[Freeswitch-users] Secure B-Leg from PSTN call - how to?

[Peter Waldheim]

Hi,

I'm trying to secure (SRTP) the b-leg for a call coming in via pstn
(pri/freetdm).
For this I'm setting sip_secure_media and also trying sdp_secure_savp_only,
but it seems freeswitch does not offer SAVP to my client (which in turn
will refuse). SIP-to-SIP this works fine.

Here the the portion of the log where I would have expected to see SAVP in
the sdp:

EXECUTE FreeTDM/1:5/21 bridge(sofia/external5090/21%10.1.1.12)
2013-06-28 09:20:10.800816 [DEBUG] switch_channel.c:1176 FreeTDM/1:5/21
EXPORTING[export_vars] [sip_secure_media]=[true] to event
2013-06-28 09:20:10.800816 [DEBUG] switch_channel.c:1176 FreeTDM/1:5/21
EXPORTING[export_vars] [dialed_extension]=[21] to event
2013-06-28 09:20:10.800816 [DEBUG] switch_channel.c:1176 FreeTDM/1:5/21
EXPORTING[export_vars] [sip_secure_media]=[true] to event
2013-06-28 09:20:10.800816 [DEBUG] switch_channel.c:1176 FreeTDM/1:5/21
EXPORTING[export_vars] [sdp_secure_savp_only]=[true] to event
2013-06-28 09:20:10.800816 [DEBUG] switch_ivr_originate.c:2050 Parsing
global variables
2013-06-28 09:20:10.800816 [NOTICE] switch_channel.c:1030 New Channel
sofia/external5090/21 [2b0bff7e-dfc3-11e2-b111-c96542f7174a]
2013-06-28 09:20:10.800816 [DEBUG] mod_sofia.c:4420 (sofia/external5090/21)
State Change CS_NEW -> CS_INIT
2013-06-28 09:20:10.800816 [DEBUG] switch_core_session.c:1341 Send signal
sofia/external5090/21 [BREAK]
2013-06-28 09:20:10.800816 [DEBUG] switch_core_state_machine.c:416
(sofia/external5090/21) Running State Change CS_INIT
2013-06-28 09:20:10.800816 [DEBUG] switch_core_state_machine.c:455
(sofia/external5090/21) State INIT
2013-06-28 09:20:10.800816 [DEBUG] mod_sofia.c:87 sofia/external5090/21
SOFIA INIT
2013-06-28 09:20:10.800816 [DEBUG] sofia_glue.c:1191
sip:21 at client.ip.is.secret:49915;rinstance=e177370cb4131e9f;transport=tls
Setting proxy route to sofia/external5090/21
2013-06-28 09:20:10.800816 [DEBUG] sofia_glue.c:1220 Local SDP:
v=0
o=FreeSWITCH 1372384350 1372384351 IN IP4 my.ip.is.secret
s=FreeSWITCH
c=IN IP4 my.ip.is.secret
t=0 0
m=audio 19660 RTP/AVP 8 3 101 13
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16
a=ptime:20
a=sendrecv
m=video 20590 RTP/AVP 34 98
a=rtpmap:34 H263/90000
a=rtpmap:98 H264/90000

Any help with this would be greatly appreciated.

Regards
Peter
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20130628/0c6e1958/attachment.html