20ce:c40c:f6c9) |
| 11:44.52 | *** join/#asterisk lambda (~xiretza@mail.xiretza.xyz) |
| 11:47.55 | *** join/#asterisk lambda (~xiretza@mail.xiretza.xyz) |
| 12:54.56 | *** join/#asterisk [TK]D-Fender (~joe@64.235.216.2) |
| 13:21.02 | *** join/#asterisk sinaowolabi (~Sina@169.159.73.152) |
| 13:23.47 | *** part/#asterisk ruben23 (~ruben@49.149.110.51) |
| 13:32.13 | *** join/#asterisk forgotmynick (uid24625@gateway/web/irccloud.com/x-iloskynhvruvilrk) |
| 13:42.39 | *** join/#asterisk Ai9zO5AP (~BQcdf9eiZ@gateway/tor-sasl/ai9zo5ap) |
| 13:52.06 | *** join/#asterisk matrix1233 (~matrix123@2a04:cec0:11d8:b1f4:b8d4:2eb9:9596:3b9c) |
| 14:01.14 | *** join/#asterisk alexandre9099 (~alexandre@unaffiliated/alexandre9099) |
| 14:02.02 | *** join/#asterisk kharwell (uid358942@gateway/web/irccloud.com/x-xdbqouexzmpjvmnh) |
| 14:02.02 | *** mode/#asterisk [+o kharwell] by ChanServ |
| 14:05.06 | *** join/#asterisk bford (uid283514@gateway/web/irccloud.com/x-xycdanhtthfzhykx) |
| 14:05.07 | *** mode/#asterisk [+o bford] by ChanServ |
| 14:08.49 | *** join/#asterisk miralin (~Thunderbi@195.209.246.194) |
| 14:20.39 | DanFromUK | @DannyA If you are using logrotate, you may need to restart the asterisk logger after rotation. |
| 14:21.19 | *** join/#asterisk [NC] (~NC@208.94.241.140) |
| 14:21.43 | DanFromUK | @DannyA https://pastebin.com/L5M4TP9Z |
| 14:27.14 | sibiria | seems clumsy |
| 14:27.19 | sibiria | better to use the "copytruncate" option |
| 14:27.53 | sibiria | this will copy the log file, then truncate the original file, so you don't have to worry about asterisk (or whatever application) suddenly having a file descriptor go blind |
| 14:28.43 | sibiria | i.e. the original file is never removed and always available for appending to without interruption |
| 14:37.26 | igcewieling | Open files stay open even if they are deleted. You want to issue a asterisk -rx "logger reload" to have Asterisk close and re-open the log files. |
| 14:42.10 | *** join/#asterisk meek424 (~stefan@host62-7-189-109.range62-7.btcentralplus.com) |
| 14:43.31 | meek424 | hello there, can anyone please help me with a VOIP softphone that has SIP-TLS authentication enabled? Zoiper requires the "PRO" version which costs $50 |
| 14:44.32 | sekil | you mean send you money? |
| 14:49.35 | igcewieling | Sorry, I don't do softphones. |
| 14:51.00 | meek424 | thanks for your reply, no problem, the thing is that I've configured my asterisk server to use SIP-TLS and I cannot test that |
| 14:51.37 | meek424 | have you got any ideas? on how I can test that? |
| 14:52.33 | meek424 | @sekil nope I mean if you know any versions of FREE softphones |
| 14:53.01 | igcewieling | TLS is difficult and complicated to set up. I've never thought it was worth all the time hassle and management required for TLS. |
| 14:53.03 | sekil | meek424: microsip |
| 14:53.12 | sekil | meek424: microsip.org |
| 14:53.45 | meek424 | cool thank you |
| 14:54.26 | meek424 | icigcewieling: the thing is I've got a University assignment that forces me to implement it |
| 14:55.12 | *** join/#asterisk Janos (~Janos@201.204.94.76) |
| 14:58.55 | Samot | TLS is difficult and complicated to set up <-- Not, not really at all. However, I agree with the rest of the statement. |
| 14:59.18 | seanbright | letsencrypt obviates a lot of the annoyance |
| 15:01.36 | meek424 | it seems that letsencrypt appears more and more on my radar, I have to learn how to use it |
| 15:01.47 | seanbright | it's just about the easiest thing on the planet |
| 15:01.50 | seanbright | download certbot |
| 15:01.51 | seanbright | run certbot |
| 15:01.54 | seanbright | profit |
| 15:02.26 | Samot | It's fine. |
