Certificate verify failed


(Jack) #1

hi all,
i try to use WEBRTC make a call from chrome use sipml5,
but the CLI show message “certificate verify failed”,how can i troubleshoot?
i have already have the certificate file by domain :webphoen.qinweigroup.net
thank you ~~
best regards!

[2019-09-09 17:40:54] ERROR[28748]: res_pjsip.c:4261 endpt_send_request: Error 171060 'Unsupported transport (PJSIP_EUNSUPTRANSPORT)' sending OPTIONS request to endpoint 6001
<--- Received SIP request (2894 bytes) from WSS:110.184.145.26:5540 --->
INVITE sip:*69@webphone.qinweigroup.net SIP/2.0
Via: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bKS3sMI7IZ01LhtDwz4Kvl9zk3ykG1MBg9;rport
From: "jack"<sip:6001@webphone.qinweigroup.net:6871>;tag=ztH6w8bTSiWBixf0nXMS
To: <sip:*69@webphone.qinweigroup.net>
Contact: "jack"<sips:6001@df7jal23ls0d.invalid;rtcweb-breaker=no;click2call=no;transport=wss>;+g.oma.sip-im;language="en,fr"
Call-ID: 462943b5-4f97-4506-ef3b-ddbff69a9b46
CSeq: 7204 INVITE
Content-Type: application/sdp
Content-Length: 2286
Max-Forwards: 70
User-Agent: IM-client/OMA1.0 sipML5-v1.2016.03.04
Organization: Doubango Telecom

v=0
o=- 8214160573771452000 2 IN IP4 127.0.0.1
s=Doubango Telecom - chrome
t=0 0
a=group:BUNDLE 0
a=msid-semantic: WMS QLl0JSDpbxzpS9IuFk8n7GcABzsRB2pVwD80
m=audio 7306 UDP/TLS/RTP/SAVPF 111 103 104 9 0 8 106 105 13 110 112 113 126
c=IN IP4 110.184.145.26
a=rtcp:7307 IN IP4 110.184.145.26
a=candidate:1002299927 1 udp 2122260223 192.168.6.80 41131 typ host generation 0 network-id 1
a=candidate:1002299927 2 udp 2122260222 192.168.6.80 58302 typ host generation 0 network-id 1
a=candidate:1967005415 1 tcp 1518280447 192.168.6.80 9 typ host tcptype active generation 0 network-id 1
a=candidate:1967005415 2 tcp 1518280446 192.168.6.80 9 typ host tcptype active generation 0 network-id 1
a=candidate:3450706883 1 udp 1686052607 110.184.145.26 7306 typ srflx raddr 192.168.6.80 rport 41131 generation 0 network-id 1
a=candidate:3450706883 2 udp 1686052606 110.184.145.26 7307 typ srflx raddr 192.168.6.80 rport 58302 generation 0 network-id 1
a=ice-ufrag:/D80
a=ice-pwd:5okDbtNyoE6yUkMzLXBiqlkN
a=ice-options:trickle
a=fingerprint:sha-256 A9:32:22:20:31:BE:33:67:6A:15:A4:E7:51:96:CA:56:B6:8B:8B:7C:92:5A:95:1B:FE:26:CB:47:94:AC:57:ED
a=setup:actpass
a=mid:0
a=extmap:1 urn:ietf:params:rtp-hdrext:ssrc-audio-level
a=extmap:2 http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
a=extmap:3 urn:ietf:params:rtp-hdrext:sdes:mid
a=extmap:4 urn:ietf:params:rtp-hdrext:sdes:rtp-stream-id
a=extmap:5 urn:ietf:params:rtp-hdrext:sdes:repaired-rtp-stream-id
a=sendrecv
a=msid:QLl0JSDpbxzpS9IuFk8n7GcABzsRB2pVwD80 d4197ebc-3f1d-4476-bd11-b6b57191d46c
a=rtcp-mux
a=rtpmap:111 opus/48000/2
a=rtcp-fb:111 transport-cc
a=fmtp:111 minptime=10;useinbandfec=1
a=rtpmap:103 ISAC/16000
a=rtpmap:104 ISAC/32000
a=rtpmap:9 G722/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:106 CN/32000
a=rtpmap:105 CN/16000
a=rtpmap:13 CN/8000
a=rtpmap:110 telephone-event/48000
a=rtpmap:112 telephone-event/32000
a=rtpmap:113 telephone-event/16000
a=rtpmap:126 telephone-event/8000
a=ssrc:2150700876 cname:vScPyFZzs73nSNMx
a=ssrc:2150700876 msid:QLl0JSDpbxzpS9IuFk8n7GcABzsRB2pVwD80 d4197ebc-3f1d-4476-bd11-b6b57191d46c
a=ssrc:2150700876 mslabel:QLl0JSDpbxzpS9IuFk8n7GcABzsRB2pVwD80
a=ssrc:2150700876 label:d4197ebc-3f1d-4476-bd11-b6b57191d46c

