I don't have that set however I'm not trying to use SRTP yet. At the moment I'm just trying to use Secure SIP. That section of my dial plan is <condition field="${sip_has_crypto}" expression="^(AES_CM_128_HMAC_SHA1_32|AES_CM_128_HMAC_SHA1_80)$" break="never"> <action application="set" data="sip_secure_media=true"/> <!-- Offer SRTP on outbound legs if we have it on inbound. --> <!-- <action application="export" data="sip_secure_media=true"/> --> </condition> The TLS part of my internal.xml is now <!-- TLS: disabled by default, set to "true" to enable --> <param name="tls" value="true"/> <!-- additional bind parameters for TLS --> <param name="tls-bind-params" value=""/> <!-- Port to listen on for TLS requests. (5061 will be used if unspecified) --> <param name="tls-sip-port" value="$${internal_tls_port}"/> <!-- Location of the agent.pem and cafile.pem ssl certificates (needed for TLS server) --> <param name="tls-cert-dir" value="$${internal_ssl_dir}"/> <!-- TLS version ("sslv23" (default), "tlsv1"). NOTE: Phones may not work with TLSv1 --> <param name="tls-version" value="$${sip_tls_version}"/> I also tried with <!-- additional bind parameters for TLS --> <param name="tls-bind-params" value="transport=tls"/> On Mon, Dec 1, 2008 at 3:47 PM, Peter P GMX <Prometheus001@gmx.net> wrote:
Did you add <action application="export" data="sip_secure_media=true"/> into youy dialplan before bridging that call. How is your internal.conf, is TLS enabled there?
Best regards Peter
matrim schrieb:
Hi,
I'm having problems using TLS to receive calls.
I'm using a Nokia N95 to test TLS against freeswitch. I can register my client against freeswitch and make outbound calls to the test numbers (e.g. 9999).
I can also make calls to other users registered over UDP.
However if I try to make a call to a user registered over TLS the leg of the call to that user always goes via UDP.
e.g.
1000 registered via TLS 1001 registered via TLS 1002 registered via UDP 1003 registered via UDP
1000 -> 1002 works ok 1003 -> 1002 works ok
1001 -> 1000 Doesn't work. The leg of the call between freeswitch and 1000 tries to setup via UDP 1002 -> 1000 Doesn't work. The leg of the call between freeswitch and 1000 tries to setup via UDP
===
From looking at some of the documentation it seems to me that the issue may
be with the "tls-bind-params" being "transport=tls".
The phone I'm using doesn't add the "transport=tls" parameter, and only uses "sips:" to specify that the connection is via TLS.
I tried setting "tls-bind-params" to a blank string but it didn't change anything. Is there any way to receive calls over TLS if you don't specify "transport=tls" in your contact string during registration?
According to RFC3261 the use of the "transport=tls" parameter isn't recommended anymore and is now deprecated.
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org