| 15:02.29 | seanbright | pfft |
| 15:02.35 | meek424 | cool |
| 15:02.40 | seanbright | Samot is underwhelmed, imagine that |
| 15:02.49 | Samot | It's fine. |
| 15:02.53 | seanbright | must be a day ending with y |
| 15:02.55 | Samot | It does a job. |
| 15:03.11 | Samot | I'm in the school of $6/year for a cert is fine. |
| 15:03.22 | igcewieling | We are not here to help you do your homework. |
| 15:03.37 | Samot | And it's about the easiest thing on the planet too. |
| 15:04.08 | igcewieling | seanbright: how do you manage updating the certs on the phones and Asterisk every 30 days when the cert expires? |
| 15:04.26 | seanbright | didn't know you were talking about client certs |
| 15:04.28 | seanbright | so you don't |
| 15:04.35 | Samot | ^^^ |
| 15:04.56 | Samot | The phones shouldn't need certs. It's a public CA |
| 15:04.56 | igcewieling | letsencrypt is great for stuff like web servers, but I'd worry about using it for TLS certs. |
| 15:05.05 | Samot | Uhm. |
| 15:05.08 | Samot | It's a TLS cert. |
| 15:05.14 | Samot | Regardless if it's HTTP or SIP |
| 15:05.20 | Samot | Same cert can be used. |
| 15:05.22 | meek424 | yep |
| 15:05.33 | Samot | Let's Encrypt _is_ TLS certs. |
| 15:05.44 | Samot | It's their whole reason. |
| 15:05.51 | igcewieling | I'm referring to manageing the certs |
| 15:05.58 | seanbright | client certs? |
| 15:06.10 | seanbright | you can't use it for client certs, so it's a non-issue |
| 15:06.17 | igcewieling | server certs too, of course, that that should be a bit easier. |
| 15:06.45 | seanbright | i am not following what you are saying at all |
| 15:06.52 | seanbright | it's possible i am being dense |
| 15:08.09 | igcewieling | It is also possible I'm misremembering. |
| 15:09.19 | Samot | Phones need certs when the CA isn't known |
| 15:09.22 | Samot | So self-signed, etc. |
| 15:09.47 | Samot | Just like there is an issue with Let's Encrypt and some Yealink versions. |
| 15:09.48 | igcewieling | That would make sense. |
| 15:10.05 | Samot | The firmware doesn't have LE's CA details. |
| 15:10.19 | seanbright | sounds like a yealink problem |
| 15:10.25 | Samot | Totally that |
| 15:10.32 | Samot | Not an LE issue at all. |
| 15:10.59 | igcewieling | The other issue with Asterisk TLS is the total lack of useful error messages, but that is fixable in Asterisk. |
| 15:11.19 | igcewieling | I wonder if my Adtrans have the LE CA. |
| 15:11.44 | seanbright | well, the root CA is not LE |
| 15:11.49 | sibiria | igcewieling: it depends entirely on how errors are handled. in *nix, if you open a basic file descriptor for appending, the file will not be created if removed *after* opening |
| 15:12.02 | sibiria | e.g. fopen( "some/file", "a+" ) |
| 15:12.26 | sibiria | you can issue writes to the fd just fine, but they won't go anywhere, and the file will not be recreated automatically |
| 15:12.35 | sibiria | (i have no idea what asterisk does when logging) |
| 15:12.41 | seanbright | i think someone just updated the TLS error messages |
| 15:12.45 | seanbright | recently-ish |
| 15:12.58 | igcewieling | Which is why you tell the application to close and re-open the files when the log files are rotated. |
| 15:13.15 | sibiria | no, you tell logrotated to copy the file and then truncate it |
| 15:13.35 | sibiria | it's quite heavy-handed to restart applications just to make them play nice with log rotation |
| 15:13.46 | seanbright | oh - it was me apparently - https://github.com/asterisk/asterisk/commit/7f2d56fc8c0068bdd172a558f9eebf0e81693c48 |
| 15:15.01 | igcewieling | the sample logrotate file included with Asterisk even includes "asterisk -rx 'logger reload' > /dev/null 2> /dev/null" |
