[Freeswitch-users] Question about srtp secured B-Leg

Helmut Kuper helmut.kuper at ewetel.de
Tue Aug 10 06:21:06 PDT 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

I have late codec negotiation enabled and using Snom devices for
encrypted calls (inernal only). When sdp of A-leg (Snom) has a=crypto I
export sip_secure_media=true in my dialplan, so that B-leg (Snom) is
also encrypted via srtp. That works nicely.

When the B-Leg doesn't support srtp I got an "incompatible_device"
error. This is also ok so far.

Unfortunately this way you can't use Snom's optional srtp mechanism
which consists simply of two media profiles in A-Leg's SDP (first
RTP/SAVP then RTP/AVP) so the target can choose to encrypt or not.

I don't know whether this is RFC conform or not nor if this makes really
sense. I would like to be able to call a non encrypting ATA for checking
for eaxample fax devices by simply calling them.

My question is now, is there a way to tell FS sending outbound calls
also with a non crypto offer within same sdp to B-Leg, so that it can
choose to encrypt or not?


regards
helmut



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFMYVJB4tZeNddg3dwRApBGAJ9d4keb5RQqMlS5sJ6jfN3VLAQkhwCeO3/x
QlwcZMCW2ipsAIjV7cet2aU=
=qzpR
-----END PGP SIGNATURE-----



More information about the FreeSWITCH-users mailing list