the sofia library we depend on requires you to feed it plain passwords for outbound auth.
We would have to pressure them to expose a way for us to pre-hash them.
As an alternative, you can always use xml-curl + https url to fetch the configs from your db on the fly over a secure
connection but that won't stop the hacker from running gcore on fs and finding them in the ram somewhere just like if someone wants to break into your house he can just take a chainsaw and cut a hole in the side and walk in.
I'll ask the guy next time i talk to him.
Thanks for your support for the vm-passwords.
The most important part for us however is having hashed passwords for
external gateway definitions (we have a lot) and securing pins for
conferences.
Do we have a chance to add this also?
In our environment DTMF is of course transported via SRTP so this is
more secure (although the key exchange by SDES is known to have security
issues, as rtp streams may be replayed by a 3rd party, there is no
replay prevention mechanism in SDES and therefore also not in
freeswitch, hein?).
Best regards
Peter
Michael Jerris schrieb:
> just added vm-a1-hash as well that you can use to override the
> standard a1 hash for voicemail use only.
>
> Mike
>
>
> On Oct 20, 2008, at 7:27 PM, Anthony Minessale wrote:
>
>
>> if you want to test latest trunk i added code that *should* let you
>> auth the vm using the same
>> a1-hash also we added an "md5" api command to mod_commands so you
>> can use it in your own apps.
>>
>> ${md5(some data)}
>>
>>
>
> _______________________________________________
> Freeswitch-users mailing list
> Freeswitch-users@lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
_______________________________________________
Freeswitch-users mailing list
Freeswitch-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org