Well you have to export the variables instead of setting them to apply to b-leg.
Like
<action application='export' data='nolocal:sip_secure_media=true'/>

On Jun 28, 2013 10:51 AM, "Peter Waldheim" <struwwelp@gmail.com> wrote:

Hi,

I'm trying to secure (SRTP) the b-leg for a call coming in via pstn (pri/freetdm).

For this I'm setting sip_secure_media and also trying sdp_secure_savp_only, but it seems freeswitch does not offer SAVP to my client (which in turn will refuse). SIP-to-SIP this works fine.

Here the the portion of the log where I would have expected to see SAVP in the sdp:

EXECUTE FreeTDM/1:5/21 bridge(sofia/external5090/21%10.1.1.12)

2013-06-28 09:20:10.800816 [DEBUG] switch_channel.c:1176 FreeTDM/1:5/21 EXPORTING[export_vars] [sip_secure_media]=[true] to event

2013-06-28 09:20:10.800816 [DEBUG] switch_channel.c:1176 FreeTDM/1:5/21 EXPORTING[export_vars] [dialed_extension]=[21] to event

2013-06-28 09:20:10.800816 [DEBUG] switch_channel.c:1176 FreeTDM/1:5/21 EXPORTING[export_vars] [sip_secure_media]=[true] to event

2013-06-28 09:20:10.800816 [DEBUG] switch_channel.c:1176 FreeTDM/1:5/21 EXPORTING[export_vars] [sdp_secure_savp_only]=[true] to event

2013-06-28 09:20:10.800816 [DEBUG] switch_ivr_originate.c:2050 Parsing global variables

2013-06-28 09:20:10.800816 [NOTICE] switch_channel.c:1030 New Channel sofia/external5090/21 [2b0bff7e-dfc3-11e2-b111-c96542f7174a]

2013-06-28 09:20:10.800816 [DEBUG] mod_sofia.c:4420 (sofia/external5090/21) State Change CS_NEW -> CS_INIT

2013-06-28 09:20:10.800816 [DEBUG] switch_core_session.c:1341 Send signal sofia/external5090/21 [BREAK]

2013-06-28 09:20:10.800816 [DEBUG] switch_core_state_machine.c:416 (sofia/external5090/21) Running State Change CS_INIT

2013-06-28 09:20:10.800816 [DEBUG] switch_core_state_machine.c:455 (sofia/external5090/21) State INIT

2013-06-28 09:20:10.800816 [DEBUG] mod_sofia.c:87 sofia/external5090/21 SOFIA INIT

2013-06-28 09:20:10.800816 [DEBUG] sofia_glue.c:1191 sip:21@client.ip.is.secret:49915;rinstance=e177370cb4131e9f;transport=tls Setting proxy route to sofia/external5090/21

2013-06-28 09:20:10.800816 [DEBUG] sofia_glue.c:1220 Local SDP:

v=0

o=FreeSWITCH 1372384350 1372384351 IN IP4 my.ip.is.secret

s=FreeSWITCH

c=IN IP4 my.ip.is.secret

t=0 0

m=audio 19660 RTP/AVP 8 3 101 13

a=rtpmap:101 telephone-event/8000

a=fmtp:101 0-16

a=ptime:20

a=sendrecv

m=video 20590 RTP/AVP 34 98

a=rtpmap:34 H263/90000

a=rtpmap:98 H264/90000

Any help with this would be greatly appreciated.

Regards

Peter

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org