[Freeswitch-users] optional SRTP

[Levend Sayar]

Ken you are right. But what i want to do is not securing all the conversation. I dont need that.
What i want is FS to prefer RTP when an optional SRTP offer is received.


In this list, it is mentioned that

m=audio RTP/AVP
a=crypto ...

means optional SRTP. Namely caller prefers to talk with SRTP, but if calle prefers RTP, caller accept RTP too.

First of all, the SDP I show is improper ?




--
İyi çalışmalar.

_lvnd_
 {^_^}

KAREL`UCAP




On Fri, 2013-02-22 at 10:08 -0600, Ken Rice wrote:
FreeSWITCH Support SIP/TLS, SRTP and ZRTP, the error message you are refering to below is where someone has improperly implemented SRTP and is sending the crypto headers in the wrong spots. See the Wiki for setting up secure calling.

Also please note, if you are going to use SRTP, you _must_ use SIP/TLS as the keys for SRTP are passed in the SDP of the SIP messaging. You can use ZRTP without using SIP/TLS as the key exchange for ZRTP happens as a DH exchange in the ZRTP stream, but if you want to protect the contents of the SIP messaging you’ll still want to use SIP/TLS.


K


On 2/22/13 9:36 AM, "Levend Sayar" <levend.sayar at karel.com.tr> wrote:

Hi again.

On my previous discussion on this  list, i learned that RTP/AVP with a a=crypto attribute means optional SRTP.

I suppose FS supports optional SRTP, but when i look at the sofia code, afaiu fs does not support it.

Right ?

A code snippet from sofia_glue.c

if (m->m_proto != sdp_proto_srtp) {
switch_log_printf(SWITCH_CHANNEL_SESSION_LOG(session), SWITCH_LOG_ERROR, "a=crypto in RTP/AVP, refer to rfc3711\n");
match = 0;
goto done;
}







plain text document attachment (ATT00001)


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting at freeswitch.org<mailto:consulting at freeswitch.org>
http://www.freeswitchsolutions.com




Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org<mailto:FreeSWITCH-users at lists.freeswitch.org>
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20130222/bcfaa7eb/attachment.html