<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><p dir="ltr">I've reinstalled both FS's, client and main, with the latest version 1.6.7.</p>
<p dir="ltr">None ZRTP SIP phone -> FS client -> NAT Internet -> FS main -> CSipSimple ZRTP enabled).</p>
<p dir="ltr">All set to PCMU codec (no transcoding).<br>
All connect on same network (no NAT).</p>
<p dir="ltr">The FS client is setup with media-proxy=false (dialplan and profiles).</p>
<p dir="ltr">And</p>
<p dir="ltr">The FS main is setup with media-proxy=true.</p>
<p dir="ltr">I still get the same problem, I get zrtp CRC warning on the FS client - and no end-to-end encryption.</p>
<p dir="ltr">As before (with version 1.4) the FS client is NOT sending any zrtp hash, as I suppose it should do.</p>
<p dir="ltr">When FS main is set to media-proxy=false then there are no waning as it now acting as MITM.</p>
<p dir="ltr">Any tip/advise on the right direction will be very much appreciated.</p>
<p dir="ltr">Regards</p>
<p dir="ltr">Assaf</p>
<div class="gmail_quote" >On Mar 28, 2016, at 18:13, Michael Jerris <<a href="mailto:mike@jerris.com" target="_blank">mike@jerris.com</a>> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
did you try and see if this is the case with a current release instead of the old one?<div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Mar 28, 2016, at 8:14 AM, Assaf Dahary <<a href="mailto:adahary@gmail.com" class="">adahary@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="WordSection1" style="page: WordSection1; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Hi,<p class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri,
sans-serif;" class=""><p class=""> </p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">I would like to use FS (multiple) as a ZRTP client register on a the main FS.<p class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><p class=""> </p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">I have already managed to setup a Gateway with user/pass on the FS client and register it on the main FS for regular incoming/outgoing calls (without ZRTP).<p class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><p
class=""> </p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">To enable ZRTP calls I setup the FS client/main as follow:<p class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">None ZRTP SIP phone -> FS client -> NAT Internet -> FS main -> CSipSimple ZRTP enabled).<p class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><p class=""> </p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class="">FS Client (ver 1.4) :</b><p class=""><b class=""></b></p></div><div style="margin: 0in 0in 0.0001pt; text-align:
left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">ZRTP enabled globally in VARS and in dialplan.<p class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Media proxy disabled on both internal and external profiles and in dialplan.<p class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><p class=""> </p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class="">FS Main (ver 1.4):</b><p class=""><b class=""></b></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Media proxy
enabled – including late negotiation.<p class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><p class=""> </p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">I forced the FS client and the CSipSimple to use only PCMU codec to avoid transcoding.<p class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><p class=""> </p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">The problem is that on a call from the SIP phone via the FS client there are always CRC errors on the ZRTP log.<p class=""></p></div><div style="margin: 0in
0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Only if the FS main is set to disable media proxy then there are no CRC errors – but then it becomes a MITM with incompatible SASs.<p class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><p class=""> </p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">From reading other posts about FS and ZRTP CRC errors I assume that it happens because the FS client is not creating a zrtp hash in the invite SDP.<p class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><p class=""> </p></div><div style="margin: 0in
0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">So my question is how to make the FS client to generate the zrtp hash in the invite SDP to act as real ZRTP enabled client?<span class="Apple-converted-space"> </span><p class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">I've already tried to set the FS client internal/external/dialplan with several zrtp configs with no success.<p class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><p class=""> </p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">I would appreciate any tip to resolve this issue.<p
class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><p class=""> </p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Regards<p class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><p class=""> </p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Assaf <p class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><p class=""> </p></div><div style="margin: 0in 0in 0.0001pt; text-align: left;
direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><p class=""> </p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class="">The client FS<span class="Apple-converted-space"> </span><p class=""></p></div><div style="margin: 0in 0in 0.0001pt; text-align: left; direction: ltr; unicode-bidi: embed; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <p class=""></p></div></div><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">_________________________________________________________________________</span><br
style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Professional FreeSWITCH Consulting Services:<span class="Apple-converted-space"> </span></span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="mailto:consulting@freeswitch.org" style="color: purple; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">consulting@freeswitch.org</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="http://www.freeswitchsolutions.com/" style="color: purple; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">http://www.freeswitchsolutions.com</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing:
normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Official FreeSWITCH Sites</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="http://www.freeswitch.org/" style="color: purple; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">http://www.freeswitch.org</a><br style="font-family:
Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="http://confluence.freeswitch.org/" style="color: purple; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">http://confluence.freeswitch.org</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px;" class=""><a href="http://www.cluecon.com/" style="color: purple; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">http://www.cluecon.com</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">FreeSWITCH-users mailing list</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="mailto:FreeSWITCH-users@lists.freeswitch.org" style="color: purple; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing:
normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">FreeSWITCH-users@lists.freeswitch.org</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" style="color: purple; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"
class="">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">UNSUBSCRIBE:http://</span><a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" style="color: purple; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">lists.freeswitch.org/mailman/options/freeswitch-users</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="http://www.freeswitch.org/" style="color: purple; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"
class="">http://www.freeswitch.org</a></div></blockquote></div><br class=""></div><pre class="blue"><hr><br>Professional FreeSWITCH Consulting Services: <br>consulting@freeswitch.org<br><a href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a><br><br>Official FreeSWITCH Sites<br><a href="http://www.freeswitch.org">http://www.freeswitch.org</a><br><a href="http://confluence.freeswitch.org">http://confluence.freeswitch.org</a><br><a href="http://www.cluecon.com">http://www.cluecon.com</a><br><br>FreeSWITCH-users mailing list<br>FreeSWITCH-users@lists.freeswitch.org<br><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br><a href="http://www.freeswitch.org">http://www.freeswitch.org</a></pre></blockquote></div></body></html>