Sponsor: VoiceMeUp - Corporate & Wholesale VoIP Services

VoIP Mailing List Archives
Mailing list archives for the VoIP community
 SearchSearch 

[asterisk-users] WSS over Asterisk


 
Post new topic   Reply to topic    VoIP Mailing List Archives Forum Index -> Asterisk Users
View previous topic :: View next topic  
Author Message
steveng.1988 at gmail.com
Guest





PostPosted: Wed Jun 11, 2014 2:58 am    Post subject: [asterisk-users] WSS over Asterisk Reply with quote

Hi,

Have anyone tried using SIPML5 to connect to Asterisk over wss?


I'm having the error as shown below 


Connecting to 'wss://54.xxx.xxx.xxx:8080/ws' SIPml-api.js?svn=224:1
==stack event = starting SIPml-api.js?svn=224:1
__tsip_transport_ws_onerror SIPml-api.js?svn=224:1
__tsip_transport_ws_onclose SIPml-api.js?svn=224:1
==stack event = failed_to_start


Where if I'm connecting through ws://54.xxx.xxx.xxxx:8080/ws, it works fine. Any idea why? 
Back to top
mjordan at digium.com
Guest





PostPosted: Wed Jun 11, 2014 1:28 pm    Post subject: [asterisk-users] WSS over Asterisk Reply with quote

On Wed, Jun 11, 2014 at 2:58 AM, Steve Ng <steveng.1988@gmail.com (steveng.1988@gmail.com)> wrote:
Quote:
Hi,

Have anyone tried using SIPML5 to connect to Asterisk over wss?


I'm having the error as shown below 


Connecting to 'wss://54.xxx.xxx.xxx:8080/ws' SIPml-api.js?svn=224:1
==stack event = starting SIPml-api.js?svn=224:1
__tsip_transport_ws_onerror SIPml-api.js?svn=224:1
__tsip_transport_ws_onclose SIPml-api.js?svn=224:1
==stack event = failed_to_start



Where if I'm connecting through ws://54.xxx.xxx.xxxx:8080/ws, it works fine. Any idea why? 





There was a bug in secure WebSockets (tracked under ASTERISK-21930) that was fixed in Asterisk 11.9.0:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/asterisk-11.9.0-summary.html


Which version of Asterisk are you using? Is it 11.9.0 or later?


--
Matthew Jordan

Digium, Inc. | Engineering Manager
445 Jan Davis Drive NW - Huntsville, AL 35806 - USA
Check us out at: http://digium.com & http://asterisk.org
Back to top
will at willwh.com
Guest





PostPosted: Wed Jun 11, 2014 1:33 pm    Post subject: [asterisk-users] WSS over Asterisk Reply with quote

Chrome 35 broke all of this.... you need to be using DTLS now I believe.

I had working secure web sockets with asterisk 12.2.x and chrome 34.... and then google broke eveything Smile


I have not yet got around to test out DTLS etc. with chrome 35


Just so I don't waste too much time when I go to test, does anyone know if all that's required for DTLS on the asterisk side is the following in sip.conf?


dtlsenable=yes
dtlsverify=yes
dtlsrekey=60
dtlscafile=/usr/local/share/ca-certificates/myCA.crt
dtlscertfile=/etc/ssl/mycert.com.pem
dtlssetup=actpass



I assume I also need TLS configs in http.conf

William Hetheringtonw - www.willwh.com
t - @wmwh




On Wed, Jun 11, 2014 at 11:28 AM, Matthew Jordan <mjordan@digium.com (mjordan@digium.com)> wrote:
Quote:



On Wed, Jun 11, 2014 at 2:58 AM, Steve Ng <steveng.1988@gmail.com (steveng.1988@gmail.com)> wrote:
Quote:
Hi,

Have anyone tried using SIPML5 to connect to Asterisk over wss?


I'm having the error as shown below 


Connecting to 'wss://54.xxx.xxx.xxx:8080/ws' SIPml-api.js?svn=224:1
==stack event = starting SIPml-api.js?svn=224:1
__tsip_transport_ws_onerror SIPml-api.js?svn=224:1
__tsip_transport_ws_onclose SIPml-api.js?svn=224:1
==stack event = failed_to_start



Where if I'm connecting through ws://54.xxx.xxx.xxxx:8080/ws, it works fine. Any idea why? 







There was a bug in secure WebSockets (tracked under ASTERISK-21930) that was fixed in Asterisk 11.9.0:

http://downloads.asterisk.org/pub/telephony/asterisk/releases/asterisk-11.9.0-summary.html


Which version of Asterisk are you using? Is it 11.9.0 or later?


