you mean the below one, to cut some of it? :

<X-PRE-PROCESS cmd="set" data="rtp_sdes_suites=AEAD_AES_256_GCM_8|AEAD_AES_128_GCM_8|AES_CM_256_HMAC_SHA1_80|AES_CM_192_HMAC_SHA1_80|AES_CM_128_HMAC_SHA1_80|AES_CM    _256_HMAC_SHA1_32|AES_CM_192_HMAC_SHA1_32|AES_CM_128_HMAC_SHA1_32|AES_CM_128_NULL_AUTH”/>






From: Brian West <brian@freeswitch.org>
To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org>
Date: December 3, 2014 at 11:44:31 PM GMT+3
Reply-To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org>
Subject: Re: [Freeswitch-users] FreeSWITCH TLS not able to receive calls


I would try limiting the crypto suites on the FS side, Look in vars.xml for details, I know if we send the whole crypt suite list at a polycom on pretty much any firmware the phone goes rum dumb and starts to echo our SDP's back at us.  :P

On Wed, Dec 3, 2014 at 12:36 PM, Ahmed Habiba <ahabiba@gmail.com> wrote:
Dear Brian,


I’m using "zoiper 1.19.7” on android, the issue appears only one I enable SRTP, for TLS only it is working very fine.

The issue as shown below it keeps registering till finally zipper restart on mobile.

One more point I’m configuring Zoiper without using RPORT for either SRTP or TLS.

“2014-12-01 20:57:24.003230 [NOTICE] switch_ivr_originate.c:3467 Hangup sofia/internal/sip:1000@222.248.102.244:38614 [CS_CONSUME_MEDIA] [NO_ANSWER]"



recv 1290 bytes from tls/[222.215.195.234]:2896 at 20:56:54.344450:
   ------------------------------------------------------------------------
   INVITE sip:1000@abc-xyz.com SIP/2.0
   v: SIP/2.0/TLS 192.168.8.109:41659;rport;branch=z9hG4bKPjvnvRZjpAXahzIV7S8SRgS5vwKmYI9WFS;alias
   Max-Forwards: 70
   f: <sip:1006@abc-xyz.com>;tag=weeMqzInPcNLPd6s5IX63c8be3DMvGkU
   i: sjprJQszC2LHvY6jRr-lm9rau9V1PlYX
   CSeq: 32737 INVITE
   k: replaces, 100rel, timer, norefersub
   x: 1800
   Min-SE: 90
   User-Agent: CSipSimple_GT-S5830-10/r2450
   Proxy-Authorization: Digest username="1006", realm="abc-xyz.com", nonce="329456ee-7994-11e4-bf79-1182ebca2429", uri="sip:1000@abc-xyz.com", response="ab3a0f2fe9207ced62eebd8c9b8c32b4", algorithm=MD5, cnonce="iLa-C.wpnBSeTQjWiXZK3H3PGYhi6EGt", qop=auth, nc=00000001
   c: application/sdp
   l:   469
   
   v=0
   o=- 3626452487 3626452487 IN IP4 192.168.8.109
   s=pjmedia
   c=IN IP4 192.168.8.109
   t=0 0
   m=audio 4000 RTP/SAVP 98 0 8 101
   c=IN IP4 192.168.8.109
   a=rtcp:4001 IN IP4 192.168.8.109
   a=sendrecv
   a=rtpmap:98 SILK/16000
   a=fmtp:98 useinbandfec=0
   a=rtpmap:101 telephone-event/8000
   a=fmtp:101 0-16
   a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:Vci7cNdSFTkkLnqz+qRkqCctPvRT6jIOrNc5KMbz
   a=crypto:2 AES_CM_128_HMAC_SHA1_32 inline:nW3ECq5YHHnrY2q5u7XZE4fvPfMOAWKQ+ehOp7zV
   ------------------------------------------------------------------------
   
