[solved] TLS keyfile doesn't loaded (exception error)

Discuss any topic about Brekeke SIP Server.

Moderator: Brekeke Support Team

Post Reply
redmiru
Posts: 19
Joined: Sun Feb 12, 2012 4:34 pm

[solved] TLS keyfile doesn't loaded (exception error)

Post by redmiru »

1. Brekeke Product Name and version:
BSS 3.0.5.5 Advanced version

2. Java version:
1.6.0.24

3. OS type and the version:
Ubuntu 12.04

4. UA (phone), gateway or other hardware/software involved:
Bria3

5. Select your network pattern from http://www.brekeke-sip.com/bbs/network/ ... terns.html :

6. Your problem:

TLS jks file input (and reboot), and it works well (It's legal Cert. file)
==================================
tls-listener: start
TLS: Certificates ===================================
JKS File: /var/lib/tomcat7/webapps/sip/WEB-INF/work/sv/key/keystore.jks
Local-Cert: Serial#: xxxx
Local-Cert: Issuer: xxxx
Local-Cert: Subject: xxxx
Local-Cert: Signature: xxxx
Local-Cert: Valid from: 03/12/12 00:00:00.000 until : 04/11/13 23:59:59.000
============================================


but reboot brekeke again, TLS does not work as below
============================
tls-listener: start^M
Exception: 07/26/12 12:15:04.482
javax.crypto.IllegalBlockSizeException: Input length must be multiple of 8 when decrypting with padded cipher
com.sun.crypto.provider.CipherCore.doFinal (CipherCore.java:750)
com.sun.crypto.provider.CipherCore.doFinal (CipherCore.java:676)
com.sun.crypto.provider.DESCipher.engineDoFinal (DESCipher.java:318)
javax.crypto.Cipher.doFinal (Cipher.java:1813)
com.brekeke.secure.Crypt.decrypt (null:-1)
com.brekeke.net.sip.sv.tls.SIPtlsListener.<init> (null:-1)
com.brekeke.net.sip.sv.SIPsvListener.<init> (null:-1)
com.brekeke.ondo.sv.main (null:-1)
svlistener: open session-log '/var/lib/tomcat7/webapps/sip/WEB-INF/work/sv/log/2012/07/session.20120726.log'.^M
svlistener: open dial-plan '/var/lib/tomcat7/webapps/sip/WEB-INF/work/sv/etc/dialplan.tbl'.^M
svlistener: hostname=localhost listen-port=5060^M


Please help this issue.
Last edited by redmiru on Thu Jul 26, 2012 5:33 am, edited 1 time in total.
redmiru
Posts: 19
Joined: Sun Feb 12, 2012 4:34 pm

Post by redmiru »

I found why it works just like this.

If I change some value on SIP configuration pages, then MUST input again the jks file's password!!!!

It seems bug. :cry:
Mike
Posts: 733
Joined: Mon Mar 07, 2005 2:25 pm
Location: Sunny San Mateo
Contact:

Post by Mike »

Hi redmiru,

We recognized the issue in our lab. Sorry for the inconvenience..
We will fix this bug soon.

Meanwhile, if possible, let you use the DER file instead of JKS file.
http://wiki.brekeke.com/wiki/Key-and-Certificate
Mike
Posts: 733
Joined: Mon Mar 07, 2005 2:25 pm
Location: Sunny San Mateo
Contact:

Post by Mike »

Hi redmiru,

We fixed the issue in the version 3.1.

Please try the latest version 3.1 which you can download from the following page.
http://www.brekeke.com/download/download_sip_3_0.php
Post Reply