you mean the below one, to cut some of it? :<X-PRE-PROCESS cmd="set" data="rtp_sdes_suites=AEAD_AES_256_GCM_8|AEAD_AES_128_GCM_8|AES_CM_256_HMAC_SHA1_80|AES_CM_192_HMAC_SHA1_80|AES_CM_128_HMAC_SHA1_80|AES_CM _256_HMAC_SHA1_32|AES_CM_192_HMAC_SHA1_32|AES_CM_128_HMAC_SHA1_32|AES_CM_128_NULL_AUTH”/>From: Brian West <brian@freeswitch.org>To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org>Date: December 3, 2014 at 11:44:31 PM GMT+3Reply-To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org>Subject: Re: [Freeswitch-users] FreeSWITCH TLS not able to receive callsI would try limiting the crypto suites on the FS side, Look in vars.xml for details, I know if we send the whole crypt suite list at a polycom on pretty much any firmware the phone goes rum dumb and starts to echo our SDP's back at us. :POn Wed, Dec 3, 2014 at 12:36 PM, Ahmed Habiba <ahabiba@gmail.com> wrote:Dear Brian,I’m using "zoiper 1.19.7” on android, the issue appears only one I enable SRTP, for TLS only it is working very fine.The issue as shown below it keeps registering till finally zipper restart on mobile.One more point I’m configuring Zoiper without using RPORT for either SRTP or TLS.“2014-12-01 20:57:24.003230 [NOTICE] switch_ivr_originate.c:3467 Hangup sofia/internal/sip:1000@222.248.102.244:38614 [CS_CONSUME_MEDIA] [NO_ANSWER]"recv 1290 bytes from tls/[222.215.195.234]:2896 at 20:56:54.344450:------------------------------------------------------------------------INVITE sip:1000@abc-xyz.com SIP/2.0v: SIP/2.0/TLS 192.168.8.109:41659;rport;branch=z9hG4bKPjvnvRZjpAXahzIV7S8SRgS5vwKmYI9WFS;aliasMax-Forwards: 70f: <sip:1006@abc-xyz.com>;tag=weeMqzInPcNLPd6s5IX63c8be3DMvGkUt: <sip:1000@abc-xyz.com>i: sjprJQszC2LHvY6jRr-lm9rau9V1PlYXCSeq: 32737 INVITERoute: <sip:abc-xyz.com;transport=tls;lr>k: replaces, 100rel, timer, norefersubx: 1800Min-SE: 90User-Agent: CSipSimple_GT-S5830-10/r2450Proxy-Authorization: Digest username="1006", realm="abc-xyz.com", nonce="329456ee-7994-11e4-bf79-1182ebca2429", uri="sip:1000@abc-xyz.com", response="ab3a0f2fe9207ced62eebd8c9b8c32b4", algorithm=MD5, cnonce="iLa-C.wpnBSeTQjWiXZK3H3PGYhi6EGt", qop=auth, nc=00000001c: application/sdpl: 469v=0o=- 3626452487 3626452487 IN IP4 192.168.8.109s=pjmediac=IN IP4 192.168.8.109t=0 0m=audio 4000 RTP/SAVP 98 0 8 101c=IN IP4 192.168.8.109a=rtcp:4001 IN IP4 192.168.8.109a=sendrecva=rtpmap:98 SILK/16000a=fmtp:98 useinbandfec=0a=rtpmap:101 telephone-event/8000a=fmtp:101 0-16a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:Vci7cNdSFTkkLnqz+qRkqCctPvRT6jIOrNc5KMbza=crypto:2 AES_CM_128_HMAC_SHA1_32 inline:nW3ECq5YHHnrY2q5u7XZE4fvPfMOAWKQ+ehOp7zV------------------------------------------------------------------------send 405 bytes to tls/[222.215.195.234]:2896 at 20:56:54.344687:------------------------------------------------------------------------SIP/2.0 100 TryingVia: SIP/2.0/TLS 192.168.8.109:41659;rport=2896;branch=z9hG4bKPjvnvRZjpAXahzIV7S8SRgS5vwKmYI9WFS;alias;received=222.215.195.234f: <sip:1006@abc-xyz.com>;tag=weeMqzInPcNLPd6s5IX63c8be3DMvGkUt: <sip:1000@abc-xyz.com>i: sjprJQszC2LHvY6jRr-lm9rau9V1PlYXCSeq: 32737 INVITEUser-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bitContent-Length: 0send 2133 bytes to tls/[222.248.102.244]:38614 at 20:56:54.360608:------------------------------------------------------------------------Via: SIP/2.0/TLS 176.31.245.17;branch=z9hG4bKjXZvg3cX76KrjMax-Forwards: 69From: "Extension 1006" <sip:1006@176.31.245.17>;tag=15DcKN9tUZeaKCall-ID: 0a3e07c5-f437-1232-9bba-d2ab2784dc6aCSeq: 68395843 INVITEUser-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bitAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBESupported: timer, path, replacesAllow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, referContent-Type: