Re: [Freeswitch-users] TLS and SRTP between 2 Freeswitch servers
Hello Brian, any idea, when we can expect a fix for that? Best regards Peter Brian West schrieb:
I just realized this is a gateway call... that will have to be fixed.
/b
On Aug 27, 2008, at 3:24 PM, Peter P GMX wrote:
Hello Brian,
I tried to set ;transport=tls on the sofia string and it showed me an invalid gateway
So I checked the gateway: server1 is not registered on server2 freeswitch@freeswitch> sofia status gateway freeswitch2 API CALL [sofia(status gateway freeswitch2)] output: Invalid Gateway!
When I set the register-transport parameter back from tls to udp on server1 I get freeswitch@freeswitch> sofia status gateway freeswitch2 API CALL [sofia(status gateway freeswitch2)] output: = = = = = = = = = = = = = = = = = = = = = = = = = = = ====================================================================== Name freeswitch2 Scheme Digest Realm xxx.xxx.xxx.56 Username 1007 Password yes From <sip:1007@xxx.xxx.xxx.56;transport=udp> Contact <sip:1007@xxx.xxx.xxx.55;transport=udp> To sip:1007@xxx.xxx.xxx.56 Proxy sip:xxx.xxx.xxx.56 Context default Expires 3600 Freq 3600 Ping 0 PingFreq 0 State REGED Status UP ============================== I ngrepped the traffic between server1 and server2 and could see that there was traffic on port 5060.
Switching back to TLS it didn't work again. <param name="register-transport" value="tls"/> I ngrepped the traffic between server1 and server2 on all ports and could see that there was absolutely no traffic between them.
So, as soon as I enter tls instead of upd, the traffic stops. Any hint?
Best regards Peter
Brian West schrieb:
You Append ;transport=tls on the sofia string which is much easier.
/b
On Aug 26, 2008, at 4:51 PM, Peter P GMX wrote:
I have tried to set this up, but I need some help to get TLS to work
What does work: I setup 2 freeswitch servers with IP xxx.xxx.xxx.55 and xxx.xxx.xxx. 56. They are connected via UDP/Port 5060 (SIP) I have 2 snom phones connected to the servers via TLS (1002@ xxx.xxx.xxx.55 and 1003@ xxx.xxx.xxx.56) Server1 registers to Server2 as UA 1007 I can dial "8001" on 1002@server and reach 1003@server2 and make a call
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Brian West sip:brian@freeswitch.org
Open a Jira on this. SO we can track it at jira.freeswitch.org i'm not sure what is required but it should work like it is. The transport=tls won't work on gateways because you set the transport in the gateway config. /b On Aug 29, 2008, at 4:38 PM, Peter P GMX wrote:
Hello Brian,
any idea, when we can expect a fix for that?
Best regards Peter
Brian West sip:brian@freeswitch.org
Hello Brian, did I get it right? There is another way to have TLS and SRTP working between 2 Freeswitch servers not using a gateway? Is there another way to forward the call with TLS/SRTP? Btw. I have opened a jira on this. http://jira.freeswitch.org/browse/FSCORE-178 Best regards Peter Brian West schrieb:
Open a Jira on this. SO we can track it at jira.freeswitch.org i'm not sure what is required but it should work like it is. The transport=tls won't work on gateways because you set the transport in the gateway config.
/b
On Aug 29, 2008, at 4:38 PM, Peter P GMX wrote:
Hello Brian,
any idea, when we can expect a fix for that?
Best regards Peter
Brian West sip:brian@freeswitch.org
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Please try what I put on that jira and let me know if that works.... I'll update the documentation once its verified. /b On Aug 29, 2008, at 5:23 PM, Peter P GMX wrote:
Hello Brian,
did I get it right? There is another way to have TLS and SRTP working between 2 Freeswitch servers not using a gateway? Is there another way to forward the call with TLS/SRTP?
Btw. I have opened a jira on this. http://jira.freeswitch.org/browse/FSCORE-178
Best regards Peter
Brian West schrieb:
Open a Jira on this. SO we can track it at jira.freeswitch.org i'm not sure what is required but it should work like it is. The transport=tls won't work on gateways because you set the transport in the gateway config.
/b
On Aug 29, 2008, at 4:38 PM, Peter P GMX wrote:
Hello Brian,
any idea, when we can expect a fix for that?
Best regards Peter
Brian West sip:brian@freeswitch.org
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Brian West sip:brian@freeswitch.org
Peter, Now that you have this working can you work up a page on the wiki that explains this in detail? Also forward me a copy of your gateway config so I can update the in tree examples with more detailed information. /b On Aug 29, 2008, at 5:23 PM, Peter P GMX wrote:
Hello Brian,
did I get it right? There is another way to have TLS and SRTP working between 2 Freeswitch servers not using a gateway? Is there another way to forward the call with TLS/SRTP?
Btw. I have opened a jira on this. http://jira.freeswitch.org/browse/FSCORE-178
Best regards Peter
participants (2)
-
Brian West
-
Peter P GMX