   send 405 bytes to tls/[222.215.195.234]:2896 at 20:56:54.344687:
   ------------------------------------------------------------------------
   SIP/2.0 100 Trying
   Via: SIP/2.0/TLS 192.168.8.109:41659;rport=2896;branch=z9hG4bKPjvnvRZjpAXahzIV7S8SRgS5vwKmYI9WFS;alias;received=222.215.195.234
   f: <sip:1006@abc-xyz.com>;tag=weeMqzInPcNLPd6s5IX63c8be3DMvGkU
   i: sjprJQszC2LHvY6jRr-lm9rau9V1PlYX
   CSeq: 32737 INVITE
   User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit
   Content-Length: 0
   





send 2133 bytes to tls/[222.248.102.244]:38614 at 20:56:54.360608:
   ------------------------------------------------------------------------
   Via: SIP/2.0/TLS 176.31.245.17;branch=z9hG4bKjXZvg3cX76Krj
   Max-Forwards: 69
   From: "Extension 1006" <sip:1006@176.31.245.17>;tag=15DcKN9tUZeaK
   Call-ID: 0a3e07c5-f437-1232-9bba-d2ab2784dc6a
   CSeq: 68395843 INVITE
   User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit
   Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
   Supported: timer, path, replaces
   Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
   Content-Type: application/sdp
   Content-Disposition: session
   Content-Length: 1076
   X-FS-Support: update_display,send_info
   Remote-Party-ID: "Extension 1006" <sip:1006@176.31.245.17>;party=calling;screen=yes;privacy=off
   
   v=0
   o=FreeSWITCH 1417445672 1417445673 IN IP4 176.31.245.17
   s=FreeSWITCH
   c=IN IP4 176.31.245.17
   t=0 0
   m=audio 18142 RTP/SAVP 0 8 101 13
   a=rtpmap:0 PCMU/8000
   a=rtpmap:8 PCMA/8000
   a=rtpmap:101 telephone-event/8000
   a=fmtp:101 0-16
   a=crypto:1 AEAD_AES_256_GCM_8 inline:6p/uXB7tN5SG9vHP/DMurij6BaZIOKcP4Tle0kjo2lwL1Oa4z9WGyZtk4zs
   a=crypto:2 AEAD_AES_128_GCM_8 inline:hGeJA6XQV1V35oTu2141o7mD64dFDRbeCbcf6g
   a=crypto:3 AES_CM_256_HMAC_SHA1_80 inline:XdZwwcl6kMRrWY7Vkrbozf/o1awka9lef0UjQRwvnOnnrbAgzXIm8s3yu7o8DQ
   a=crypto:4 AES_CM_192_HMAC_SHA1_80 inline:KtM92m0ac2musYPoXLDJb4rUbEMYAwMegPH9RMtzwzPb+0O93e0
   a=crypto:5 AES_CM_128_HMAC_SHA1_80 inline:PtOpdIk2LTSCSDVzPaSN6AV2xosBrJUTd4mvKIGh
   a=crypto:6 AES_CM_256_HMAC_SHA1_32 inline:ZHzWxajRlQp8IuzX5CuFM1SRkL0huC62ukX583+Vg0LBiK9t2NrpP8FNwdkckQ
   a=crypto:7 AES_CM_192_HMAC_SHA1_32 inline:S9BWrDxGFYpU3P9o3HD0Z97W5jwo8vD+E1sJi821r4/B+cdukTw
   a=crypto:8 AES_CM_128_HMAC_SHA1_32 inline:l7C0wU29AjF2ZMnCTvks+1ytd/UiXHqN8UIsM6vf
   a=crypto:9 AES_CM_128_NULL_AUTH inline:tv97QsO7+S9NLTXrD02omyWoyM7I2KaWaimUgq99
   a=ptime:20
   ------------------------------------------------------------------------
   
   
      REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0
   Via: SIP/2.0/TLS 192.168.10.2:41120;branch=z9hG4bK-d8754z-903949acb1d10083-1---d8754z-;rport
   Max-Forwards: 70
   From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22
   Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA.
   CSeq: 1 REGISTER
   Expires: 60
   Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
   Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri
   User-Agent: Zoiper r27147
   Allow-Events: presence, kpml
   Content-Length: 0
   