| 15:15.08 | sibiria | seanbright: we have a saying in sweden for that: "the memory is good, but short" |
| 15:15.44 | igcewieling | ./contrib/scripts/asterisk.logrotate |
| 15:16.05 | sibiria | it's still clumsy, and panders towards userland villainy |
| 15:16.42 | sibiria | logrotate has an option for solving this problem definitively, for any application: copytruncate |
| 15:16.49 | seanbright | yeah, we use copytruncate |
| 16:07.38 | *** join/#asterisk sa02irc (~mbax@155-079-043-212.ip-addr.inexio.net) |
| 16:17.20 | *** join/#asterisk Janos (~Janos@201.204.94.76) |
| 16:22.12 | *** join/#asterisk defsdoor (~Andrew@cpc120600-sutt6-2-0-cust232.19-1.cable.virginm.net) |
| 16:33.35 | *** join/#asterisk retentiveboy (~retentive@2001:558:6011:15:b870:e5eb:952c:5c65) |
| 16:34.58 | *** join/#asterisk retentiveboy (~retentive@2001:558:6011:15:b870:e5eb:952c:5c65) |
| 17:26.44 | *** join/#asterisk Dovid (~dovid@ool-45738ae3.dyn.optonline.net) |
| 17:27.27 | Dovid | on CentOS7 anyone know what package I would be missing to to get res_config_mysql working? /usr/bin/ld: cannot find -lmariadb is the error I am getting |
| 17:28.09 | igcewieling | Not I. I switched to ODBC a long time ago. |
| 17:29.38 | Dovid | igcewieling: By that you mean https://wiki.asterisk.org/wiki/display/AST/Configuring+res_odbc ? |
| 17:30.36 | Chainsaw | Dovid: Probably something like MariaDB-client |
| 17:30.47 | igcewieling | Dovid: yes. I use ODBC with CDR and CEL. |
| 17:31.17 | igcewieling | My only centos 7 asterisk box uses the Percona repo |
| 17:31.25 | Dovid | chainsaw: strange. I already have it installed. |
| 17:31.52 | Chainsaw | Dovid: yum provides '*/libmariadb.so*' |
| 17:31.53 | igcewieling | try mariadb-libs and mariadb-devel |
| 17:32.02 | Chainsaw | Dovid: That should narrow down which exact one you want/need. |
| 17:32.56 | Dovid | chainsaw: thanks. the package was MariaDB-shared |
| 17:33.17 | Chainsaw | Dovid: Excellent. igcewieling & I will try to remember that for next time. |
| 17:36.34 | *** join/#asterisk retentiveboy (~retentive@66.56.21.98) |
| 17:41.42 | *** join/#asterisk miralin (~Thunderbi@178.34.160.50) |
| 17:43.08 | *** join/#asterisk leifmadsen (~leifmadse@asterisk/documenteur-extraordinaire/blitzrage) |
| 17:43.08 | *** mode/#asterisk [+o leifmadsen] by ChanServ |
| 17:46.18 | *** join/#asterisk miralin1 (~Thunderbi@85.115.248.115) |
| 17:51.18 | *** join/#asterisk dacod__ (~dacod@179.162.109.23) |
| 18:07.45 | *** join/#asterisk sawgood (~sawgood@unaffiliated/sawgood) |
| 18:25.57 | *** join/#asterisk lankanmon_ (~LKNnet@CPEb4fbe4e331bd-CM64777d632380.cpe.net.cable.rogers.com) |
| 18:31.19 | *** join/#asterisk clarjon1 (~clarjon1@unaffiliated/clarjon1) |
| 18:34.19 | DannyA | so i did the logger rotate command last night, and asterisk hasn't logged anything to "full" since then |
| 18:34.25 | DannyA | what did i do wrong |
| 18:34.31 | DannyA | after u rotate, do u need to restart the logger? |
| 18:46.29 | meek424 | for some reason I can't use sRTP, please have a look at my config at: https://pastebin.com/3ta4VLdc |
| 18:50.42 | seanbright | key too small |
| 18:51.03 | seanbright | meek424: https://issues.asterisk.org/jira/browse/ASTERISK-28750 |
| 18:54.07 | seanbright | that might not be helpful |
| 18:54.25 | seanbright | in short, ast_tls_cert uses 1024 bit keys by default in 13, 16, and 17 |
| 18:55.31 | seanbright | you need a 2048 bit key to fix the problem you are having. you can pass -b 2048 to ast_tls_cert (assuming you are running the latest release of asterisk) |
| 18:56.01 | seanbright | of you aren't you'll have to modify ast_tls_cert searching for 1024 and replacing with 2048 |
| 19:03.54 | meek424 | I'm running 16LTS |
