Re: Trouble with Shootist TLS example

"Jeroen van Bemmel" <[email protected]> Sat, 10 Feb 2007 23:18:31 +0100
Newsgroups gmane.comp.voip.nist-sip
Message-ID <004301c74d61$65ebb0e0$0601a8c0@BEMBUSTER>
Andrew,

I'm having the same problem. You can see what is going on when you add 
'-Djavax.net.debug=all': something goes wrong with the TLS handshake, looks 
like some kind of version conflict (TLS1.0 versus SSL2.0).

Not sure how/where to fix this, Ranga?

Regards,
Jeroen

Andrew T Gin wrote:
> I've tried changing each instance of "tls" to "tcp" in shootist.java
> and shootme.java, and it works fine (it exchanges a sequence of
> INVITES, ACKS, BYES, etc).
> My understanding is that you can make it use TCP by simply subsituting
> "TCP" wherever it has TLS, is that correct?
>
> I used my own keystore, as testPass is not the password of the
> keystore, testKeyStore, given in the example.
>
> I did a wireshark trace, and found that after Shootist and Shootme
> have exchanged what look to be encrypted packets, Shootme (listening
> on port 5071) closes the TCP connection (FIN ACK). Shootist sends
> another encrypted packet, but since the Shootme has closed its end of
> the TCP connection, Shootist receives an RST.
>
> When I change everything back to TCP, everything works fine. Does
> anyone have any idea what I could be doing wrong?
> Is there more to using TLS other than changing the protocol used from
> TCP to TLS and specifying the keystores?
> Is is possible there is something wrong in JAIN SIP, which is causing
> it to close the tcp connection prematurely when TLS is used?
>
> Thanks
> Andrew T Gin wrote:
>> Hi
>> Im having trouble getting the Shootist TLS example to work; It all
>> compiles fine, and I run Shootme:
>>
>> $ java -Djavax.net.ssl.trustStore=testKeyStore
>> -Djavax.net.ssl.trustStorePassword=testPass examples/tls/Shootme
>> sipStack = gov.nist.javax.sip.SipStackImpl@ed0338
>> tls provider gov.nist.javax.sip.SipProviderImpl@16de49c
>>
>> Then I run Shootist:
>>
>> $ java -Djavax.net.ssl.trustStore=testKeyStore
>> -Djavax.net.ssl.trustStorePassword=testPass examples/tls/Shootist
>> createSipStack gov.nist.javax.sip.SipStackImpl@6e70c7
>> IO Error sending request
>> javax.sip.SipException: IO Error sending request
>>       at
>> gov.nist.javax.sip.stack.SIPClientTransaction.sendRequest(SIPClientTransaction.java:916)
>>
>>       at examples.tls.Shootist.init(Shootist.java:390)
>>       at examples.tls.Shootist.main(Shootist.java:400)
>> java examples.shootistTLS.Shootist
>>>>>> is your class path set to the root?
>> $
>>
>> What could be causing the IO error?
>> _______________________________________________
>> nist-sip mailing list
>> [email protected]
>> http://www-x.antd.nist.gov/mailman/listinfo/nist-sip
> _______________________________________________
> nist-sip mailing list
> [email protected]
> http://www-x.antd.nist.gov/mailman/listinfo/nist-sip