<--- Transmitting SIP response (570 bytes) to WSS:110.184.145.26:5540 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/WSS df7jal23ls0d.invalid;rport=5540;received=110.184.145.26;branch=z9hG4bKS3sMI7IZ01LhtDwz4Kvl9zk3ykG1MBg9
Call-ID: 462943b5-4f97-4506-ef3b-ddbff69a9b46
From: "jack" <sip:6001@webphone.qinweigroup.net>;tag=ztH6w8bTSiWBixf0nXMS
To: <sip:*69@webphone.qinweigroup.net>;tag=z9hG4bKS3sMI7IZ01LhtDwz4Kvl9zk3ykG1MBg9
CSeq: 7204 INVITE
WWW-Authenticate: Digest realm="asterisk",nonce="1568022094/b5d393d275f74b8be8e01efbb6663c72",opaque="7b46d5942c5a6099",algorithm=md5,qop="auth"
Server: FPBX-15.0.16(16.5.0)
Content-Length:  0


<--- Received SIP request (403 bytes) from WSS:110.184.145.26:5540 --->
ACK sip:*69@webphone.qinweigroup.net SIP/2.0
Via: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bKS3sMI7IZ01LhtDwz4Kvl9zk3ykG1MBg9;rport
From: "jack"<sip:6001@webphone.qinweigroup.net:6871>;tag=ztH6w8bTSiWBixf0nXMS
To: <sip:*69@webphone.qinweigroup.net>;tag=z9hG4bKS3sMI7IZ01LhtDwz4Kvl9zk3ykG1MBg9
Call-ID: 462943b5-4f97-4506-ef3b-ddbff69a9b46
CSeq: 7204 ACK
Content-Length: 0
Max-Forwards: 70


<--- Received SIP request (3188 bytes) from WSS:110.184.145.26:5540 --->
INVITE sip:*69@webphone.qinweigroup.net SIP/2.0
Via: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bK57egFTiLQXcqO4Ocrg7TyDE8NPbNeR8N;rport
From: "jack"<sip:6001@webphone.qinweigroup.net:6871>;tag=ztH6w8bTSiWBixf0nXMS
To: <sip:*69@webphone.qinweigroup.net>
Contact: "jack"<sips:6001@df7jal23ls0d.invalid;rtcweb-breaker=no;click2call=no;transport=wss>;+g.oma.sip-im;language="en,fr"
Call-ID: 462943b5-4f97-4506-ef3b-ddbff69a9b46
CSeq: 7205 INVITE
Content-Type: application/sdp
Content-Length: 2286
Max-Forwards: 70
Authorization: Digest username="6001",realm="asterisk",nonce="1568022094/b5d393d275f74b8be8e01efbb6663c72",uri="sip:*69@webphone.qinweigroup.net",response="cb9e1bef0f3f6eb3dd7758a2aa34522c",algorithm=md5,cnonce="5147d96682bd6403b00648ffa4d0e929",opaque="7b46d5942c5a6099",qop=auth,nc=00000001
User-Agent: IM-client/OMA1.0 sipML5-v1.2016.03.04
Organization: Doubango Telecom

