[Freeswitch-users] SRTP crypto selection

Tue Aug 21 20:24:51 UTC 2018

Pretty sure this is fixed now.  Check latest master to confirm.  I don't recall off the top of my head if this is in a release yet or just master.  Once we get our deb repos in order I’ll be working on a new release.

> On Aug 17, 2018, at 2:35 PM, Andrew Cassidy <andrew at cassidywebservices.co.uk> wrote:
> 
> I know this is an old thread but "me too" and other softphones are working fine. I'm not convinced FreeSWITCH is at fault here. I'm looking for alternative Softphones as Zoiper's stock answer has been "it's not us" on every ticket I've raised with them when alternatives work fine.
> 
> On Sun, 25 Mar 2018 at 20:48 Bipin Patel <bipin at xbipin.com <mailto:bipin at xbipin.com>> wrote:
> Hi,
> 
> Seems like it's zoiper guys only who might have created that bug request coz I was going to do the same but this makes things easier for me and yes it's the same thing I'm talking about so far.
> 
> On March 25, 2018 8:22:34 PM Joel Serrano <joel at gogii.net <mailto:joel at gogii.net>> wrote:
> 
>> Not sure if this is related: https://freeswitch.org/jira/browse/FS-11052 <https://freeswitch.org/jira/browse/FS-11052>
>> 
>> On Sat, Mar 24, 2018 at 11:17 PM, Bipin Patel <bipin at xbipin.com <mailto:bipin at xbipin.com>> wrote:
>> hi,
>> 
>> i had reported this to zoiper team and they said they have talked to FS team about this and its related to crypto naming convention in the RFC standards and it should be fixed in FS so eagerly waiting for the patch
>> 
>> 
>> Regards,
>> Bipin
>> 
>> 
>> -------- Original Message --------
>> Subject: Re: [Freeswitch-users] SRTP crypto selection
>> From: Bipin Patel <bipin at xbipin.com> <mailto:bipin at xbipin.com>
>> To: FreeSWITCH Users Help <freeswitch-users at lists.freeswitch.org> <mailto:freeswitch-users at lists.freeswitch.org>
>> Date: 3/16/2018, 7:56:08 PM
>>> HI,
>>> 
>>> it seems many other dialers also send the crypto in a similar way so all cant be wrong i guess, should i file a bug request in FS?
>>> 
>>> 
>>> Regards,
>>> Bipin
>>> 
>>> 
>>> -------- Original Message --------
>>> Subject: Re: [Freeswitch-users] SRTP crypto selection
>>> From: Bipin Patel <bipin at xbipin.com> <mailto:bipin at xbipin.com>
>>> To: FreeSWITCH Users Help <freeswitch-users at lists.freeswitch.org> <mailto:freeswitch-users at lists.freeswitch.org>
>>> Date: 3/16/2018, 12:22:37 AM
>>>> Hi,
>>>> 
>>>> Thanks for that link but the other thing is the below line where zoiper sends a crypto that looks alike but the placement of characters is different so doesn't match so is zoiper doing it wrongly or it's a total different crypto that FS doesn't support
>>>> 
>>>> switch_core_media.c:1479 looking for crypto suite [AES_CM_192_HMAC_SHA1_32] in [4 AES_192_CM_HMAC_SHA1_32
>>>> 
>>>> 
>>>> 
>>>> On March 15, 2018 4:15:59 PM Jurijs Ivolga <jurijs.ivolga at gmail.com> <mailto:jurijs.ivolga at gmail.com> wrote:
>>>> 
>>>>> Hi,
>>>>> 
>>>>> Have you checked this:
>>>>> 
>>>>> https://freeswitch.org/confluence/display/FREESWITCH/rtp_secure_media <https://freeswitch.org/confluence/display/FREESWITCH/rtp_secure_media>
>>>>> 
>>>>> With kind regards,
>>>>> 
>>>>> Jurijs
>>>>> 
>>>>> On Thu, Mar 15, 2018 at 2:03 PM, Bipin Patel <bipin at xbipin.com <mailto:bipin at xbipin.com>> wrote:
>>>>> hi,
>>>>> 
>>>>> is it possible to force a selected crypto for SRTP as i cant seem to find a way to force a crypto to the user such that is phone uses that for media, secondly i see zoiper sends the below in SDP
>>>>> 
>>>>> a=crypto:5 AES_256_CM_HMAC_SHA1_80 inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAXb4Xx7oW8iMM2jVi7R9xV6A==
>>>>> a=crypto:6 AES_256_CM_HMAC_SHA1_32 inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAXb4Xx7oW8iMM2jVi7R9xV6A==
>>>>> a=crypto:3 AES_192_CM_HMAC_SHA1_80 inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAXb4Xx7oW8iMM=
>>>>> a=crypto:4 AES_192_CM_HMAC_SHA1_32 inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAXb4Xx7oW8iMM=
