<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Oct 7, 2015 at 8:11 PM, Thomas Auge <span dir="ltr"><<a href="mailto:lists@virtues.net" target="_blank">lists@virtues.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
  
    
  
  <div text="#000000" bgcolor="#FFFFFF">
    <div>For controlling DTLS, this could come
      in handy:
<a href="https://freeswitch.org/confluence/display/FREESWITCH/Channel+Variables#ChannelVariables-rtp_secure_media" target="_blank">https://freeswitch.org/confluence/display/FREESWITCH/Channel+Variables#ChannelVariables-rtp_secure_media</a><br>
      <br>
      Turn on sip tracing in the console with "sofia global siptrace
      on", might need to increase the log level, too. It will show you
      exactly what FS is sending, assuming you are using SIP. </div></div></blockquote><div><br></div><div>Okay, so now I get</div><div><br></div><div><div>2015-10-08 15:31:21.967585 [DEBUG] mod_sofia.c:799 Local SDP sofia/internal/<a href="http://1005@10.110.36.194:5060">1005@10.110.36.194:5060</a>:</div><div>v=0</div><div>o=FreeSWITCH 1444290677 1444290678 IN IP4 10.110.36.194</div><div>s=FreeSWITCH</div><div>c=IN IP4 10.110.36.194</div><div>t=0 0</div><div>a=sendonly</div><div>a=msid-semantic: WMS 0jji44liYAamTxDhFANoV40s2VSqaq70</div><div>m=audio 27604 RTP/AVPF 111 126</div><div>a=rtpmap:111 opus/48000/2</div><div>a=fmtp:111 useinbandfec=1; minptime=10</div><div>a=rtpmap:126 telephone-event/8000</div><div>a=ptime:20</div><div>a=rtcp-mux</div><div>a=rtcp:27604 IN IP4 10.110.36.194</div><div>a=ice-ufrag:6fKS9Ab1mTimagdz</div><div>a=ice-pwd:ndUoomeZPhjFNK1KPCsP2tHe</div><div>a=candidate:2643414560 1 udp 659136 10.110.36.194 27604 typ host generation 0</div><div>a=ssrc:2182785577 cname:zg9ublC0LCcu0GBv</div><div>a=ssrc:2182785577 msid:0jji44liYAamTxDhFANoV40s2VSqaq70 a0</div><div>a=ssrc:2182785577 mslabel:0jji44liYAamTxDhFANoV40s2VSqaq70</div><div>a=ssrc:2182785577 label:0jji44liYAamTxDhFANoV40s2VSqaq70a0</div><div><br></div><div>send 1094 bytes to udp/[10.110.36.27]:5060 at 15:31:21.983975:</div><div>   ------------------------------------------------------------------------</div><div>   SIP/2.0 200 OK</div><div>   Via: SIP/2.0/UDP 10.110.36.27;branch=z9hG4bKN82reFjQ2rZmQ</div><div>   From: <<a href="http://sip:1005@10.110.36.194:5060">sip:1005@10.110.36.194:5060</a>>;tag=QS5Na83Q2g2gj</div><div>   To: <<a href="http://sip:9196@10.110.36.194:5060">sip:9196@10.110.36.194:5060</a>>;tag=8U51K76U4yB1N</div><div>   Call-ID: 783bfcc8-e874-1233-e0b3-989096a9db3a</div><div>   CSeq: 913303564 INVITE</div><div>   Contact: <sip:9196@10.110.36.194:5060;transport=udp></div><div>   User-Agent: FreeSWITCH-mod_sofia/1.7.0+git~20151008T014056Z~d1fca9bd31~64bit</div><div>   Accept: application/sdp</div><div>   Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE</div><div>   Supported: timer, path, replaces</div><div>   Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer</div><div>   Content-Type: application/sdp</div><div>   Content-Disposition: session</div><div>   Content-Length: 198</div><div>   Remote-Party-ID: "9196" <<a href="mailto:sip%3A9196@10.110.36.194">sip:9196@10.110.36.194</a>>;party=calling;privacy=off;screen=no</div><div>   </div><div>   v=0</div><div>   o=FreeSWITCH 1444290677 1444290678 IN IP4 10.110.36.194</div><div>   s=FreeSWITCH</div><div>   c=IN IP4 10.110.36.194</div><div>   t=0 0</div><div>   a=sendonly</div><div>   a=msid-semantic: WMS 0jji44liYAamTxDhFANoV40s2VSqaq70</div><div>   m=audio 0 RTP/SAVPF 19</div></div><div><br></div><div>So indeed, the SDP that is sent is different from the "Local SDP" logged before.  