I'm still struggling with this and cleaned up the whole configuration. The only SRTP-related setting now is the <action application='export' data='nolocal:sip_secure_media=true'/> before the bridging. The info app seems to reflect that by 2013-07-01 10:40:49.640784 [DEBUG] switch_channel.c:1176 FreeTDM/1:1/21 EXPORTING[export_vars][sip_secure_media]=[true] to event (Could anybody please confirm if this is the right place to look and this should trigger a secure b-leg?) But the "Local SDP" still has no crypto or savp in it - like in the original post. (It should show up here, right?) And eventually the connection gets denied by the client, which would only allow srtp connections. Does anybody have an idea, what could prevent the secure b-leg (if my assumptions are correct it seems I get a non-secure sdp despite having sip_secure_media set to true)? Thanks and regards Peter 2013/6/28 Peter Waldheim <struwwelp@gmail.com>
Thanks Daniel but I know and am already doing that. Would the debug output about "EXPORTING[export_vars]... to event" not confirm that working, or am I mistaken?
2013/6/28 Daniel Ivanov <sertys@gmail.com>
Well you have to export the variables instead of setting them to apply to b-leg. Like <action application='export' data='nolocal:sip_secure_media=true'/> On Jun 28, 2013 10:51 AM, "Peter Waldheim" <struwwelp@gmail.com> wrote:
Hi,
I'm trying to secure (SRTP) the b-leg for a call coming in via pstn (pri/freetdm). For this I'm setting sip_secure_media and also trying sdp_secure_savp_only, but it seems freeswitch does not offer SAVP to my client (which in turn will refuse). SIP-to-SIP this works fine.
Here the the portion of the log where I would have expected to see SAVP in the sdp:
EXECUTE FreeTDM/1:5/21 bridge(sofia/external5090/21%10.1.1.12) 2013-06-28 09:20:10.800816 [DEBUG] switch_channel.c:1176 FreeTDM/1:5/21 EXPORTING[export_vars] [sip_secure_media]=[true] to event 2013-06-28 09:20:10.800816 [DEBUG] switch_channel.c:1176 FreeTDM/1:5/21 EXPORTING[export_vars] [dialed_extension]=[21] to event 2013-06-28 09:20:10.800816 [DEBUG] switch_channel.c:1176 FreeTDM/1:5/21 EXPORTING[export_vars] [sip_secure_media]=[true] to event 2013-06-28 09:20:10.800816 [DEBUG] switch_channel.c:1176 FreeTDM/1:5/21 EXPORTING[export_vars] [sdp_secure_savp_only]=[true] to event 2013-06-28 09:20:10.800816 [DEBUG] switch_ivr_originate.c:2050 Parsing global variables 2013-06-28 09:20:10.800816 [NOTICE] switch_channel.c:1030 New Channel sofia/external5090/21 [2b0bff7e-dfc3-11e2-b111-c96542f7174a] 2013-06-28 09:20:10.800816 [DEBUG] mod_sofia.c:4420 (sofia/external5090/21) State Change CS_NEW -> CS_INIT 2013-06-28 09:20:10.800816 [DEBUG] switch_core_session.c:1341 Send signal sofia/external5090/21 [BREAK] 2013-06-28 09:20:10.800816 [DEBUG] switch_core_state_machine.c:416 (sofia/external5090/21) Running State Change CS_INIT 2013-06-28 09:20:10.800816 [DEBUG] switch_core_state_machine.c:455 (sofia/external5090/21) State INIT 2013-06-28 09:20:10.800816 [DEBUG] mod_sofia.c:87 sofia/external5090/21 SOFIA INIT 2013-06-28 09:20:10.800816 [DEBUG] sofia_glue.c:1191 sip:21@client.ip.is.secret:49915;rinstance=e177370cb4131e9f;transport=tls Setting proxy route to sofia/external5090/21 2013-06-28 09:20:10.800816 [DEBUG] sofia_glue.c:1220 Local SDP: v=0 o=FreeSWITCH 1372384350 1372384351 IN IP4 my.ip.is.secret s=FreeSWITCH c=IN IP4 my.ip.is.secret t=0 0 m=audio 19660 RTP/AVP 8 3 101 13 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=ptime:20 a=sendrecv m=video 20590 RTP/AVP 34 98 a=rtpmap:34 H263/90000 a=rtpmap:98 H264/90000
Any help with this would be greatly appreciated.
Regards Peter
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org