IBM Sametime Forum : [Solved]Web A/V stopped working after installing SSL

Hello!

I am testing out Sametime 8.5.2 IFR1 with all the fancy pantsy stuff. I have one problem though.

In A/V webmeetings the A/V stopped working after we changed the DefaulKeyStore certificate. We switched from WebSpheres-self-created to our *.companyname.com RapidSSL purchased certificate.

I did ad it to the CellTrustStore for Cell and all Nodes. Under "Signer Cetificated".

Then synked all.

Then I changed CellKeyStore and Replaced (and deleted) the old one replacing with the *.company.com.
Then for each Node I did the same.

Result. Now I have HTTPS on Proxy, Meetings and Advanced. But A/V does not work in Browser.

Error:
Det gick inte att utf�ra TLS-handskakningen med SIP-proxyregistreringsfunktionen.

Translation: Could not perform TLS hand shake with the SIP Proxy registrar.

I have debugged a lot but so far nothing solves this.

Any ideas are welcome and thanks for listening.

Logfiles client:
P:05828 T:5044 27/11/2011 3:35:20 [ Trace] [C:\Users] Utilities::getLocalMachineIP IP : 1 = 192.168.100.11
P:05828 T:5044 27/11/2011 3:35:20 [ Trace] [C:\Users] Utilities::getLocalMachineIP Binded Successfully on Port 0
P:05828 T:5044 27/11/2011 3:35:20 [ Trace] [C:\Users] Utilities::getLocalMachineIP Connection Successful 2 using :Local IP 192.168.100.11 Local port 0 to Remote IP 11.22.33.205 and Remote Port 5081
P:05828 T:5044 27/11/2011 3:35:20 [ Trace] [C:\Users] SipStack::start - Check if SIP Provider is started. If not start it.
P:05828 T:5044 27/11/2011 3:35:20 [ Trace] [C:\Users] TLSServerSocket::TLSServerSocket Certificate Auto Accept - false
P:05828 T:5044 27/11/2011 3:35:20 [ Trace] [C:\Users] TLSServerSocket::TLSServerSocket SSL Library Initialized - Ret value = 1
P:05828 T:5044 27/11/2011 3:35:20 [ Trace] [C:\Users] TLSServerSocket::TLSServerSocket TLS ctx object creation successful
P:05828 T:5044 27/11/2011 3:35:20 [ Trace] [C:\Users] TLSServerSocket::TLSServerSocket TLS object creation successful
P:05828 T:5044 27/11/2011 3:35:20 [ Trace] [C:\Users] TLSServerSocket::TLSServerSocket - Loaded Default CAs successfully
P:05828 T:5044 27/11/2011 3:35:20 [ Trace] [C:\Users] TLSServerSocket::TLSServerSocket Socket = 3892
P:05828 T:5044 27/11/2011 3:35:20 [ Trace] [C:\Users] TransportLayer::reconnect - Need to create Socket
P:05828 T:5044 27/11/2011 3:35:20 [ Trace] [C:\Users] TLSServerSocket::setRemoteSocketAddress Connection Successful 3892 3892
P:05828 T:5044 27/11/2011 3:35:20 [ Trace] [C:\Users] TLSServerSocket::connectToRemoteServer Set FD succeeded
P:05828 T:5044 27/11/2011 3:35:21 [ Trace] [C:\Users] TLSServerSocket : verify_callback Cert Name = /C=SE/OU=Domain Control Validated/O=*.company.com/CN=*.company.com
P:05828 T:5044 27/11/2011 3:35:21 [ Trace] [C:\Users] TLSServerSocket : verify_callback Cert Error = 20
P:05828 T:5044 27/11/2011 3:35:21 [ Error] [C:\Users] TLSServerSocket : verify_callback - Error verifying cert due to error 20
P:05828 T:5044 27/11/2011 3:35:21 [ Error] [C:\Users] TLSServerSocket::connectToRemoteServer TLS handshake failed
P:05828 T:5044 27/11/2011 3:35:21 [ Trace] [C:\Users] TLSServerSocket::setRemoteSocketAddress - Binded Port = 0
P:05828 T:5044 27/11/2011 3:35:21 [ Error] [C:\Users] TransportLayer::reconnect Handshake failed
P:05828 T:5044 27/11/2011 3:35:21 [ Error] [C:\Users] TransportLayer::reconnect SIP Socket Connect Failed
P:05828 T:5044 27/11/2011 3:35:21 [ Trace] [C:\Users] TransportLayer::start - Start the Socket. Meaning start to bind
P:05828 T:5044 27/11/2011 3:35:21 [ Trace] [C:\Users] TransportLayer::sendMessage Request out -> REGISTER sip:meetings.company.com:5081;transport=TLS SIP/2.0

Cookie: LtpaToken="yjTlJOkb7dO9KaxmYmiXtkhqMyWagE67u/hDUHPckPEQeWFDwVx9rseiZhU6JY3h09DXOUlEv8nzNzcYWO+WUwrz/ToZPQHipPPec/bVW4PB8SnEt9PMUBrS8ESU5q2ImK+Cnvs0w/V2KbROY6vt8WsXIHS42oLV/gKHxR8N1S+u+LOjQmn8Do9JdTBA4OqThboDDjzCaP1w7aD5PxyqsTsdfsdfsdfsVTZ0o3g9XqjtAzzbBtLqSM09Sgsdfsdfsdfs8MTpRCZrKtpsT6FrVY9juGiEc3nsdfsdfsdfsdf7vdn5OdzOdbIQYSBkUR"

Call-ID: 0.1.0A8BBBF6A080E07B@95Ih3l19HpOxVyDVTVr5153521

CSeq: 2 REGISTER

From: <sips:WebAVClient-yyyy.zzzz%40company.se@meetings.company.com>;tag=3272153521.829745535195153521

To: <sips:WebAVClient-yyyy.zzzz%40company.se@meetings.company.com>

Via: SIP/2.0/TLS 192.168.100.11;branch=z9hG4bK123209909346153521;rport

Max-Forwards: 70

Contact: *

Expires: 0

User-Agent: Sametime-Softphone

Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, INFO, MESSAGE, UPDATE

Supported: path, outbound

Content-Length: 0

P:05828 T:5044 27/11/2011 3:35:21 [ Error] [C:\Users] TLSServerSocket::sendMessage - Cannot Send Message due to previous socket error -1
P:05828 T:5044 27/11/2011 3:35:21 [ Error] [C:\Users] TransportLayer::sendMessage Sending Failed = -1
P:05828 T:252 27/11/2011 3:35:21 [ Trace] [C:\Users] Transport layer Received Thread - Calling CoInitializeEx
P:05828 T:252 27/11/2011 3:35:21 [ Error] [C:\Users] TLSServerSocket::receiveMessage Cannot receive to due to previous socket error -1
P:05828 T:252 27/11/2011 3:35:21 [ Error] [C:\Users] Receive Data failed to due to SIP Socket Error due to Error -1
P:05828 T:252 27/11/2011 3:35:21 [ Trace] [C:\Users] Transport layer Received Thread Ended
P:05828 T:252 27/11/2011 3:35:21 [ Trace] [C:\Users] Transport layer Received Thread - Calling CoUninitialize

IBM Sametime Forum

Resources

Lotus Support

Wikis

Lotus Forums