What could be the reason for this behavior?  The "sendonly" flag maybe?  Why is that one set?  In the code, logging that "Local SDP" and handing it over to Sofia for sending seems just a few lines apart (line 799 and 852 in mod_sofia.c).  </div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div text="#000000" bgcolor="#FFFFFF"><div>If that
      still differs from what you see on the wire, it could be a
      fragmentation issue, though the SDP seems to short for that. Maybe
      there's a lot of clutter in the headers already, or your network
      uses a low MTU. Try TCP signalling to rule that out.<br></div></div></blockquote><div><br></div><div>So I don't think fragmentation is the issue.</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div text="#000000" bgcolor="#FFFFFF"><div>
      <br>
      And make sure you use latest master.</div></div></blockquote><div><br></div><div>I did.</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div text="#000000" bgcolor="#FFFFFF"><div><div><div class="h5"><br>
      <br>
      <br>
      On 10/07/2015 11:33 AM, Johannes Singler wrote:<br>
    </div></div></div>
    <blockquote type="cite"><div><div class="h5">
      <div dir="ltr">Even when calling the echo call service, it does
        not work. To be more specific: How can I make FS respond to this
        SDP
        <div><br>
        </div>
        <div>
          <div>
            <div>v=0</div>
            <div>o=- 7827925660507220020 2 IN IP4 127.0.0.1</div>
            <div>s=-</div>
            <div>t=0 0</div>
            <div>a=group:BUNDLE audio</div>
            <div>a=msid-semantic: WMS ARDAMS</div>
            <div>m=audio 9 RTP/SAVPF 111 103 9 102 0 8 106 105 13 127
              126</div>
            <div>c=IN IP4 0.0.0.0</div>
            <div>a=rtpmap:111 opus/48000/2</div>
            <div>a=fmtp:111 minptime=10; useinbandfec=1</div>
            <div>a=rtpmap:103 ISAC/16000</div>
            <div>a=rtpmap:9 G722/8000</div>
            <div>a=rtpmap:102 ILBC/8000</div>
            <div>a=rtpmap:0 PCMU/8000</div>
            <div>a=rtpmap:8 PCMA/8000</div>
            <div>a=rtpmap:106 CN/32000</div>
            <div>a=rtpmap:105 CN/16000</div>
            <div>a=rtpmap:13 CN/8000</div>
            <div>a=rtpmap:127 red/8000</div>
            <div>a=rtpmap:126 telephone-event/8000</div>
            <div>a=rtcp:9 IN IP4 0.0.0.0</div>
            <div>a=ice-ufrag:MDEFXaTwID0Qv/el</div>
            <div>a=ice-pwd:oj31a5bRhExyyehlEKTAVFw1</div>
            <div>a=mid:audio</div>
            <div>a=extmap:1 urn:ietf:params:rtp-hdrext:ssrc-audio-level</div>
            <div>a=extmap:3 <a href="http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time" target="_blank">http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time</a></div>
            <div>a=rtcp-mux</div>
            <div>a=crypto:0 AES_CM_128_HMAC_SHA1_32
              inline:iMD5gSrO/mnMCNTcp3k85tMS3P4NgXf6wFubAmZW</div>
            <div>a=crypto:1 AES_CM_128_HMAC_SHA1_80
              inline:iMD5gSrO/mnMCNTcp3k85tMS3P4NgXf6wFubAmZW</div>
            <div>a=maxptime:60</div>