--
Matthew Jordan

Digium, Inc. | Engineering Manager
445 Jan Davis Drive NW - Huntsville, AL 35806 - USA
Check us out at: http://digium.com & http://asterisk.org




--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
               http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users
Back to top
mjordan at digium.com
Guest





PostPosted: Wed Jun 11, 2014 1:52 pm    Post subject: [asterisk-users] WSS over Asterisk Reply with quote

On Wed, Jun 11, 2014 at 1:32 PM, William Hetherington <will@willwh.com (will@willwh.com)> wrote:
Quote:
Chrome 35 broke all of this.... you need to be using DTLS now I believe.

I had working secure web sockets with asterisk 12.2.x and chrome 34.... and then google broke eveything Smile


I have not yet got around to test out DTLS etc. with chrome 35


Just so I don't waste too much time when I go to test, does anyone know if all that's required for DTLS on the asterisk side is the following in sip.conf?


dtlsenable=yes
dtlsverify=yes
dtlsrekey=60
dtlscafile=/usr/local/share/ca-certificates/myCA.crt
dtlscertfile=/etc/ssl/mycert.com.pem
dtlssetup=actpass



I assume I also need TLS configs in http.conf





Signalling is independent of the media; DTLS only affects the media.

However, there are known issues with Chrome's negotiation of DTLS and Asterisk - see https://issues.asterisk.org/jira/browse/ASTERISK-22961



--
Matthew Jordan

Digium, Inc. | Engineering Manager
445 Jan Davis Drive NW - Huntsville, AL 35806 - USA
Check us out at: http://digium.com & http://asterisk.org
Back to top
mfmolina-listas at mil...
Guest





PostPosted: Wed Jun 11, 2014 3:37 pm    Post subject: [asterisk-users] WSS over Asterisk Reply with quote

El 11/06/2014 1:52 p. m., Matthew Jordan escribió:

Quote:



On Wed, Jun 11, 2014 at 1:32 PM, William Hetherington <will@willwh.com (will@willwh.com)> wrote:
Quote:
Chrome 35 broke all of this.... you need to be using DTLS now I believe.

I had working secure web sockets with asterisk 12.2.x and chrome 34.... and then google broke eveything Smile


I have not yet got around to test out DTLS etc. with chrome 35


Just so I don't waste too much time when I go to test, does anyone know if all that's required for DTLS on the asterisk side is the following in sip.conf?


dtlsenable=yes
dtlsverify=yes
dtlsrekey=60
dtlscafile=/usr/local/share/ca-certificates/myCA.crt
dtlscertfile=/etc/ssl/mycert.com.pem
dtlssetup=actpass



I assume I also need TLS configs in http.conf





Signalling is independent of the media; DTLS only affects the media.

However, there are known issues with Chrome's negotiation of DTLS and Asterisk - see https://issues.asterisk.org/jira/browse/ASTERISK-22961



--
Matthew Jordan

Digium, Inc. | Engineering Manager
445 Jan Davis Drive NW - Huntsville, AL 35806 - USA
Check us out at: http://digium.com & http://asterisk.org





It is broken in Chrome (firefox never had SDES) because the WebRTC standard favoured the DTLS SRTP implementation instead of the SDES one. The thing is that although Asterisk supports DTLS implementation, it only supports SHA-1 hashing but both Firefox and Chrome work with SHA-256. The patch proposed in ASTERISK-22961 is an effort to solve this issue.

Best regards
Back to top
steveng.1988 at gmail.com
Guest





PostPosted: Wed Jun 11, 2014 8:21 pm    Post subject: [asterisk-users] WSS over Asterisk Reply with quote

I am using Asterisk v12.3. 

As far as DTLS, I understand that applying the following Javascript will temporarily fix for SIPML5 to Asterisk: https://gist.github.com/steve-ng/14b9b88af43f92db1e46


WS works for me, its just wss which I'm stuck currently. 



On Thu, Jun 12, 2014 at 4:37 AM, Miguel Molina <mfmolina-listas@millenium.com.co (mfmolina-listas@millenium.com.co)> wrote:
Quote:
El 11/06/2014 1:52 p. m., Matthew Jordan escribió:

Quote:



On Wed, Jun 11, 2014 at 1:32 PM, William Hetherington <will@willwh.com (will@willwh.com)> wrote:
Quote:
Chrome 35 broke all of this.... you need to be using DTLS now I believe.

I had working secure web sockets with asterisk 12.2.x and chrome 34.... and then google broke eveything Smile


I have not yet got around to test out DTLS etc. with chrome 35


Just so I don't waste too much time when I go to test, does anyone know if all that's required for DTLS on the asterisk side is the following in sip.conf?


dtlsenable=yes
dtlsverify=yes
dtlsrekey=60
dtlscafile=/usr/local/share/ca-certificates/myCA.crt
dtlscertfile=/etc/ssl/mycert.com.pem
dtlssetup=actpass



I assume I also need TLS configs in http.conf





Signalling is independent of the media; DTLS only affects the media.