| 19:04.00 | meek424 | latest |
| 19:04.07 | meek424 | so it should work |
| 19:04.58 | meek424 | fml why the .... they would create shorter keys if they wondn't work? |
| 19:09.47 | seanbright | because it's openssl and not asterisk |
| 19:09.56 | seanbright | openssl stopped accepting 1024 bit keys |
| 19:22.33 | meek424 | yes that is right but they've built the script called ast_tls_cert |
| 19:22.47 | meek424 | anyhow it seems that the -b option worked |
| 19:22.54 | meek424 | thank you loads |
| 19:23.12 | meek424 | I've runned into another issue now might be the client |
| 19:23.17 | meek424 | [Apr 14 20:21:31] WARNING[896][C-00000002]: chan_sip.c:10870 process_sdp: Rejecting secure audio stream without encryption details: audio 50002 RTP/SAVP 113 9 0 8 101 |
| 19:50.56 | meek424 | does anyone know a TLS / sRTP capable softphone for linux or mac os other than MicroSIP (which is only for windows)? |
| 19:54.34 | *** join/#asterisk Penguin (~xwQ5kwYl6@our.systems.are.full.of.penguins.at.penguinsystems.net) |
| 19:58.24 | seanbright | zoiper? |
| 19:58.49 | seanbright | linphone? |
| 19:58.56 | seanbright | lmgtfy.com? |
| 19:59.39 | jsmith | jami? |
| 20:02.28 | *** join/#asterisk sh_smith (~sh_smith@cpe-172-88-21-24.socal.res.rr.com) |
| 20:04.52 | meek424 | zoiper has to be the "PRO" version to use TLS lately, which costs $50 |
| 20:05.01 | meek424 | I'm gonna try the other ones |
| 20:11.31 | *** join/#asterisk Aristide (~quassel@2a01:e35:39fa:a030:f451:3cff:fed4:e33f) |
| 20:14.18 | Aristide | Hello ! I have a small problem with Background command. Sound is only partially played (same => n(loop),Background(custom/sound_menu)). Playsound give same problem. File duration is ~ 1minute. I get only 5 first seconds |
| 20:14.51 | Aristide | (So, after waiting, he continue to wait for a button) |
| 20:17.31 | Aristide | OK I have find a message [Apr 14 22:16:32] WARNING[15933]: chan_sip.c:4047 retrans_pkt: Retransmission timeout reached on transmission 0_xxxxxxxxxxx@192.168.1.82 for seqno 1 (Critical Response) -- See https://wiki.asterisk.org/wiki/display/AST/SIP+Retransmissions. I check website :x |
| 20:20.57 | *** join/#asterisk Samot (sid133316@gateway/web/irccloud.com/x-hacweqwqfypzosmw) |
| 20:23.42 | Aristide | OK problem with hostname ^^ Solved; But I get « [Apr 14 22:23:17] WARNING[21823][C-00000006]: mp3/layer3.c:967 III_dequantize_sample: mpg123: Can't rewind stream by 3 bits! » :x |
| 20:27.41 | Aristide | Problem solved : sox attestation_menu.mp3 -t raw -r 8000 -e signed-integer -b 16 -c 1 attestation_menu.sln |
| 20:35.22 | *** join/#asterisk miralin (~Thunderbi@85.115.248.115) |
| 20:39.55 | seanbright | glad we could help |
| 20:48.32 | *** join/#asterisk CarlosTico (~CarlosTic@107-134-203-65.lightspeed.wlfrct.sbcglobal.net) |
| 20:57.39 | *** join/#asterisk ShellyRoll (~ShellyRol@c-67-170-30-252.hsd1.wa.comcast.net) |
| 21:15.08 | meek424 | anyone has an idea what causes this please? --> [Apr 14 22:04:57] WARNING[1079][C-0000000a]: chan_sip.c:10870 process_sdp: Rejecting secure audio stream without encryption details: audio 50010 RTP/SAVP 113 9 0 8 101 |
| 21:15.13 | *** join/#asterisk Penguin (~xwQ5kwYl6@our.systems.are.full.of.penguins.at.penguinsystems.net) |
| 21:19.41 | seanbright | the SDP must not contain encryption details |
| 21:35.17 | meek424 | what is the SDP please? |
| 21:37.19 | *** join/#asterisk cryptic (~cryptic@142.196.139.17) |
| 21:43.19 | *** join/#asterisk Penguin (~xwQ5kwYl6@our.systems.are.full.of.penguins.at.penguinsystems.net) |
| 21:43.48 | Samot | meek424: Is this when you're trying to call from the device to Asterisk? |
| 21:48.21 | meek424 | yes |
