the sofia library we depend on requires you to feed it plain passwords for outbound auth.<br>We would have to pressure them to expose a way for us to pre-hash them.<br><br>As an alternative, you can always use xml-curl + https url to fetch the configs from your db on the fly over a secure<br>
connection but that won't stop the hacker from running gcore on fs and finding them in the ram somewhere just like if someone wants to break into your house he can just take a chainsaw and cut a hole in the side and walk in.<br>
I'll ask the guy next time i talk to him.<br><br><br><br><div class="gmail_quote">On Tue, Oct 21, 2008 at 3:30 PM, Peter P GMX <span dir="ltr"><<a href="mailto:Prometheus001@gmx.net">Prometheus001@gmx.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Thanks for your support for the vm-passwords.<br>
<br>
The most important part for us however is having hashed passwords for<br>
external gateway definitions (we have a lot) and securing pins for<br>
conferences.<br>
Do we have a chance to add this also?<br>
<br>
In our environment DTMF is of course transported via SRTP so this is<br>
more secure (although the key exchange by SDES is known to have security<br>
issues, as rtp streams may be replayed by a 3rd party, there is no<br>
replay prevention mechanism in SDES and therefore also not in<br>
freeswitch, hein?).<br>
<br>
Best regards<br>
Peter<br>
<br>
Michael Jerris schrieb:<br>
<div><div></div><div class="Wj3C7c">> just added vm-a1-hash as well that you can use to override the<br>
> standard a1 hash for voicemail use only.<br>
><br>
> Mike<br>
><br>
><br>
> On Oct 20, 2008, at 7:27 PM, Anthony Minessale wrote:<br>
><br>
><br>
>> if you want to test latest trunk i added code that *should* let you<br>
>> auth the vm using the same<br>
>> a1-hash also we added an "md5" api command to mod_commands so you<br>
>> can use it in your own apps.<br>
>><br>
>> ${md5(some data)}<br>
>><br>
>><br>
><br>
> _______________________________________________<br>
> Freeswitch-users mailing list<br>
> <a href="mailto:Freeswitch-users@lists.freeswitch.org">Freeswitch-users@lists.freeswitch.org</a><br>
> <a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
> UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
> <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
><br>
><br>
<br>
_______________________________________________<br>
Freeswitch-users mailing list<br>
<a href="mailto:Freeswitch-users@lists.freeswitch.org">Freeswitch-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Anthony Minessale II<br><br>FreeSWITCH <a href="http://www.freeswitch.org/">http://www.freeswitch.org/</a><br>ClueCon <a href="http://www.cluecon.com/">http://www.cluecon.com/</a><br>
<br>AIM: anthm<br><a href="mailto:MSN%3Aanthony_minessale@hotmail.com">MSN:anthony_minessale@hotmail.com</a><br>GTALK/JABBER/<a href="mailto:PAYPAL%3Aanthony.minessale@gmail.com">PAYPAL:anthony.minessale@gmail.com</a><br>
IRC: <a href="http://irc.freenode.net">irc.freenode.net</a> #freeswitch<br><br>FreeSWITCH Developer Conference<br><a href="mailto:sip%3A888@conference.freeswitch.org">sip:888@conference.freeswitch.org</a><br><a href="http://iax:guest@conference.freeswitch.org/888">iax:guest@conference.freeswitch.org/888</a><br>
<a href="mailto:googletalk%3Aconf%2B888@conference.freeswitch.org">googletalk:conf+888@conference.freeswitch.org</a><br>pstn:213-799-1400<br>