However, there are known issues with Chrome's negotiation of DTLS and Asterisk - see https://issues.asterisk.org/jira/browse/ASTERISK-22961



--
Matthew Jordan

Digium, Inc. | Engineering Manager
445 Jan Davis Drive NW - Huntsville, AL 35806 - USA
Check us out at: http://digium.com & http://asterisk.org







It is broken in Chrome (firefox never had SDES) because the WebRTC standard favoured the DTLS SRTP implementation instead of the SDES one. The thing is that although Asterisk supports DTLS implementation, it only supports SHA-1 hashing but both Firefox and Chrome work with SHA-256. The patch proposed in ASTERISK-22961 is an effort to solve this issue.

Best regards


--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
               http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users
Back to top
marcotasto at libero.it
Guest





PostPosted: Thu Jun 12, 2014 2:13 am    Post subject: [asterisk-users] WSS over Asterisk Reply with quote

Hi

I tested yesterday the SIPML5 fix and I can confirm it works as expected with Asterisk 12 SVN-trunk-r415192 using chan_sip and no DTLS enabled.
Tested with Chrome 35.0.1916.153m.
The patch is targeted to Chrome. Firefox still be unable to handle calls in my setup.

In my tests I've found some asterisk exceptions when SIMPL5 is used from Chrome with the provided patch AND DTLS is configured for the peer in sip.conf AND certificates are installed in Chrome. I suppose this is something work in progress so I'm not worried about it.

I can also confirm the problem with wss where the SIPML5 seems not able to connect to the asterisk box.

Thank you and best regards,
Marco Signorini.



On 06/12/2014 03:21 AM, Steve Ng wrote:

Quote:
I am using Asterisk v12.3.

As far as DTLS, I understand that applying the following Javascript will temporarily fix for SIPML5 to Asterisk: https://gist.github.com/steve-ng/14b9b88af43f92db1e46


WS works for me, its just wss which I'm stuck currently.



On Thu, Jun 12, 2014 at 4:37 AM, Miguel Molina <mfmolina-listas@millenium.com.co (mfmolina-listas@millenium.com.co)> wrote:
Quote:
El 11/06/2014 1:52 p. m., Matthew Jordan escribió:

Quote:



On Wed, Jun 11, 2014 at 1:32 PM, William Hetherington <will@willwh.com (will@willwh.com)> wrote:
Quote:
Chrome 35 broke all of this.... you need to be using DTLS now I believe.

I had working secure web sockets with asterisk 12.2.x and chrome 34.... and then google broke eveything Smile


I have not yet got around to test out DTLS etc. with chrome 35


Just so I don't waste too much time when I go to test, does anyone know if all that's required for DTLS on the asterisk side is the following in sip.conf?


dtlsenable=yes
dtlsverify=yes
dtlsrekey=60
dtlscafile=/usr/local/share/ca-certificates/myCA.crt
dtlscertfile=/etc/ssl/mycert.com.pem
dtlssetup=actpass



I assume I also need TLS configs in http.conf





Signalling is independent of the media; DTLS only affects the media.

However, there are known issues with Chrome's negotiation of DTLS and Asterisk - see https://issues.asterisk.org/jira/browse/ASTERISK-22961



--
Matthew Jordan

Digium, Inc. | Engineering Manager
445 Jan Davis Drive NW - Huntsville, AL 35806 - USA
Check us out at: http://digium.com & http://asterisk.org







It is broken in Chrome (firefox never had SDES) because the WebRTC standard favoured the DTLS SRTP implementation instead of the SDES one. The thing is that although Asterisk supports DTLS implementation, it only supports SHA-1 hashing but both Firefox and Chrome work with SHA-256. The patch proposed in ASTERISK-22961 is an effort to solve this issue.

Best regards


--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users





Back to top
kenner at gnat.com
Guest





PostPosted: Thu Jun 12, 2014 7:16 am    Post subject: [asterisk-users] WSS over Asterisk Reply with quote

Quote:
I'm having the error as shown belowÂ

Connecting to 'wss://54.xxx.xxx.xxx:8080/ws' SIPml-api.js?svn=224:1
==stack event = starting SIPml-api.js?svn=224:1
__tsip_transport_ws_onerror SIPml-api.js?svn=224:1
__tsip_transport_ws_onclose SIPml-api.js?svn=224:1
==stack event = failed_to_start


Where if I'm connecting through ws://54.xxx.xxx.xxxx:8080/ws, it works fine.
Any idea why?Â

Sorry for the delay in answering: I meant to reply and forgot.
"ws://" uses HTTP and "wss://" uses HTTPS so there's no way they can
work via the same socket. You have to set up a separate HTTPS socket
for wss.


--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
Back to top
Display posts from previous:   
Post new topic   Reply to topic    VoIP Mailing List Archives Forum Index -> Asterisk Users All times are GMT - 5 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group

VoiceMeUp - Corporate & Wholesale VoIP Services