   
      ------------------------------------------------------------------------
send 716 bytes to tls/[222.248.102.244]:38620 at 20:57:01.806433:
   ------------------------------------------------------------------------
   SIP/2.0 401 Unauthorized
   Via: SIP/2.0/TLS 192.168.10.2:41120;branch=z9hG4bK-d8754z-903949acb1d10083-1---d8754z-;rport=38620;received=222.248.102.244
   From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22
   To: <sip:1000@abc-xyz.com;transport=TLS>;tag=2e74mgtyr84ve
   Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA.
   CSeq: 1 REGISTER
   User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit
   Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
   Supported: timer, path, replaces
   WWW-Authenticate: Digest realm="abc-xyz.com", nonce="374fdd98-7994-11e4-bf9c-1182ebca2429", algorithm=MD5, qop="auth"
   Content-Length: 0
   
   
      ------------------------------------------------------------------------
recv 944 bytes from tls/[222.248.102.244]:38620 at 20:57:01.995662:
   ------------------------------------------------------------------------
   REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0
   Via: SIP/2.0/TLS 192.168.10.2:41120;branch=z9hG4bK-d8754z-8ca0e782336414eb-1---d8754z-;rport
   Max-Forwards: 70
   From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22
   Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA.
   CSeq: 2 REGISTER
   Expires: 60
   Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
   Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri
   User-Agent: Zoiper r27147
   Authorization: Digest username="1000",realm="abc-xyz.com",nonce="374fdd98-7994-11e4-bf9c-1182ebca2429",uri="sip:abc-xyz.com;transport=TLS",response="8d7e108ff98035d37424c32166fe0253",cnonce="107cf281c3b57888a4bfd1a9c3776098",nc=00000001,qop=auth,algorithm=MD5
   Allow-Events: presence, kpml
   Content-Length: 0
   
   
      ------------------------------------------------------------------------
send 712 bytes to tls/[222.248.102.244]:38620 at 20:57:01.997931:
   ------------------------------------------------------------------------
   SIP/2.0 200 OK
   Via: SIP/2.0/TLS 192.168.10.2:41120;branch=z9hG4bK-d8754z-8ca0e782336414eb-1---d8754z-;rport=38620;received=222.248.102.244
   From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22
   To: <sip:1000@abc-xyz.com;transport=TLS>;tag=3Q0XpBB2NHUFa
   Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA.
   CSeq: 2 REGISTER
   Date: Mon, 01 Dec 2014 19:57:01 GMT
   User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit
   Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
   Supported: timer, path, replaces
   Content-Length: 0
   
   ------------------------------------------------------------------------
recv 944 bytes from tls/[222.248.102.244]:38620 at 20:57:02.205719:
   ------------------------------------------------------------------------
   REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0
   Via: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-59d493abef215091-1---d8754z-;rport
   Max-Forwards: 70
   From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22
   Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA.
   CSeq: 3 REGISTER
   Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
   Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri
   User-Agent: Zoiper r27147
   Authorization: Digest username="1000",realm="abc-xyz.com",nonce="374fdd98-7994-11e4-bf9c-1182ebca2429",uri="sip:abc-xyz.com;transport=TLS",response="5168bf9afffe9adacef7d898bd6bec9b",cnonce="80108fa519303990cfd2d46639d767ee",nc=00000002,qop=auth,algorithm=MD5
   Allow-Events: presence, kpml
   Content-Length: 0
   
      ------------------------------------------------------------------------
send 598 bytes to tls/[222.248.102.244]:38620 at 20:57:02.207249:
   ------------------------------------------------------------------------
   SIP/2.0 200 OK
   Via: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-59d493abef215091-1---d8754z-;rport=38620
   From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22
   To: <sip:1000@abc-xyz.com;transport=TLS>;tag=40Spr6U5jtH2N
   Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA.
   CSeq: 3 REGISTER
   Date: Mon, 01 Dec 2014 19:57:02 GMT
   User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit
   Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
   Supported: timer, path, replaces
   Content-Length: 0
   
   ------------------------------------------------------------------------
recv 681 bytes from tls/[222.248.102.244]:38620 at 20:57:02.400564:
   ------------------------------------------------------------------------
   REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0
   Via: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-d738a1a836608006-1---d8754z-;rport
   Max-Forwards: 70
   From: <sip:1000@abc-xyz.com;transport=TLS>;tag=979e5f46
   Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y.
   CSeq: 1 REGISTER
   Expires: 60
   Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
   Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri
   User-Agent: Zoiper r27147
   Allow-Events: presence, kpml
   Content-Length: 0
   
