[Freeswitch-users] SRTP crypto selection

[Bipin Patel]

Hi,

Thanks for that link but the other thing is the below line where zoiper 
sends a crypto that looks alike but the placement of characters is 
different so doesn't match so is zoiper doing it wrongly or it's a total 
different crypto that FS doesn't support

switch_core_media.c:1479 looking for crypto suite [AES_CM_192_HMAC_SHA1_32] 
in [4 AES_192_CM_HMAC_SHA1_32





On March 15, 2018 4:15:59 PM Jurijs Ivolga <jurijs.ivolga at gmail.com> wrote:
Hi,

Have you checked this:

https://freeswitch.org/confluence/display/FREESWITCH/rtp_secure_media

With kind regards,

Jurijs

On Thu, Mar 15, 2018 at 2:03 PM, Bipin Patel <bipin at xbipin.com> wrote:

hi,

is it possible to force a selected crypto for SRTP as i cant seem to find a 
way to force a crypto to the user such that is phone uses that for media, 
secondly i see zoiper sends the below in SDP

a=crypto:5 AES_256_CM_HMAC_SHA1_80 
inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAXb4Xx7oW8iMM2jVi7R9xV6A==
a=crypto:6 AES_256_CM_HMAC_SHA1_32 
inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAXb4Xx7oW8iMM2jVi7R9xV6A==
a=crypto:3 AES_192_CM_HMAC_SHA1_80 
inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAXb4Xx7oW8iMM=
a=crypto:4 AES_192_CM_HMAC_SHA1_32 
inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAXb4Xx7oW8iMM=
a=crypto:1 AES_CM_128_HMAC_SHA1_80 
inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAX
a=crypto:2 AES_CM_128_HMAC_SHA1_32 
inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAX

where as FS always uses the below only

switch_core_media.c:1484 Found suite AES_CM_128_HMAC_SHA1_80

and also i noticed FS and zoiper have some variations in crypto names such as

switch_core_media.c:1479 looking for crypto suite [AES_CM_192_HMAC_SHA1_32] 
in [4 AES_192_CM_HMAC_SHA1_32

and this never matches and never used at all (notice the placement of 
CM_192 in FS whereas zoiper has 192_CM)


--
Regards,
Bipin





_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting at freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting at freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20180316/a8472a3b/attachment.html>