| 21:48.35 | meek424 | actually nope |
| 21:48.45 | meek424 | from softphone to extension |
| 21:49.29 | meek424 | the peers have successfully subscribed |
| 21:53.31 | Samot | So yes then. |
| 21:53.43 | Samot | Do you have TLS setup for these extensions? |
| 21:54.02 | meek424 | nope |
| 21:54.38 | Samot | So tell the softphone to not use TLS/SRTP |
| 21:55.17 | meek424 | so what it should use isntead? |
| 21:56.56 | meek424 | ; Stefan's configuration |
| 21:56.58 | meek424 | exten => 100,1,NoOp(Call for Stefan) |
| 21:57.00 | meek424 | same => n,Dial(SIP/stefan,10) |
| 21:57.02 | meek424 | same => n,GotoIf($[ "${DIALSTATUS}" = "BUSY" ]?100-busy,1) |
| 21:57.04 | meek424 | same => n,VoiceMail(${EXTEN},u) |
| 21:57.06 | meek424 | same => n,Hangup |
| 21:57.23 | meek424 | this is my extension, do I need to add somesort of tls pointers here? |
| 21:58.19 | *** join/#asterisk miralin (~Thunderbi@178.34.160.50) |
| 22:05.36 | Samot | No, in the actual sip.conf configuration |
| 22:06.09 | Samot | If you're not doing TLS/SRTP based calling then the devices shouldn't have those option enabled. |
| 22:06.18 | Samot | Again, turn it off in the softphone. |
| 22:06.46 | meek424 | but i want to achieve TLS/sRTP |
| 22:06.56 | meek424 | check here please sip.conf https://pastebin.com/3ta4VLdc |
| 22:08.29 | *** join/#asterisk Ai9zO5AP (~BQcdf9eiZ@gateway/tor-sasl/ai9zo5ap) |
| 22:21.52 | Samot | 5:53:43 PM <Samot> Do you have TLS setup for these extensions? |
| 22:21.52 | Samot | 5:54:02 PM <meek424> nope |
| 22:24.29 | meek424 | this is what I've used: |
| 22:24.33 | meek424 | [stefan] |
| 22:24.35 | meek424 | <PROTECTED> |
| 22:24.37 | meek424 | <PROTECTED> |
| 22:24.39 | meek424 | <PROTECTED> |
| 22:24.41 | meek424 | <PROTECTED> |
| 22:24.43 | meek424 | <PROTECTED> |
| 22:24.45 | meek424 | <PROTECTED> |
| 22:24.47 | Samot | Don't do that |
| 22:24.47 | meek424 | <PROTECTED> |
| 22:24.49 | meek424 | <PROTECTED> |
| 22:24.50 | Samot | You pasted it. |
| 22:24.54 | Samot | Stop. |
| 22:25.22 | Samot | So let's reverse this. Do you have the softphone setup to use TLS/SRTP? |
| 22:25.28 | meek424 | sorry I thought you haven't seen my pastebin |
| 22:25.48 | meek424 | yes i do |
| 22:26.05 | Samot | OK so now you need to show a debug. |
| 22:26.09 | Samot | sip set debug on |
| 22:26.13 | Samot | make a call. |
| 22:30.00 | meek424 | done: https://pastebin.com/ytzpPeu0 |
| 22:46.18 | Samot | Does this work over normal UDP? |
| 22:46.31 | Samot | No TLS/SRTP. |
| 22:46.46 | file | is res_srtp loaded? |
| 22:47.17 | meek424 | @file: how i can check that please? |
| 22:47.27 | file | "module show like srtp" |
| 22:47.30 | file | in the Asterisk CLI |
| 22:48.12 | meek424 | nope, 0 modules loaded |
| 22:48.25 | file | then your Asterisk does not have SRTP support |
| 22:48.38 | meek424 | do i have to reinstall and tick that? |
| 22:48.40 | *** join/#asterisk lostpacket (lostpacket@gateway/vpn/privateinternetaccess/lostpacket) |
| 22:49.10 | file | the libsrtp library and development package has to be installed, configure run to detect it, and the res_srtp module selected if not already |
| 22:51.34 | meek424 | sounds good but i have no ideea where to start, I've never went further than the basic "installing from source" |
| 22:51.52 | meek424 | do you please have some guidance you can share? |
| 22:55.27 | *** join/#asterisk lostpacket (lostpacket@gateway/vpn/privateinternetaccess/lostpacket) |
| 23:09.41 | *** join/#asterisk Ai9zO5AP (~BQcdf9eiZ@gateway/tor-sasl/ai9zo5ap) |
| 23:11.11 | drmessano | #cv |
| 23:55.26 | *** join/#asterisk miltux (~miltux@94-225-27-17.access.telenet.be) |
| 23:56.01 | *** join/#asterisk cryptic (~cryptic@142.196.139.17) |