<div dir="ltr">Thanks guys, the connection happens fine now. For some strange reason the client send the BYE signal almost as soon as it gets the OK from FS (which does not happen with SDES) but I'll work with the SDK developers on that or just stick with SDES.</div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Aug 17, 2016 at 10:51 AM, Michael Jerris <span dir="ltr"><<a href="mailto:mike@jerris.com" target="_blank">mike@jerris.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">Thats the old one. The one to look at that adds these is:<div><br></div><div><a href="https://tools.ietf.org/html/rfc5764#section-8" target="_blank">https://tools.ietf.org/html/<wbr>rfc5764#section-8</a></div><div><br></div><div>its in master now supporting SAVP as well.</div><div><div class="h5"><div><br></div><div><br><div><blockquote type="cite"><div>On Aug 17, 2016, at 1:44 PM, Sergey Safarov <<a href="mailto:s.safarov@gmail.com" target="_blank">s.safarov@gmail.com</a>> wrote:</div><br><div><div dir="ltr">Look at <a href="https://tools.ietf.org/html/rfc4566#section-5.14" target="_blank">rfc4566, section-5.14</a> <br><br><div class="gmail_quote"><div dir="ltr">ср, 17 авг. 2016 г. в 17:37, Oleg Stolyar <<a href="mailto:olegstolyar@gmail.com" target="_blank">olegstolyar@gmail.com</a>>:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Is there some RFC or some other authoritative source that would say whether "<span style="color:rgb(33,33,33);font-family:"helvetica neue",helvetica,arial,sans-serif;font-size:12.8px">UDP/TLS/RTP/SAVP" or </span><span style="color:rgb(33,33,33);font-family:"helvetica neue",helvetica,arial,sans-serif;font-size:12.8px">"RTP/SAVP" is the correct value for DLTS-SRTP for NON-WebRTC connections? </span><div><span style="color:rgb(33,33,33);font-family:"helvetica neue",helvetica,arial,sans-serif;font-size:12.8px"><br></span></div><div><span style="color:rgb(33,33,33);font-family:"helvetica neue",helvetica,arial,sans-serif;font-size:12.8px">If the former, then I'll file a Jira in FS. If the latter, I'll work with the SDK developers to fix.</span></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Aug 17, 2016 at 7:18 AM, Sergey Safarov <span dir="ltr"><<a href="mailto:s.safarov@gmail.com" target="_blank">s.safarov@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Correct way to fix on client side but if it is not possible then SDP rewrite can be made on server side.<div>For SRD rewrite on server side i recoment use kamailio proxy server.</div><div><br></div><div>About DTLS. I has found that use DTLS requres modern crypro lib. Try FreeSwitch on fedora server distr or other with modern crypto lib.</div><div><br></div><div>Sergey.<br><br><div class="gmail_quote"><div dir="ltr">ср, 17 авг. 2016 г. в 13:23, Oleg Stolyar <<a href="mailto:olegstolyar@gmail.com" target="_blank">olegstolyar@gmail.com</a>>:<br></div><div><div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">I think you are right Sergey. Should it be fixed on the FS side or on the client SDK side though? Which is the right value?</p><p dir="ltr">By the way, the SDK can do either dtls or sdes. This issue happens with dtls. Sdes works fine and I can establish a call.</p>
<div class="gmail_extra"><br><div class="gmail_quote">On Aug 16, 2016 10:14 PM, "Sergey Safarov" <<a href="mailto:s.safarov@gmail.com" target="_blank">s.safarov@gmail.com</a>> wrote:<br type="attribution"><blockquote style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Think issue related to "<span style="color:rgb(33,33,33);font-family:"helvetica neue",helvetica,arial,sans-serif">m=audio 61434 UDP/TLS/RTP/SAVP"</span><div><span style="color:rgb(33,33,33);font-family:"helvetica neue",helvetica,arial,sans-serif">Try "</span><span style="color:rgb(33,33,33);font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:1.5">m=audio 61434 RTP/SAVP</span><span style="color:rgb(33,33,33);font-family:"helvetica neue",helvetica,arial,sans-serif;line-height:1.5">"</span></div></div><br><div class="gmail_quote"><div dir="ltr">ср, 17 авг. 2016 г. в 5:35, Oleg Stolyar <<a href="mailto:olegstolyar@gmail.com" target="_blank">olegstolyar@gmail.com</a>>:<br></div><div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Thanks Gonzalo,</div><div><br></div>That setup on the FS side refers to TLS and as I said TLS is working for me, I have it set up. <div><br></div><div>SRTP should work out of the box AFAIK. I suspect there is something in the SDP I posted that FS considers to be non-compliant with the specs. Not sure what though and whether it's a bug in FS or in the client SDK I am using.