v=0
o=- 8214160573771452000 2 IN IP4 127.0.0.1
s=Doubango Telecom - chrome
t=0 0
a=group:BUNDLE 0
a=msid-semantic: WMS QLl0JSDpbxzpS9IuFk8n7GcABzsRB2pVwD80
m=audio 7306 UDP/TLS/RTP/SAVPF 111 103 104 9 0 8 106 105 13 110 112 113 126
c=IN IP4 110.184.145.26
a=rtcp:7307 IN IP4 110.184.145.26
a=candidate:1002299927 1 udp 2122260223 192.168.6.80 41131 typ host generation 0 network-id 1
a=candidate:1002299927 2 udp 2122260222 192.168.6.80 58302 typ host generation 0 network-id 1
a=candidate:1967005415 1 tcp 1518280447 192.168.6.80 9 typ host tcptype active generation 0 network-id 1
a=candidate:1967005415 2 tcp 1518280446 192.168.6.80 9 typ host tcptype active generation 0 network-id 1
a=candidate:3450706883 1 udp 1686052607 110.184.145.26 7306 typ srflx raddr 192.168.6.80 rport 41131 generation 0 network-id 1
a=candidate:3450706883 2 udp 1686052606 110.184.145.26 7307 typ srflx raddr 192.168.6.80 rport 58302 generation 0 network-id 1
a=ice-ufrag:/D80
a=ice-pwd:5okDbtNyoE6yUkMzLXBiqlkN
a=ice-options:trickle
a=fingerprint:sha-256 A9:32:22:20:31:BE:33:67:6A:15:A4:E7:51:96:CA:56:B6:8B:8B:7C:92:5A:95:1B:FE:26:CB:47:94:AC:57:ED
a=setup:actpass
a=mid:0
a=extmap:1 urn:ietf:params:rtp-hdrext:ssrc-audio-level
a=extmap:2 http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
a=extmap:3 urn:ietf:params:rtp-hdrext:sdes:mid
a=extmap:4 urn:ietf:params:rtp-hdrext:sdes:rtp-stream-id
a=extmap:5 urn:ietf:params:rtp-hdrext:sdes:repaired-rtp-stream-id
a=sendrecv
a=msid:QLl0JSDpbxzpS9IuFk8n7GcABzsRB2pVwD80 d4197ebc-3f1d-4476-bd11-b6b57191d46c
a=rtcp-mux
a=rtpmap:111 opus/48000/2
a=rtcp-fb:111 transport-cc
a=fmtp:111 minptime=10;useinbandfec=1
a=rtpmap:103 ISAC/16000
a=rtpmap:104 ISAC/32000
a=rtpmap:9 G722/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:106 CN/32000
a=rtpmap:105 CN/16000
a=rtpmap:13 CN/8000
a=rtpmap:110 telephone-event/48000
a=rtpmap:112 telephone-event/32000
a=rtpmap:113 telephone-event/16000
a=rtpmap:126 telephone-event/8000
a=ssrc:2150700876 cname:vScPyFZzs73nSNMx
a=ssrc:2150700876 msid:QLl0JSDpbxzpS9IuFk8n7GcABzsRB2pVwD80 d4197ebc-3f1d-4476-bd11-b6b57191d46c
a=ssrc:2150700876 mslabel:QLl0JSDpbxzpS9IuFk8n7GcABzsRB2pVwD80
a=ssrc:2150700876 label:d4197ebc-3f1d-4476-bd11-b6b57191d46c