            <div>a=ssrc:<a href="tel:2184339687" value="+12184339687" target="_blank">2184339687</a> cname:/TpRcJ+yclk4xBm4</div>
            <div>a=ssrc:<a href="tel:2184339687" value="+12184339687" target="_blank">2184339687</a> msid:ARDAMS ARDAMSa0</div>
            <div>a=ssrc:<a href="tel:2184339687" value="+12184339687" target="_blank">2184339687</a> mslabel:ARDAMS</div>
            <div>a=ssrc:<a href="tel:2184339687" value="+12184339687" target="_blank">2184339687</a> label:ARDAMSa0</div>
            <div>a=candidate:4203996854 1 udp <a href="tel:2122260223" value="+12122260223" target="_blank">2122260223</a> 10.110.44.92
              46241 typ host generation 0</div>
          </div>
        </div>
        <div><br>
        </div>
        <div>with something compatible, i.e. something having
          ice-ufrag/ice-pwd/candidate, and crypto entries?</div>
        <div><br>
        </div>
        <div>Instead, it responds with this incomplete SDP:</div>
        <div><br>
        </div>
        <div>
          <div>
            <div>v=0</div>
            <div>o=FreeSWITCH 1444208399 1444208400 IN IP4 10.110.36.194</div>
            <div>s=FreeSWITCH</div>
            <div>c=IN IP4 10.110.36.194</div>
            <div>t=0 0</div>
            <div>a=sendonly</div>
            <div>a=msid-semantic: WMS hotZDrIQsyNJstePWz1e1QRgqVxi8lkg</div>
            <div>m=audio 19770 RTP/AVPF 111 126</div>
          </div>
        </div>
        <div><br>
        </div>
        <div>Some additional lines are printed on the FS log, but they
          don't seem to make it on the network (according to WireShark)</div>
        <div><br>
        </div>
        <div>
          <div>a=rtpmap:111 opus/48000/2</div>
          <div>a=fmtp:111 useinbandfec=1; minptime=10</div>
          <div>a=rtpmap:126 telephone-event/8000</div>
          <div>a=ptime:20</div>
          <div>a=rtcp-mux</div>
          <div>a=rtcp:19770 IN IP4 10.110.36.194</div>
          <div>a=ice-ufrag:hSw9zdfPZDYYO94d</div>
          <div>a=ice-pwd:D05puFtnS7zoQqGY83Yx73dW</div>
          <div>a=candidate:<a href="tel:5758928345" value="+15758928345" target="_blank">5758928345</a> 1 udp 659136 10.110.36.194 19770
            typ host generation 0</div>
          <div>a=ssrc:<a href="tel:2316904761" value="+12316904761" target="_blank">2316904761</a> cname:zE52VDJe2mOlFS0s</div>
          <div>a=ssrc:<a href="tel:2316904761" value="+12316904761" target="_blank">2316904761</a> msid:hotZDrIQsyNJstePWz1e1QRgqVxi8lkg
            a0</div>
          <div>a=ssrc:<a href="tel:2316904761" value="+12316904761" target="_blank">2316904761</a>
            mslabel:hotZDrIQsyNJstePWz1e1QRgqVxi8lkg</div>
          <div>a=ssrc:<a href="tel:2316904761" value="+12316904761" target="_blank">2316904761</a>
            label:hotZDrIQsyNJstePWz1e1QRgqVxi8lkga0</div>
        </div>
        <div><br>
        </div>
        <div>Total packet length is 1138 bytes...</div>
      </div>
      <div class="gmail_extra"><br>
        <div class="gmail_quote">On Mon, Oct 5, 2015 at 4:51 PM,
          Johannes Singler <span dir="ltr"><<a href="mailto:johannes.singler@qnective.com" target="_blank"></a><a href="mailto:johannes.singler@qnective.com" target="_blank">johannes.singler@qnective.com</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
            <div dir="ltr">FS is a B2BUA.  However, the two legs of a
              regular call seem to influence each other, e.g.
