16:44:18 <mentax> mc_: could you please tell me iff I could import 1 user from old cluster to the new cluster with clone_tool?
16:54:36 <mc_> i don't know off-hand, haven't used clone_tool in ages
16:55:36 <mentax> ok
17:14:31 <mentax> mc_ another question - how did you guys deal with TLS for kamailio for different resellers? In tls.cfg you can only specify one certificate and if you have 2 resellers with different domains that could be an issue?
17:16:14 <mentax> and the same with HAProxy...
17:19:48 <mentax> Just found how to do that for kamailio TLS. But not for HAProxy web sockets
17:23:44 <mc_> mentax: good question
17:24:13 <mc_> i assume of we can't do multiple certs per kamailio, if an account needed a custom cert, we would stand up a kam instance specifically for them
17:24:26 <mc_> but afaik we don't have a big need for this
17:24:49 <mc_> but i don't have insight into that
17:42:29 <mentax> mc_ for TLS you can specify multiple domains.
17:43:25 <mentax> I just done that. But for a websocket browser most likely will complain about cert
18:22:36 <mentax> mc_ I did it ;-)
18:23:45 <Ysean> do share :)
18:25:27 <mentax> bind 0.0.0.0:7777 ssl crt /etc/SSL/domain1.com/HAProxy_cert_key.pem crt /etc/SSL/domain2.com/HAProxy_cert_key.pem
18:26:00 <Ysean> gotcha
18:30:38 <mentax> Now there is another things - In kamailio local.conf you specify #!substdef "!MY_WEBSOCKET_DOMAIN!domain1!g"
18:31:23 <mentax> how can I add second domain over there... 
18:42:33 <mentax> mayve mc_ know more about websockets )))
19:14:47 <mc_> mentax: if the websocket domain is cancelled out, any host can connect to it
19:14:58 <mc_> if defined, only connections from that host are allowed
19:23:56 <mentax> mc_ so, if I will specify #!substdef "!MY_WEBSOCKET_DOMAIN!127.0.0.1!g" in this case only local server will be able to connect to the websocket? 
19:24:19 <mentax> and no one else?
19:26:30 <mentax> I mean if I will point HAProxy to to 127.0.0.1:5555 it will work with any domains from kamailio side?
19:28:45 <mc_> mentax: from what i recall, if you define the domain, only websocket connectiosn from domain will be accepted (meaning the web page will have to be loaded from that domain)
19:29:01 <mc_> undefined means any web page can initiate a connection 
19:29:09 <mc_> kamailio won't check the Host header
19:29:50 <mentax> but if I need to use 2 different domains what should be done in this case? 
19:30:22 <mentax> You have whole bunch of resellers with their own domains, how did it work them?
19:36:36 <mentax> Should I use WEBSOCKET_NO_ORIGIN_RESTRICTION in this case?
20:12:23 <mc_> comment out MY_WEBSOCKET_DOMAIN i think
20:12:34 <mc_> and no_origin_restriction, sounds reasonable