  == Setting global variable 'SIPDOMAIN' to 'webphone.qinweigroup.net'
<--- Transmitting SIP response (374 bytes) to WSS:110.184.145.26:5540 --->
SIP/2.0 100 Trying
Via: SIP/2.0/WSS df7jal23ls0d.invalid;rport=5540;received=110.184.145.26;branch=z9hG4bK57egFTiLQXcqO4Ocrg7TyDE8NPbNeR8N
Call-ID: 462943b5-4f97-4506-ef3b-ddbff69a9b46
From: "jack" <sip:6001@webphone.qinweigroup.net>;tag=ztH6w8bTSiWBixf0nXMS
To: <sip:*69@webphone.qinweigroup.net>
CSeq: 7205 INVITE
Server: FPBX-15.0.16(16.5.0)
Content-Length:  0


  == Using SIP RTP Audio TOS bits 184
  == Using SIP RTP Audio TOS bits 184 in TCLASS field.
  == Using SIP RTP Audio CoS mark 5
    -- Executing [*69@from-internal:1] Goto("PJSIP/6001-0000002d", "app-calltrace-perform,s,1") in new stack
    -- Goto (app-calltrace-perform,s,1)
    -- Executing [s@app-calltrace-perform:1] Set("PJSIP/6001-0000002d", "CONNECTEDLINE(name-charset,i)=utf8") in new stack
    -- Executing [s@app-calltrace-perform:2] Set("PJSIP/6001-0000002d", "CONNECTEDLINE(name,i)=呼叫追踪") in new stack
    -- Executing [s@app-calltrace-perform:3] Set("PJSIP/6001-0000002d", "CONNECTEDLINE(num,i)=s") in new stack
    -- Executing [s@app-calltrace-perform:4] Answer("PJSIP/6001-0000002d", "") in new stack
<--- Transmitting SIP response (1514 bytes) to WSS:110.184.145.26:5540 --->
SIP/2.0 200 OK
Via: SIP/2.0/WSS df7jal23ls0d.invalid;rport=5540;received=110.184.145.26;branch=z9hG4bK57egFTiLQXcqO4Ocrg7TyDE8NPbNeR8N
Call-ID: 462943b5-4f97-4506-ef3b-ddbff69a9b46
From: "jack" <sip:6001@webphone.qinweigroup.net>;tag=ztH6w8bTSiWBixf0nXMS
To: <sip:*69@webphone.qinweigroup.net>;tag=79c682b4-51df-4333-a663-95ff01efde84
CSeq: 7205 INVITE
Server: FPBX-15.0.16(16.5.0)
Contact: <sips:192.168.1.158:8089;transport=ws>
Allow: OPTIONS, REGISTER, SUBSCRIBE, NOTIFY, PUBLISH, INVITE, ACK, BYE, CANCEL, UPDATE, PRACK, MESSAGE, REFER
Supported: 100rel, timer, replaces, norefersub
P-Asserted-Identity: "呼叫追踪" <sip:s@webphone.qinweigroup.net>
Content-Type: application/sdp
Content-Length:   791

v=0
o=- 2007666272 4 IN IP4 192.168.1.158
s=Asterisk
c=IN IP4 192.168.1.158
t=0 0
a=group:BUNDLE 0
m=audio 12072 UDP/TLS/RTP/SAVPF 111 8 126
a=connection:new
a=setup:active
a=fingerprint:SHA-256 53:49:22:7D:B4:4E:69:5F:62:F6:18:50:65:84:D0:77:EC:6E:8D:DE:AB:00:A7:76:2D:25:89:A7:77:2D:E6:4F
a=ice-ufrag:23d30b5b2dbde9b75fe38a4b654da6d3
a=ice-pwd:0039026f23c975ca23d5a814280ca8af
a=candidate:He0ec0f98 1 UDP 2130706431 fe80::f816:3eff:fe20:b27f 12072 typ host
a=candidate:Hc0a8019e 1 UDP 2130706431 192.168.1.158 12072 typ host
a=rtpmap:111 opus/48000/2
a=fmtp:111 useinbandfec=1
a=rtpmap:8 PCMA/8000
a=rtpmap:126 telephone-event/8000
a=fmtp:126 0-16
a=ptime:20
a=maxptime:20
a=sendrecv
a=rtcp-mux
a=ssrc:1560523773 cname:45b90ca4-4336-40eb-a066-08032a3e4f91
a=mid:0

