[Freeswitch-users] Anyone got ZRTP MiTM working?

[Peter Villeneuve]

Well you could always try out latest jitsi nightly as it also fails to
detect zrtp_secure_media in FS.

Although I haven't seen the same error message as above in the jitsi calls,
I do see some
ERROR! Decrypt failed. ID=4:DH s=SRTP authentication failure messages
although ZRTP appears to be successfully negotiated.

Is the "${zrtp_secure_media_confirmed}" variable correct or should it be "
${zrtp_secure_media_confirmed_audio}" instead?

I've tried both to no avail.


On Fri, Apr 11, 2014 at 5:30 PM, Brian West <brian at freeswitch.org> wrote:

> Since I have no android devices to test with, I can't answer this.  my
> address is on my whois for bkw.org if anyone wishes to send me a Nexsus?
> :)  I have only tested between iOS devices.
> --
> Brian West
> brian at freeswitch.org
> FreeSWITCH Solutions, LLC
> PO BOX 2531
> Brookfield, WI 53008-2531
> Twitter: @FreeSWITCH , @briankwest
> http://www.freeswitchbook.com
> http://www.freeswitchcookbook.com
>
> T: +1.918.420.9001  |  F: +1.918.420.9002  |  M: +1.918.424.WEST
> iNUM: +883 5100 1420 9001
> ISN: 410*543
> Skype:briankwest
> PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
>
>
>
>
>
>
>
>
>
>
>
>
>
> On Apr 10, 2014, at 12:53 PM, Peter Villeneuve <petervnv1 at gmail.com>
> wrote:
>
> > I did as you said Brian. I think I've given the script plenty of time.
> When I call 9787 I do get the zrtp is secure message and I see the SAS
> displayed on my CSipSimple endpoint.
> > However, the detection in the dialplan doesn't seem to work since it
> always evals as not secure.
> >
> > -- ZRTP Enrollment Agent
> > session:setVariable("zrtp_secure_media", "true");
> > session:setVariable("zrtp_enrollment", "true");
> > session:sleep(600);
> > session:answer();
> > session:streamFile("zrtp/zrtp-status_securing.wav");
> > session:sleep(5000);
> > -- Give the agent time to bring up ZRTP.
> >
> >
> > Despite the fact that I do see the SAS, I also see this error message in
> the logs
> > [ERR] switch_rtp.c:4987 Error: zRTP protection drop with code 9
> >
> > This seems to be related to this jira bug
> http://jira.freeswitch.org/browse/FS-509
> >
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20140411/a8bbe6a4/attachment-0001.html