              <div><br>
                <div>1. The caller offers an SDES-SRTP-encrypted
                  connection with ICE.</div>
                <div>2. FS offers to the callee a simple RTP connection
                  (no SRTP, no ICE, as configured in the dialplan),
                  callee answers respectively.</div>
                <div>3. FS answers caller, but without with neither
                  "a:crypto" entries nor ICE candidates.</div>
                <div>4. Why is that?  Shouldn't it answer SDES-SRTP with
                  ICE to the original caller, respecting the original
                  caller's offer?</div>
                <div><br>
                </div>
                <div>When doing WebRTC from the caller (DTLS-SRTP with
                  ICE), this actually works fine (callee unchanged).</div>
                <div><br>
                </div>
                <div>So what's the general scheme for choosing
                  encryption on either side?</div>
                <div><br>
                </div>
                <div>Related to that:</div>
                <div>Can you enable ICE without completely enabling
                  WebRTC (media_webrtc=true) from the dialplan? That
                  would help maybe...</div>
                <span><font color="#888888">
                    <div><br>
                    </div>
                    <div>-- <br>
                      <div>
                        <div dir="ltr">
                          <div dir="ltr">
                            <div dir="ltr">
                              <div dir="ltr"><span style="font-size:12.7273px">Johannes
                                  Singler</span><br style="font-size:12.7273px">
                                <span style="font-size:12.7273px">Software
                                  Engineer</span><br style="font-size:12.7273px">
                                <div><span style="font-size:12.7273px"><br>
                                  </span></div>
                                <div><span style="font-size:12.7273px">Qnective</span><br>
                                </div>
                              </div>
                            </div>
                          </div>
                        </div>
                      </div>
                    </div>
                  </font></span></div>
            </div>
          </blockquote>
        </div>
        <br>
        <br clear="all">
        <div><br>
        </div>
        -- <br>
        <div>
          <div dir="ltr">
            <div>
              <div dir="ltr">
                <div>
                  <div dir="ltr">
                    <div>
                      <div dir="ltr"><span style="font-size:12.7273px">Johannes
                          Singler</span><br style="font-size:12.7273px">
                        <span style="font-size:12.7273px">Software
                          Engineer</span><br style="font-size:12.7273px">
                        <div><span style="font-size:12.7273px"><br>
                          </span></div>
                        <div><span style="font-size:12.7273px">Qnective</span><br style="font-size:12.7273px">
                          <br style="font-size:12.7273px">
                          <span style="font-size:12.7273px">Thurgauerstrasse
                            54 | 8050 Zürich | Switzerland</span><br style="font-size:12.7273px">
                          <span style="font-size:12.7273px">Mobile</span> <a href="tel:%2B41798379869" value="+41798379869" target="_blank">+41798379869</a><br style="font-size:12.7273px">
                          <a href="http://www.qnective.com/" style="color:rgb(17,85,204);font-size:12.7273px" target="_blank">www.qnective.com</a><span style="font-size:12.7273px"> | </span><a href="mailto:johannes.singler@qnective.com" style="color:rgb(17,85,204);font-size:12.7273px" target="_blank"></a><a href="mailto:johannes.singler@qnective.com" target="_blank">johannes.singler@qnective.com</a></div>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </div>
        </div>
      </div>
      <br>
      <fieldset></fieldset>
      <br>
      </div></div><pre>_________________________________________________________________________
Professional FreeSWITCH Consulting Services: 
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a>
Official FreeSWITCH Sites
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a>
<a href="http://confluence.freeswitch.org" target="_blank">http://confluence.freeswitch.org</a>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a>
FreeSWITCH-users mailing list
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a></pre>
    </blockquote>
    <br>
  </div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><span style="font-size:12.7273px">Johannes Singler</span><br style="font-size:12.7273px"><span style="font-size:12.7273px">Software Engineer</span><br style="font-size:12.7273px"><div><span style="font-size:12.7273px"><br></span></div><div><span style="font-size:12.7273px">Qnective</span></div></div></div></div></div></div></div></div></div>
</div></div>