<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Probably not only MS, but yes non-standard.</div><div><br></div><div><blockquote type="cite" style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); "><div>So for optional RTP, SDP must look like something like this ?</div><div><br></div><div>m=audio RTP/AVP</div><div>a=blabla</div><div>m=audio RTP/SAVP</div><div>a=crypto</div></blockquote><div><br></div>Correct. The callee can then pick which of the profiles to use.<br><br>Steve</div><div><br></div><div><br></div><div><br></div><div><br>On 22 Feb 2013, at 22:12, Levend Sayar <<a href="mailto:levend.sayar@karel.com.tr">levend.sayar@karel.com.tr</a>> wrote:<br><br></div><blockquote type="cite"><div>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1250">
<div>Thanks for your responses.</div>
<div><br>
</div>
<div>So afaiu </div>
<div><br>
</div>
<div>m=audio RTP/AVP</div>
<div>a=crypto</div>
<div><br>
</div>
<div>Is invalid due to spec. What Steve pointed is a Microsoft deviation.</div>
<div><br>
</div>
<div>So for optional RTP, SDP must look like something like this ?</div>
<div><br>
</div>
<div>m=audio RTP/AVP</div>
<div>a=blabla</div>
<div>m=audio RTP/SAVP</div>
<div>a=crypto</div>
<div><br>
</div>
<div>Namely contain both RTP/AVP and RTP/SAVP profiles. And callee can choose whatever it prefers. RTP or SRTP.</div>
<div><br>
</div>
<div>Brian, I will test the parameters you gave ASAP and say the result.</div>
<div><br>
</div>
<div>I really appreciate your help guys.<br>
<br>
<div><br>
</div>
<div><span class="Apple-style-span" style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.292969); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); "><br>
</span></div>
<div><span class="Apple-style-span" style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); ">_lvnd_</span></div>
<div> {^_^}</div>
<div><br>
</div>
<div><br>
</div>
</div>
<div><br>
On 22 Şub 2013, at 19:09, "Steven Ayre" <<a href="mailto:steveayre@gmail.com">steveayre@gmail.com</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<div>
<div style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); ">
The confusion was mine on an earlier thread. I said that, based on something on another mailing list that I can't find now (sip-implementors?).</div>
<div style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); ">
<br>
</div>
<div style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); ">
That post might have been inspired by this which states RTP/AVP with a=crypto allows SRTP desired but not required - but only because it 'deviates from the specification in RFC4568'</div>
<div style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); ">
<br>
</div>
<div style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); ">
<span style="font-family: '.HelveticaNeueUI'; font-size: 15px; line-height: 19px; white-space: nowrap; -webkit-text-size-adjust: none; "><a href="http://msdn.microsoft.com/en-us/library/dd948772(v=office.12).aspx">http://msdn.microsoft.com/en-us/library/dd948772(v=office.12).aspx</a></span></div>
<div style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); ">
<br>
</div>
<div style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); ">
I guess such devices are what the NDLB parameter is for.</div>
<div style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); ">
<br>
</div>
<div style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); ">
<br>
</div>
<div style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); ">
<br>
</div>
<div style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); ">
The previous thread was 'SRTP disabling' where Levand has a phone that allows optional SRTP but only offers RTP/SAVP in its SDP with no RTP/AVP profile offered so FS cannot/won't send plain RTP to the SRTP port. Which I'd say is correct behaviour and a broken
phone.</div>
<div style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); ">
<br>
</div>
<div style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); ">
<br>
</div>
<br>
Steve</div>
<div><br>
On 22 Feb 2013, at 17:27, Brian West <<a href="mailto:brian@freeswitch.org">brian@freeswitch.org</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div><span>crypto in RTP/AVP is invalid per the spec.</span><br>
<span></span><br>
<span>You are required to send two rtp profiles one with RTP/AVP or RTP/SAVP</span><br>
<span></span><br>
<span>To get around this in your broken device you can set the variable sip_allow_crypto_in_avp or set profile param NDLB-allow-crypto-in-avp</span><br>
<span></span><br>
<span>--</span><br>
<span>Brian West</span><br>
<span><a href="mailto:brian@freeswitch.org">brian@freeswitch.org</a></span><br>
<span>FreeSWITCH Solutions, LLC</span><br>
<span>PO BOX PO BOX 2531</span><br>
<span>Brookfield, WI 53008-2531</span><br>
<span>Twitter: @FreeSWITCH_Wire</span><br>
<span>T: +1.918.420.9266 | F: +1.918.420.9267 | M: +1.918.424.WEST</span><br>
<span>iNUM: +883 5100 1420 9266</span><br>
<span>ISN: 410*543</span><br>