application/sdpContent-Disposition: sessionContent-Length: 1076X-FS-Support: update_display,send_infoRemote-Party-ID: "Extension 1006" <sip:1006@176.31.245.17>;party=calling;screen=yes;privacy=offv=0o=FreeSWITCH 1417445672 1417445673 IN IP4 176.31.245.17s=FreeSWITCHc=IN IP4 176.31.245.17t=0 0m=audio 18142 RTP/SAVP 0 8 101 13a=rtpmap:0 PCMU/8000a=rtpmap:8 PCMA/8000a=rtpmap:101 telephone-event/8000a=fmtp:101 0-16a=crypto:1 AEAD_AES_256_GCM_8 inline:6p/uXB7tN5SG9vHP/DMurij6BaZIOKcP4Tle0kjo2lwL1Oa4z9WGyZtk4zsa=crypto:2 AEAD_AES_128_GCM_8 inline:hGeJA6XQV1V35oTu2141o7mD64dFDRbeCbcf6ga=crypto:3 AES_CM_256_HMAC_SHA1_80 inline:XdZwwcl6kMRrWY7Vkrbozf/o1awka9lef0UjQRwvnOnnrbAgzXIm8s3yu7o8DQa=crypto:4 AES_CM_192_HMAC_SHA1_80 inline:KtM92m0ac2musYPoXLDJb4rUbEMYAwMegPH9RMtzwzPb+0O93e0a=crypto:5 AES_CM_128_HMAC_SHA1_80 inline:PtOpdIk2LTSCSDVzPaSN6AV2xosBrJUTd4mvKIGha=crypto:6 AES_CM_256_HMAC_SHA1_32 inline:ZHzWxajRlQp8IuzX5CuFM1SRkL0huC62ukX583+Vg0LBiK9t2NrpP8FNwdkckQa=crypto:7 AES_CM_192_HMAC_SHA1_32 inline:S9BWrDxGFYpU3P9o3HD0Z97W5jwo8vD+E1sJi821r4/B+cdukTwa=crypto:8 AES_CM_128_HMAC_SHA1_32 inline:l7C0wU29AjF2ZMnCTvks+1ytd/UiXHqN8UIsM6vfa=crypto:9 AES_CM_128_NULL_AUTH inline:tv97QsO7+S9NLTXrD02omyWoyM7I2KaWaimUgq99a=ptime:20------------------------------------------------------------------------REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0Via: SIP/2.0/TLS 192.168.10.2:41120;branch=z9hG4bK-d8754z-903949acb1d10083-1---d8754z-;rportMax-Forwards: 70From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA.CSeq: 1 REGISTERExpires: 60Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBESupported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuriUser-Agent: Zoiper r27147Allow-Events: presence, kpmlContent-Length: 0------------------------------------------------------------------------send 716 bytes to tls/[222.248.102.244]:38620 at 20:57:01.806433:------------------------------------------------------------------------SIP/2.0 401 UnauthorizedVia: SIP/2.0/TLS 192.168.10.2:41120;branch=z9hG4bK-d8754z-903949acb1d10083-1---d8754z-;rport=38620;received=222.248.102.244From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22To: <sip:1000@abc-xyz.com;transport=TLS>;tag=2e74mgtyr84veCall-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA.CSeq: 1 REGISTERUser-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bitAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBESupported: timer, path, replacesWWW-Authenticate: Digest realm="abc-xyz.com", nonce="374fdd98-7994-11e4-bf9c-1182ebca2429", algorithm=MD5, qop="auth"Content-Length: 0------------------------------------------------------------------------recv 944 bytes from tls/[222.248.102.244]:38620 at 20:57:01.995662:------------------------------------------------------------------------REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0Via: SIP/2.0/TLS 192.168.10.2:41120;branch=z9hG4bK-d8754z-8ca0e782336414eb-1---d8754z-;rportMax-Forwards: 70From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA.CSeq: 2 REGISTERExpires: 60Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBESupported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuriUser-Agent: Zoiper r27147Authorization: Digest username="1000",realm="abc-xyz.com",nonce="374fdd98-7994-11e4-bf9c-1182ebca2429",uri="sip:abc-xyz.com;transport=TLS",response="8d7e108ff98035d37424c32166fe0253",cnonce="107cf281c3b57888a4bfd1a9c3776098",nc=00000001,qop=auth,algorithm=MD5Allow-Events: presence, kpmlContent-Length: 0------------------------------------------------------------------------send 712 bytes to tls/[222.248.102.244]:38620 at 20:57:01.997931:------------------------------------------------------------------------SIP/2.0 200 OKVia: SIP/2.0/TLS 