Hi,
Maybe you can let me know how I can turn on SRTP using default config?
I have following lines in default conf/dialplan/default.xml:
<condition field="${rtp_has_crypto}" expression="^($${rtp_sdes_suites})$" break="never">
<action application="set" data="rtp_secure_media=true"/>
<!-- Offer SRTP on outbound legs if we have it on inbound. -->
<!-- <action application="export" data="rtp_secure_media=true"/> -->
</condition>
<!--
Since we have inbound-late-negotation on by default now the
above behavior isn't the same so you have to do one extra step.
-->
<condition field="${endpoint_disposition}" expression="^(DELAYED NEGOTIATION)"/>
<condition field="${switch_r_sdp}" expression="(AES_CM_128_HMAC_SHA1_32|AES_CM_128_HMAC_SHA1_80)" break="never">
<action application="set" data="rtp_secure_media=true"/>
<!-- Offer SRTP on outbound legs if we have it on inbound. -->
<!-- <action application="export" data="rtp_secure_media=true"/> -->
</condition>
If I change them to:
<condition field="${rtp_has_crypto}" expression="^($${rtp_sdes_suites})$" break="never">
<action application="set" data="rtp_secure_media=true"/>
<!-- Offer SRTP on outbound legs if we have it on inbound. -->
<action application="export" data="rtp_secure_media=true"/>
</condition>
<!--
Since we have inbound-late-negotation on by default now the
above behavior isn't the same so you have to do one extra step.
-->
<condition field="${endpoint_disposition}" expression="^(DELAYED NEGOTIATION)"/>
<condition field="${switch_r_sdp}" expression="(AES_CM_128_HMAC_SHA1_32|AES_CM_128_HMAC_SHA1_80)" break="never">
<action application="set" data="rtp_secure_media=true"/>
<!-- Offer SRTP on outbound legs if we have it on inbound. -->
<action application="export" data="rtp_secure_media=true"/>
</condition>
Then when I make a call there is issue with cipher:
show channels
uuid,direction,created,created_epoch,name,state,cid_name,cid_num,ip_addr,dest,application,application_data,dialplan,context,read_codec,read_rate,read_bit_rate,write_codec,write_rate,write_bit_rate,secure,hostname,presence_id,presence_data,callstate,callee_name,callee_num,callee_direction,call_uuid,sent_callee_name,sent_callee_num,initial_cid_name,initial_cid_num,initial_ip_addr,initial_dest,initial_dialplan,initial_context
81a423fc-41c8-11e5-ac4e-1b8671775759,inbound,2015-08-13 10:35:13,1439476513,sofia/internal/1001@myserverip,CS_EXECUTE,1001,1001,mylocalip,1000,bridge,user/1000@myserverip,XML,default,opus,48000,0,opus,48000,0,srtp:sdes:
AES_CM_128_HMAC_SHA1_80,Freeswitch1Dev,1001@myserverip,,ACTIVE,Outbound Call,1000,SEND,81a423fc-41c8-11e5-ac4e-1b8671775759,Outbound Call,1000,1001,1001,mylocalip,1000,XML,default
81cbe932-41c8-11e5-ac73-1b8671775759,outbound,2015-08-13 10:35:13,1439476513,sofia/internal/1000@mylocalip:39626,CS_EXCHANGE_MEDIA,Extension 1001,1001,mylocalip,1000,,,XML,default,opus,48000,0,opus,48000,0,srtp:sdes:
AES_CM_256_HMAC_SHA1_80,Freeswitch1Dev,1000@myserverip,,ACTIVE,Outbound Call,1000,SEND,81a423fc-41c8-11e5-ac4e-1b8671775759,Extension 1001,1001,Extension 1001,1001,mylocalip,1000,XML,default
As you can see for inbound call is used AES_CM_128_HMAC_SHA1_80 cipher and for outbound is used AES_CM_256_HMAC_SHA1_80.