The tool from pjsip mentioned above requires the keys for the srtp decryption. Does the one you mention do it differently? On Friday, October 31, 2014, Ben Langfeld <ben@langfeld.co.uk> wrote:
Anthony, I think I'm not understanding your concern. Could you explain what you mean by logging the keys?
On 30 October 2014 21:01, Anthony Minessale <anthony.minessale@gmail.com <javascript:_e(%7B%7D,'cvml','anthony.minessale@gmail.com');>> wrote:
The bigger question is how to log the keys without compromising the point of why its all encrypted. It would take some careful consideration.
On Thu, Oct 30, 2014 at 12:32 PM, Ben Langfeld <ben@langfeld.co.uk <javascript:_e(%7B%7D,'cvml','ben@langfeld.co.uk');>> wrote:
rtpengine does indeed allow decryption of DTLS encrypted RTP. I use it in front of Asterisk 1.4 for exactly that (and ICE resolution).
On 30 October 2014 14:55, Carlos Ruiz Díaz <carlos.ruizdiaz@gmail.com <javascript:_e(%7B%7D,'cvml','carlos.ruizdiaz@gmail.com');>> wrote:
rtpengine doesn't provide any mean to do any kind of decryption. The keys, however, are easily accessible if you are willing to modify the original software to create such functionality.
Regards, Carlos
On Thu, Oct 30, 2014 at 10:47 AM, Anthony Minessale < anthony.minessale@gmail.com <javascript:_e(%7B%7D,'cvml','anthony.minessale@gmail.com');>> wrote:
This is a philosophical debate as to weather or not making the key available somewhere it can be obtained from nullifies the intended security.
On Thu, Oct 30, 2014 at 5:33 AM, Ben Langfeld <ben@langfeld.co.uk <javascript:_e(%7B%7D,'cvml','ben@langfeld.co.uk');>> wrote:
Look into rtpengine and perhaps Kamailio to control it.
On 30 October 2014 04:41, Varghese Paul <varghesepaul87@gmail.com <javascript:_e(%7B%7D,'cvml','varghesepaul87@gmail.com');>> wrote:
> Hi all, > > We are using freeswitch for handling webrtc calls and the > negotiation in DTLS mode. > > We are looking for a tool to decrypt the traffic between the webrtc > client and freeswitch server. I know there is already a tool pcaputils from > PJSIP for decrypting the SRTP traffic. Since we are using in DTLS mode we > can't use this. > > Can any one suggest any tool/method to decrypt the webrtc audio? > > Regards > > Varghese Paul > > > > _________________________________________________________________________ > Professional FreeSWITCH Consulting Services: > consulting@freeswitch.org > <javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');> > http://www.freeswitchsolutions.com > > Official FreeSWITCH Sites > http://www.freeswitch.org > http://confluence.freeswitch.org > http://www.cluecon.com > > FreeSWITCH-users mailing list > FreeSWITCH-users@lists.freeswitch.org > <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users > UNSUBSCRIBE: > http://lists.freeswitch.org/mailman/options/freeswitch-users > http://www.freeswitch.org >
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II ♬ @anthmfs ♬ @FreeSWITCH ♬
☞ http://freeswitch.org/ ☞ http://cluecon.com/ ☞ http://twitter.com/FreeSWITCH ☞ irc.freenode.net #freeswitch ☞ *http://freeswitch.org/g+ <http://freeswitch.org/g+>*
ClueCon Weekly Development Call ☎ sip:888@conference.freeswitch.org <javascript:_e(%7B%7D,'cvml','sip:888@conference.freeswitch.org');> ☎ +19193869900
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Carlos http://caruizdiaz.com
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II ♬ @anthmfs ♬ @FreeSWITCH ♬
☞ http://freeswitch.org/ ☞ http://cluecon.com/ ☞ http://twitter.com/FreeSWITCH ☞ irc.freenode.net #freeswitch ☞ *http://freeswitch.org/g+ <http://freeswitch.org/g+>*
ClueCon Weekly Development Call ☎ sip:888@conference.freeswitch.org <javascript:_e(%7B%7D,'cvml','sip:888@conference.freeswitch.org');> ☎ +19193869900
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II ♬ @anthmfs ♬ @FreeSWITCH ♬ ☞ http://freeswitch.org/ ☞ http://cluecon.com/ ☞ http://twitter.com/FreeSWITCH ☞ irc.freenode.net #freeswitch ☞ *http://freeswitch.org/g+ <http://freeswitch.org/g+>* ClueCon Weekly Development Call ☎ sip:888@conference.freeswitch.org ☎ +19193869900