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Aug 16, 2016 at 7:22 PM, Gonzalo Gasca Meza <span dir="ltr"><<a href="mailto:gascagonzalo@gmail.com" target="_blank">gascagonzalo@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Did you enable/configure SRTP? <a href="http://twilio-marketing-prod.elasticbeanstalk.com/resources/images/docs/TwilioSecure-Freeswitch.pdf" target="_blank">This</a> is a sample guide I use for Twilio TLS/SRTP which can help</div>Can you post all logs?<div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div>On Tue, Aug 16, 2016 at 6:10 PM, Oleg Stolyar <span dir="ltr"><<a href="mailto:olegstolyar@gmail.com" target="_blank">olegstolyar@gmail.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div dir="ltr">Hi guys,<div><br></div><div>I am trying to connect to FS using the CounterPath SDK for Android. I use TLS for signalling. All works well until I try to enable SRTP. Then FS rejects the call the INCOMPATIBLE_DESTINATION message. Is there something wrong with the SDP? Here are the relevant SDPs from the INVITES.</div><div><br></div><div><div>NON-SRTP (works)<br></div><div> v=0</div><div> o=- 622419737965 1 IN IP4 192.168.1.78</div><div> s=</div><div> c=IN IP4 192.168.1.78</div><div> t=0 0</div><div> m=audio 57194 RTP/AVP 3 120 123 122 121 9 8 0 84 85 18 101</div><div> a=rtpmap:120 opus/48000/2</div><div> a=fmtp:120 useinbandfec=1; usedtx=1; maxaveragebitrate=64000</div><div> a=rtpmap:123 SILK/24000</div><div> a=rtpmap:122 SILK/16000</div><div> a=rtpmap:121 SILK/8000</div><div> a=rtpmap:84 speex/16000</div><div> a=rtpmap:85 speex/8000</div><div> a=rtpmap:18 G729/8000</div><div> a=fmtp:18 annexb=yes</div><div> a=rtpmap:101 telephone-event/8000</div><div> a=fmtp:101 0-15</div><div> a=sendrecv</div></div><div><br></div><div><div>SRTP (does not work)</div><div> v=0</div><div> o=- 622187157154 1 IN IP4 192.168.1.78</div><div> s=</div><div> c=IN IP4 192.168.1.78</div><div> t=0 0</div><div> a=fingerprint:SHA-256 4D:08:D6:49:9E:CA:77:A2:77:74:<wbr>02:A0:B9:92:32:2F:2D:76:7D:59:<wbr>7F:A4:CA:85:16:BA:D0:27:0A:74:<wbr>1C:0F</div><div> a=setup:actpass</div><div> m=audio 61434 UDP/TLS/RTP/SAVP 3 120 123 122 121 9 8 0 84 85 18 101</div><div> a=rtpmap:120 opus/48000/2</div><div> a=fmtp:120 useinbandfec=1; usedtx=1; maxaveragebitrate=64000</div><div> a=rtpmap:123 SILK/24000</div><div> a=rtpmap:122 SILK/16000</div><div> a=rtpmap:121 SILK/8000</div><div> a=rtpmap:84 speex/16000</div><div> a=rtpmap:85 speex/8000</div><div> a=rtpmap:18 G729/8000</div><div> a=fmtp:18 annexb=yes</div><div> a=rtpmap:101 telephone-event/8000</div><div> a=fmtp:101 0-15</div><div> a=sendrecv</div></div><div><br></div></div>
</div></div></blockquote></div></div></blockquote></div></div></blockquote></div></div></blockquote></div></div></blockquote></div></div></div></div></div></blockquote></div></div></blockquote></div></div></div></blockquote></div><br></div></div></div></div><br>______________________________<wbr>______________________________<wbr>_____________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.<wbr>freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.<wbr>org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.<wbr>freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/<wbr>mailman/listinfo/freeswitch-<wbr>users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.<wbr>freeswitch.org/mailman/<wbr>options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br></div>