[Freeswitch-users] SRTP crypto selection

Bipin Patel bipin at xbipin.com
Fri Mar 16 15:56:08 UTC 2018


HI,

it seems many other dialers also send the crypto in a similar way so all 
cant be wrong i guess, should i file a bug request in FS?


Regards,
Bipin


------------------------------------------------------------------------
-------- Original Message --------
Subject: Re: [Freeswitch-users] SRTP crypto selection
From: Bipin Patel <bipin at xbipin.com>
To: FreeSWITCH Users Help <freeswitch-users at lists.freeswitch.org>
Date: 3/16/2018, 12:22:37 AM
> Hi,
>
> Thanks for that link but the other thing is the below line where 
> zoiper sends a crypto that looks alike but the placement of characters 
> is different so doesn't match so is zoiper doing it wrongly or it's a 
> total different crypto that FS doesn't support
>
> switch_core_media.c:1479 looking for crypto suite 
> [AES_CM_192_HMAC_SHA1_32] in [4 AES_192_CM_HMAC_SHA1_32
>
>
>
> On March 15, 2018 4:15:59 PM Jurijs Ivolga <jurijs.ivolga at gmail.com> 
> wrote:
>
>> Hi,
>>
>> Have you checked this:
>>
>> https://freeswitch.org/confluence/display/FREESWITCH/rtp_secure_media
>>
>> With kind regards,
>>
>> Jurijs
>>
>> On Thu, Mar 15, 2018 at 2:03 PM, Bipin Patel <bipin at xbipin.com 
>> <mailto:bipin at xbipin.com>> wrote:
>>
>>     hi,
>>
>>     is it possible to force a selected crypto for SRTP as i cant seem
>>     to find a way to force a crypto to the user such that is phone
>>     uses that for media, secondly i see zoiper sends the below in SDP
>>
>>     a=crypto:5 AES_256_CM_HMAC_SHA1_80
>>     inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAXb4Xx7oW8iMM2jVi7R9xV6A==
>>     a=crypto:6 AES_256_CM_HMAC_SHA1_32
>>     inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAXb4Xx7oW8iMM2jVi7R9xV6A==
>>     a=crypto:3 AES_192_CM_HMAC_SHA1_80
>>     inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAXb4Xx7oW8iMM=
>>     a=crypto:4 AES_192_CM_HMAC_SHA1_32
>>     inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAXb4Xx7oW8iMM=
>>     a=crypto:1 AES_CM_128_HMAC_SHA1_80
>>     inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAX
>>     a=crypto:2 AES_CM_128_HMAC_SHA1_32
>>     inline:854nJNIKSyhr0sJs+Ol+Qv2eSqC2gnydK8iVHUAX
>>
>>     where as FS always uses the below only
>>
>>     switch_core_media.c:1484 Found suite AES_CM_128_HMAC_SHA1_80
>>
>>     and also i noticed FS and zoiper have some variations in crypto
>>     names such as
>>
>>     switch_core_media.c:1479 looking for crypto suite
>>     [AES_CM_192_HMAC_SHA1_32] in [4 AES_192_CM_HMAC_SHA1_32
>>
>>     and this never matches and never used at all (notice the
>>     placement of CM_192 in FS whereas zoiper has 192_CM)
>>
>>
>>     -- 
>>     Regards,
>>     Bipin
>>
>>
>>     ------------------------------------------------------------------------
>>
>>     _________________________________________________________________________
>>     Professional FreeSWITCH Consulting Services:
>>     consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>>     http://www.freeswitchsolutions.com
>>     <http://www.freeswitchsolutions.com>
>>
>>     Official FreeSWITCH Sites
>>     http://www.freeswitch.org
>>     http://confluence.freeswitch.org <http://confluence.freeswitch.org>
>>     http://www.cluecon.com
>>
>>     FreeSWITCH-users mailing list
>>     FreeSWITCH-users at lists.freeswitch.org
>>     <mailto:FreeSWITCH-users at lists.freeswitch.org>
>>     http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>     <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>     UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>     <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>     http://www.freeswitch.org
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org <mailto:consulting%40freeswitch.org>
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org 
>> <mailto:FreeSWITCH-users%40lists.freeswitch.org>
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20180316/82b97daa/attachment.html>


More information about the FreeSWITCH-users mailing list