<--- Received SIP request (899 bytes) from WSS:110.184.145.26:5540 --->
ACK sips:192.168.1.158:8089;transport=ws SIP/2.0
Via: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bKb5No2TLObME2ZeTA6mZu;rport
From: "jack"<sip:6001@webphone.qinweigroup.net:6871>;tag=ztH6w8bTSiWBixf0nXMS
To: <sip:*69@webphone.qinweigroup.net>;tag=79c682b4-51df-4333-a663-95ff01efde84
Contact: "jack"<sips:6001@df7jal23ls0d.invalid;rtcweb-breaker=no;click2call=no;transport=wss>;+g.oma.sip-im;language="en,fr"
Call-ID: 462943b5-4f97-4506-ef3b-ddbff69a9b46
CSeq: 7205 ACK
Content-Length: 0
Max-Forwards: 70
Authorization: Digest username="6001",realm="asterisk",nonce="1568022094/b5d393d275f74b8be8e01efbb6663c72",uri="sips:192.168.1.158:8089;transport=ws",response="f29731cd3b7930c85f64e989a7f4ed8c",algorithm=md5,cnonce="5147d96682bd6403b00648ffa4d0e929",opaque="7b46d5942c5a6099",qop=auth,nc=00000002
User-Agent: IM-client/OMA1.0 sipML5-v1.2016.03.04
Organization: Doubango Telecom


[2019-09-09 17:41:34] ERROR[30514][C-00000023]: res_rtp_asterisk.c:2970 __rtp_recvfrom: DTLS failure occurred on RTP instance '0x7f780408e7f0' due to reason 'certificate verify failed', terminating
[2019-09-09 17:41:34] WARNING[30514][C-00000023]: res_rtp_asterisk.c:7108 ast_rtp_read: RTP Read error: Unspecified.  Hanging up.
  == Spawn extension (app-calltrace-perform, s, 4) exited non-zero on 'PJSIP/6001-0000002d'
<--- Transmitting SIP request (507 bytes) to WSS:110.184.145.26:5540 --->
BYE sips:6001@110.184.145.26:5540;transport=ws;rtcweb-breaker=no;click2call=no SIP/2.0
Via: SIP/2.0/WSS 192.168.1.158:8089;rport;branch=z9hG4bKPjd8baabe6-cc14-43de-9a61-d5efd783537e;alias
From: <sip:*69@webphone.qinweigroup.net>;tag=79c682b4-51df-4333-a663-95ff01efde84
To: "jack" <sip:6001@webphone.qinweigroup.net>;tag=ztH6w8bTSiWBixf0nXMS
Call-ID: 462943b5-4f97-4506-ef3b-ddbff69a9b46
CSeq: 14366 BYE
Reason: Q.850;cause=0
Max-Forwards: 70
User-Agent: FPBX-15.0.16(16.5.0)
Content-Length:  0


<--- Received SIP response (420 bytes) from WSS:110.184.145.26:5540 --->
SIP/2.0 200 OK
Via: SIP/2.0/WSS 192.168.1.158:8089;rport=8089;branch=z9hG4bKPjd8baabe6-cc14-43de-9a61-d5efd783537e;alias
From: <sip:*69@webphone.qinweigroup.net>;tag=79c682b4-51df-4333-a663-95ff01efde84
To: "jack"<sip:6001@webphone.qinweigroup.net>;tag=ztH6w8bTSiWBixf0nXMS
Contact: <sips:6001@df7jal23ls0d.invalid;transport=wss>
Call-ID: 462943b5-4f97-4506-ef3b-ddbff69a9b46
CSeq: 14366 BYE
Content-Length: 0

(system) closed #2

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.