>>>>> a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAX
>>>>> a=crypto:2 AES_CM_128_HMAC_SHA1_32 inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAX
>>>>> 
>>>>> where as FS always uses the below only
>>>>> 
>>>>> switch_core_media.c:1484 Found suite AES_CM_128_HMAC_SHA1_80
>>>>> 
>>>>> and also i noticed FS and zoiper have some variations in crypto names such as
>>>>> 
>>>>> switch_core_media.c:1479 looking for crypto suite [AES_CM_192_HMAC_SHA1_32] in [4 AES_192_CM_HMAC_SHA1_32
>>>>> 
>>>>> and this never matches and never used at all (notice the placement of CM_192 in FS whereas zoiper has 192_CM)
>>>>> 
>>>>> 
>>>>> -- 
>>>>> Regards,
>>>>> Bipin
>>>>> 
>>>>> 
>>>>> 
>>>>> _________________________________________________________________________
>>>>> Professional FreeSWITCH Consulting Services:
>>>>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>>>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>>>> 
>>>>> Official FreeSWITCH Sites
>>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>>>> http://www.cluecon.com <http://www.cluecon.com/>
>>>>> 
>>>>> FreeSWITCH-users mailing list
>>>>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>>> 
>>>>> _________________________________________________________________________
>>>>> Professional FreeSWITCH Consulting Services:
>>>>> consulting at freeswitch.org <mailto:consulting%40freeswitch.org>
>>>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>>>> 
>>>>> Official FreeSWITCH Sites
>>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>>>> http://www.cluecon.com <http://www.cluecon.com/>
>>>>> 
>>>>> FreeSWITCH-users mailing list
>>>>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users%40lists.freeswitch.org>
>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>> 
>>>> 
>>>> 
>>>> _________________________________________________________________________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>>> 
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>>> http://www.cluecon.com <http://www.cluecon.com/>
>>>> 
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>> 
>>> 
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>> 
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>> http://www.cluecon.com <http://www.cluecon.com/>
>>> 
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>> 
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>> 
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org <http://www.freeswitch.org/>
>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>> http://www.cluecon.com <http://www.cluecon.com/>
>> 
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>> http://www.freeswitch.org <http://www.freeswitch.org/>
>> 
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org <mailto:consulting%40freeswitch.org>
>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>> 
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org <http://www.freeswitch.org/>
>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>> http://www.cluecon.com <http://www.cluecon.com/>
>> 
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users%40lists.freeswitch.org>
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>> http://www.freeswitch.org <http://www.freeswitch.org/>
> 
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
> 
> Official FreeSWITCH Sites
> http://www.freeswitch.org <http://www.freeswitch.org/>
> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
> http://www.cluecon.com <http://www.cluecon.com/>
> 
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
> http://www.freeswitch.org <http://www.freeswitch.org/>_________________________________________________________________________
> Professional FreeSWITCH Services
> sales at freeswitch.com
> https://freeswitch.com
> 
> Official FreeSWITCH Sites
> https://freeswitch.com/oss
> https://freeswitch.org/confluence
> https://cluecon.com
> 
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> https://freeswitch.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20180821/8d6be4d8/attachment-0001.html>