<p dir="ltr">Few notes regarding ZRTP:<br>
A. It's an encryption, it's am encryption traversal mechanism that allow supported servers and client to choose to use it.</p>
<p dir="ltr">B. The encryption will be SRTP, and it is also good to have SIPS and everything else encrypted. </p>
<p dir="ltr">I hope it will help better to understand it.</p>
<p dir="ltr">Ido</p>
<div class="gmail_quote">On Mar 28, 2016 6:58 PM, "Assaf Dahary" <<a href="mailto:adahary@gmail.com">adahary@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word"><p dir="ltr">OK.<br>
I'll test it with the latest release 1.6.</p>
<p dir="ltr">But do you know if this issue was resolved in 1.6?</p>
<p dir="ltr">Assaf<br>
</p>
<div class="gmail_quote">On Mar 28, 2016, at 18:13, Michael Jerris <<a href="mailto:mike@jerris.com" target="_blank">mike@jerris.com</a>> wrote:<blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
did you try and see if this is the case with a current release instead of the old one?<div><br><div><blockquote type="cite"><div>On Mar 28, 2016, at 8:14 AM, Assaf Dahary <<a href="mailto:adahary@gmail.com" target="_blank">adahary@gmail.com</a>> wrote:</div><br><div><div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">Hi,<p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"><p> </p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">I would like to use FS (multiple) as a ZRTP client register on a the main FS.<p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"><p> </p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">I have already managed to setup a Gateway with user/pass on the FS client and register it on the main FS for regular incoming/outgoing calls (without ZRTP).<p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"><p> </p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">To enable ZRTP calls I setup the FS client/main as follow:<p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">None ZRTP SIP phone -> FS client -> NAT Internet -> FS main -> CSipSimple ZRTP enabled).<p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"><p> </p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"><b>FS Client (ver 1.4) :</b><p><b></b></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">ZRTP enabled globally in VARS and in dialplan.<p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">Media proxy disabled on both internal and external profiles and in dialplan.<p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"><p> </p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"><b>FS Main (ver 1.4):</b><p><b></b></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">Media proxy
enabled – including late negotiation.<p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"><p> </p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">I forced the FS client and the CSipSimple to use only PCMU codec to avoid transcoding.<p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"><p> </p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">The problem is that on a call from the SIP phone via the FS client there are always CRC errors on the ZRTP log.<p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">Only if the FS main is set to disable media proxy then there are no CRC errors – but then it becomes a MITM with incompatible SASs.<p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"><p> </p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">From reading other posts about FS and ZRTP CRC errors I assume that it happens because the FS client is not creating a zrtp hash in the invite SDP.<p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"><p> </p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">So my question is how to make the FS client to generate the zrtp hash in the invite SDP to act as real ZRTP enabled client?<span> </span><p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">I've already tried to set the FS client internal/external/dialplan with several zrtp configs with no success.<p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"><p> </p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">I would appreciate any tip to resolve this issue.<p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"><p> </p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">Regards<p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"><p> </p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">Assaf <p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"><p> </p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"><p> </p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif">The client FS<span> </span><p></p></div><div style="margin:0in 0in 0.0001pt;text-align:left;direction:ltr;font-size:11pt;font-family:Calibri,sans-serif"> <p></p></div></div><span style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline!important">_________________________________________________________________________</span><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><span style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline!important">Professional FreeSWITCH Consulting Services:<span> </span></span><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><a href="mailto:consulting@freeswitch.org" style="color:purple;text-decoration:underline;font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px" target="_blank">consulting@freeswitch.org</a><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><a href="http://www.freeswitchsolutions.com/" style="color:purple;text-decoration:underline;font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px" target="_blank">http://www.freeswitchsolutions.com</a><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><span style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline!important">Official FreeSWITCH Sites</span><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><a href="http://www.freeswitch.org/" style="color:purple;text-decoration:underline;font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px" target="_blank">http://www.freeswitch.org</a><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><a href="http://confluence.freeswitch.org/" style="color:purple;text-decoration:underline;font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px" target="_blank">http://confluence.freeswitch.org</a><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><a href="http://www.cluecon.com/" style="color:purple;text-decoration:underline;font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px" target="_blank">http://www.cluecon.com</a><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><span style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline!important">FreeSWITCH-users mailing list</span><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><a href="mailto:FreeSWITCH-users@lists.freeswitch.org" style="color:purple;text-decoration:underline;font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" style="color:purple;text-decoration:underline;font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><span style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;float:none;display:inline!important">UNSUBSCRIBE:http://</span><a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" style="color:purple;text-decoration:underline;font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px" target="_blank">lists.freeswitch.org/mailman/options/freeswitch-users</a><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><a href="http://www.freeswitch.org/" style="color:purple;text-decoration:underline;font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px" target="_blank">http://www.freeswitch.org</a></div></blockquote></div><br></div><pre><hr><br>Professional FreeSWITCH Consulting Services: <br><a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br><a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br><br>Official FreeSWITCH Sites<br><a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br><a href="http://confluence.freeswitch.org" target="_blank">http://confluence.freeswitch.org</a><br><a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br><br>FreeSWITCH-users mailing list<br><a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br><a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a></pre></blockquote></div></div><br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div>