[Freeswitch-users] Making SRTP mandatory

[Michael Collins]

FYI,

For posterity's sake we've researched and documented the answer to this
question:
http://wiki.freeswitch.org/wiki/SRTP#Forcing_SAVP_in_the_SDP

Enjoy!

-MC

On Mon, Nov 12, 2012 at 4:55 PM, Clint Goudie-Nice <cgoudie at callware.com>wrote:

>  Greetings all,****
>
> ** **
>
> I have been configuring a FreeSWITCH / FusionPBX system to do TLS and SRTP.
> ****
>
> ** **
>
> When I configure it to do srtp in the outbound route, the SDP produced
> looks like:****
>
> ** **
>
> o=FreeSWITCH 1352745516 1352745517 IN IP4 10.16.0.131****
>
> s=FreeSWITCH****
>
> c=IN IP4 10.16.0.131****
>
> t=0 0****
>
> m=audio 22222 RTP/SAVP 9 0 8 3 101 13****
>
> a=rtpmap:101 telephone-event/8000****
>
> a=fmtp:101 0-16****
>
> a=crypto:1 AES_CM_128_HMAC_SHA1_32
> inline:djfKObSYrk0J8pVI1w/OfQBjTYwNgTi80C68VgBB****
>
> a=ptime:20****
>
> m=audio 22222 RTP/AVP 9 0 8 3 101 13****
>
> a=rtpmap:101 telephone-event/8000****
>
> a=fmtp:101 0-16****
>
> a=ptime:20****
>
> ** **
>
> This is great if I want to support both SRTP and non-SRTP calls; but I
> cannot figure out how to remove the AVP block so that SRTP is mandatory.**
> **
>
> ** **
>
> How do I require SRTP?****
>
> ** **
>
> Thanks,****
>
> ** **
>
> Clint****
>
> ------------------------------
> CONFIDENTIALITY NOTICE: This e-mail and any attachments are for the
> exclusive and confidential use of the intended recipient. If you received
> this in error, please do not read, distribute, or take action in reliance
> upon this message. Instead, please notify us immediately by return email
> and promptly delete this message and its attachments from your computer
> system.
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>


-- 
Michael S Collins
Twitter: @mercutioviz
http://www.FreeSWITCH.org
http://www.ClueCon.com
http://www.OSTAG.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20121113/bdf44bae/attachment.html