   
      ------------------------------------------------------------------------
send 694 bytes to tls/[222.248.102.244]:38620 at 20:57:02.401167:
   ------------------------------------------------------------------------
   SIP/2.0 401 Unauthorized
   Via: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-d738a1a836608006-1---d8754z-;rport=38620
   From: <sip:1000@abc-xyz.com;transport=TLS>;tag=979e5f46
   To: <sip:1000@abc-xyz.com;transport=TLS>;tag=59jFt1c9F37mH
   Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y.
   CSeq: 1 REGISTER
   User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit
   Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
   Supported: timer, path, replaces
   WWW-Authenticate: Digest realm="abc-xyz.com", nonce="37aaa44e-7994-11e4-bf9d-1182ebca2429", algorithm=MD5, qop="auth"
   Content-Length: 0
   
   ------------------------------------------------------------------------
recv 950 bytes from tls/[222.248.102.244]:38620 at 20:57:02.655864:
   ------------------------------------------------------------------------
   REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0
   Via: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-dfaa7130675d6cfa-1---d8754z-;rport
   Max-Forwards: 70
   From: <sip:1000@abc-xyz.com;transport=TLS>;tag=979e5f46
   Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y.
   CSeq: 2 REGISTER
   Expires: 60
   Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
   Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri
   User-Agent: Zoiper r27147
   Authorization: Digest username="1000",realm="abc-xyz.com",nonce="37aaa44e-7994-11e4-bf9d-1182ebca2429",uri="sip:abc-xyz.com;transport=TLS",response="f1667094626fc10ca76a070438497e6f",cnonce="dc790bffe285311f0b903bd515a3e741",nc=00000001,qop=auth,algorithm=MD5
   Allow-Events: presence, kpml
   Content-Length: 0
   
   ------------------------------------------------------------------------
send 693 bytes to tls/[222.248.102.244]:38620 at 20:57:02.657688:
   ------------------------------------------------------------------------
   SIP/2.0 200 OK
   Via: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-dfaa7130675d6cfa-1---d8754z-;rport=38620
   From: <sip:1000@abc-xyz.com;transport=TLS>;tag=979e5f46
   To: <sip:1000@abc-xyz.com;transport=TLS>;tag=6jc8UvXcDcy7c
   Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y.
   CSeq: 2 REGISTER
   Date: Mon, 01 Dec 2014 19:57:02 GMT
   User-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bit
   Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
   Supported: timer, path, replaces
   Content-Length: 0






From: Brian West <brian@freeswitch.org>
To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org>
Date: December 1, 2014 at 5:19:30 PM GMT+3
Reply-To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org>
Subject: Re: [Freeswitch-users] FreeSWITCH TLS not able to receive calls


What endpoints are involved?  have you looked at 'sofia loglevel all 9' output and see if it gives you a clue?

On Fri, Nov 28, 2014 at 6:24 PM, Ahmed Habiba <ahabiba@gmail.com> wrote:
Dears,

I’ve configured FreeSWITCH with the below version with TLS/SRTPas per the recommendation in page “https://wiki.freeswitch.org/wiki/SIP_TLS” and it was strait forward, and I was able to connect and make make calls using zoiper, but I was not able to receive any calls after enabling the TLS/SRTP.

"FreeSWITCH Version 1.4.13+git~20141103T195300Z~b942d0faa8~64bit (git b942d0f 2014-11-03 19:53:00Z 64bit)”

Your kind feedback will be appreciate.

Thanks,

Ahmed Habiba.

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



-- 

Brian West
brian@freeswitch.org


Twitter: @FreeSWITCH , @briankwest
http://www.freeswitchbook.com
http://www.freeswitchcookbook.com

T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)
iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest







-- 
Thanks and Best Regards,
 
Ahmed Habiba
 
Mob: +20 10 37 82 970
 
Success: believe (Vision) plus commitment (Action)

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--

Brian West
brian@freeswitch.org


Twitter: @FreeSWITCH , @briankwest
http://www.freeswitchbook.com
http://www.freeswitchcookbook.com

T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)
iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest



_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org