<span></span><br>
<span></span><br>
<span></span><br>
<span></span><br>
<span></span><br>
<span></span><br>
<span>On Feb 22, 2013, at 10:08 AM, Ken Rice <<a href="mailto:krice@freeswitch.org">krice@freeswitch.org</a>> wrote:</span><br>
<span></span><br>
<blockquote type="cite"><span>FreeSWITCH Support SIP/TLS, SRTP and ZRTP, the error message you are refering to below is where someone has improperly implemented SRTP and is sending the crypto headers in the wrong spots. See the Wiki for setting up secure calling.</span><br>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<blockquote type="cite"><span>Also please note, if you are going to use SRTP, you _must_ use SIP/TLS as the keys for SRTP are passed in the SDP of the SIP messaging. You can use ZRTP without using SIP/TLS as the key exchange for ZRTP happens as a DH exchange
in the ZRTP stream, but if you want to protect the contents of the SIP messaging you’ll still want to use SIP/TLS.</span><br>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<blockquote type="cite"><span>K</span><br>
</blockquote>
<span></span><br>
<span></span><br>
<span>_________________________________________________________________________</span><br>
<span>Professional FreeSWITCH Consulting Services:</span><br>
<span><a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a></span><br>
<span><a href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a></span><br>
<span></span><br>
<span>FreeSWITCH-powered IP PBX: The CudaTel Communication Server</span><br>
<span><a href="http://www.cudatel.com">http://www.cudatel.com</a></span><br>
<span></span><br>
<span>Official FreeSWITCH Sites</span><br>
<span><a href="http://www.freeswitch.org">http://www.freeswitch.org</a></span><br>
<span><a href="http://wiki.freeswitch.org">http://wiki.freeswitch.org</a></span><br>
<span><a href="http://www.cluecon.com">http://www.cluecon.com</a></span><br>
<span></span><br>
<span>FreeSWITCH-users mailing list</span><br>
<span><a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a></span><br>
<span><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a></span><br>
<span>UNSUBSCRIBE:http://<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users">lists.freeswitch.org/mailman/options/freeswitch-users</a></span><br>
<span><a href="http://www.freeswitch.org">http://www.freeswitch.org</a></span><br>
</div>
</blockquote>
</div>
</blockquote>
<blockquote type="cite">
<div><span>_________________________________________________________________________</span><br>
<span>Professional FreeSWITCH Consulting Services:</span><br>
<span><a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a></span><br>
<span><a href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a></span><br>
<span></span><br>
<span>FreeSWITCH-powered IP PBX: The CudaTel Communication Server</span><br>
<span><a href="http://www.cudatel.com">http://www.cudatel.com</a></span><br>
<span></span><br>
<span>Official FreeSWITCH Sites</span><br>
<span><a href="http://www.freeswitch.org">http://www.freeswitch.org</a></span><br>
<span><a href="http://wiki.freeswitch.org">http://wiki.freeswitch.org</a></span><br>
<span><a href="http://www.cluecon.com">http://www.cluecon.com</a></span><br>
<span></span><br>
<span>FreeSWITCH-users mailing list</span><br>
<span><a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a></span><br>
<span><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a></span><br>
<span>UNSUBSCRIBE:http://<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users">lists.freeswitch.org/mailman/options/freeswitch-users</a></span><br>
<span><a href="http://www.freeswitch.org">http://www.freeswitch.org</a></span><br>
</div>
</blockquote>
</div></blockquote><blockquote type="cite"><div><span>_________________________________________________________________________</span><br><span>Professional FreeSWITCH Consulting Services:</span><br><span><a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a></span><br><span><a href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a></span><br><span></span><br><span>FreeSWITCH-powered IP PBX: The CudaTel Communication Server</span><br><span><a href="http://www.cudatel.com">http://www.cudatel.com</a></span><br><span></span><br><span>Official FreeSWITCH Sites</span><br><span><a href="http://www.freeswitch.org">http://www.freeswitch.org</a></span><br><span><a href="http://wiki.freeswitch.org">http://wiki.freeswitch.org</a></span><br><span><a href="http://www.cluecon.com">http://www.cluecon.com</a></span><br><span></span><br><span>FreeSWITCH-users mailing list</span><br><span><a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a></span><br><span><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a></span><br><span>UNSUBSCRIBE:http://<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users">lists.freeswitch.org/mailman/options/freeswitch-users</a></span><br><span><a href="http://www.freeswitch.org">http://www.freeswitch.org</a></span><br></div></blockquote></body></html>