192.168.10.2:41120;branch=z9hG4bK-d8754z-8ca0e782336414eb-1---d8754z-;rport=38620;received=222.248.102.244From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22To: <sip:1000@abc-xyz.com;transport=TLS>;tag=3Q0XpBB2NHUFaCall-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA.CSeq: 2 REGISTERContact: <sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS>;expires=60Date: Mon, 01 Dec 2014 19:57:01 GMTUser-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bitAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBESupported: timer, path, replacesContent-Length: 0------------------------------------------------------------------------recv 944 bytes from tls/[222.248.102.244]:38620 at 20:57:02.205719:------------------------------------------------------------------------REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0Via: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-59d493abef215091-1---d8754z-;rportMax-Forwards: 70Contact: <sip:1000@192.168.10.2:41120;rinstance=57d4e16c725a51e6;transport=TLS>;expires=0From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22Call-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA.CSeq: 3 REGISTERAllow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBESupported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuriUser-Agent: Zoiper r27147Authorization: Digest username="1000",realm="abc-xyz.com",nonce="374fdd98-7994-11e4-bf9c-1182ebca2429",uri="sip:abc-xyz.com;transport=TLS",response="5168bf9afffe9adacef7d898bd6bec9b",cnonce="80108fa519303990cfd2d46639d767ee",nc=00000002,qop=auth,algorithm=MD5Allow-Events: presence, kpmlContent-Length: 0------------------------------------------------------------------------send 598 bytes to tls/[222.248.102.244]:38620 at 20:57:02.207249:------------------------------------------------------------------------SIP/2.0 200 OKVia: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-59d493abef215091-1---d8754z-;rport=38620From: <sip:1000@abc-xyz.com;transport=TLS>;tag=4a2eae22To: <sip:1000@abc-xyz.com;transport=TLS>;tag=40Spr6U5jtH2NCall-ID: N2RiMjE2ZTQxNzYzMGY3ZmM3ZGJhODM4NTMzZmQ1YTA.CSeq: 3 REGISTERDate: Mon, 01 Dec 2014 19:57:02 GMTUser-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bitAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBESupported: timer, path, replacesContent-Length: 0------------------------------------------------------------------------recv 681 bytes from tls/[222.248.102.244]:38620 at 20:57:02.400564:------------------------------------------------------------------------REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0Via: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-d738a1a836608006-1---d8754z-;rportMax-Forwards: 70From: <sip:1000@abc-xyz.com;transport=TLS>;tag=979e5f46Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y.CSeq: 1 REGISTERExpires: 60Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBESupported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuriUser-Agent: Zoiper r27147Allow-Events: presence, kpmlContent-Length: 0------------------------------------------------------------------------send 694 bytes to tls/[222.248.102.244]:38620 at 20:57:02.401167:------------------------------------------------------------------------SIP/2.0 401 UnauthorizedVia: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-d738a1a836608006-1---d8754z-;rport=38620From: <sip:1000@abc-xyz.com;transport=TLS>;tag=979e5f46To: <sip:1000@abc-xyz.com;transport=TLS>;tag=59jFt1c9F37mHCall-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y.CSeq: 1 REGISTERUser-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bitAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBESupported: timer, path, replacesWWW-Authenticate: Digest realm="abc-xyz.com", nonce="37aaa44e-7994-11e4-bf9d-1182ebca2429", algorithm=MD5, qop="auth"Content-Length: 0------------------------------------------------------------------------recv 950 bytes from tls/[222.248.102.244]:38620 at 20:57:02.655864:------------------------------------------------------------------------REGISTER sip:abc-xyz.com;transport=TLS SIP/2.0Via: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-dfaa7130675d6cfa-1---d8754z-;rportMax-Forwards: 70From: <sip:1000@abc-xyz.com;transport=TLS>;tag=979e5f46Call-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y.CSeq: 2 REGISTERExpires: 60Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBESupported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuriUser-Agent: Zoiper r27147Authorization: Digest username="1000",realm="abc-xyz.com",nonce="37aaa44e-7994-11e4-bf9d-1182ebca2429",uri="sip:abc-xyz.com;transport=TLS",response="f1667094626fc10ca76a070438497e6f",cnonce="dc790bffe285311f0b903bd515a3e741",nc=00000001,qop=auth,algorithm=MD5Allow-Events: presence, kpmlContent-Length: 0------------------------------------------------------------------------send 693 bytes to tls/[222.248.102.244]:38620 at 20:57:02.657688:------------------------------------------------------------------------SIP/2.0 200 OKVia: SIP/2.0/TLS 222.248.102.244:38620;branch=z9hG4bK-d8754z-dfaa7130675d6cfa-1---d8754z-;rport=38620From: <sip:1000@abc-xyz.com;transport=TLS>;tag=979e5f46To: <sip:1000@abc-xyz.com;transport=TLS>;tag=6jc8UvXcDcy7cCall-ID: MTJhNjIzMDM1MDEwMDVjZDRkOGMyYjBlMWU4ZDEzY2Y.CSeq: 2 REGISTERContact: <sip:1000@222.248.102.244:38620;rinstance=43166fee0aaac1bc;transport=TLS>;expires=60Date: Mon, 01 Dec 2014 19:57:02 GMTUser-Agent: FreeSWITCH-mod_sofia/1.4.13+git~20141103T195300Z~b942d0faa8~64bitAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBESupported: timer, path, replacesContent-Length: 0From: Brian West <brian@freeswitch.org>To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org>Date: December 1, 2014 at 5:19:30 PM GMT+3Reply-To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org>Subject: Re: [Freeswitch-users] FreeSWITCH TLS not able to receive callsWhat endpoints are involved? have you looked at 'sofia loglevel all 9' output and see if it gives you a clue?On Fri, Nov 28, 2014 at 6:24 PM, Ahmed Habiba <ahabiba@gmail.com> wrote:_________________________________________________________________________Dears,I’ve configured FreeSWITCH with the below version with TLS/SRTPas per the recommendation in page “https://wiki.freeswitch.org/wiki/SIP_TLS” and it was strait forward, and I was able to connect and make make calls using zoiper, but I was not able to receive any calls after enabling the TLS/SRTP."FreeSWITCH Version 1.4.13+git~20141103T195300Z~b942d0faa8~64bit (git b942d0f 2014-11-03 19:53:00Z 64bit)”Your kind feedback will be appreciate.Thanks,Ahmed Habiba.
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org--Brian West
brian@freeswitch.org
Twitter: @FreeSWITCH , @briankwest
http://www.freeswitchbook.com
http://www.freeswitchcookbook.comT:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)
iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest--Thanks and Best Regards,Ahmed HabibaMob: +20 10 37 82 970Success: believe (Vision) plus commitment (Action)
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org--Brian West
brian@freeswitch.org
Twitter: @FreeSWITCH , @briankwest
http://www.freeswitchbook.com
http://www.freeswitchcookbook.comT:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)
iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest
_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
Brian West
brian@freeswitch.org

Twitter: @FreeSWITCH , @briankwest
http://www.freeswitchbook.com
http://www.freeswitchcookbook.com
T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)
iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest