Both the INVITE and the 200 OK have an a=crypto line. You need to know that only the rtp payload is encrypted, it is normal that you see the headers as-is. Mathieu Rene Avant-Garde Solutions Inc Office: + 1 (514) 664-1044 x100 Cell: +1 (514) 664-1044 x200 mrene@avgs.ca On 14-Dec-09, at 11:00 AM, Helmut Kuper wrote:

Hello,

today I found that my SRTP calls are only SRTP in one way (from snom to FS). The other direction is still RTP (at least if I believe wireshark). How can I get both directions using SRTP?

I do a simple call to an announcement in FS.

My SIP-profile has: <param name="inbound-late-negotiation" value="true"/>

I followed the document of FS Wiki: http://wiki.freeswitch.org/wiki/Secure_RTP

But it seems there is no ch_var like sip_has_crypto.

Is there a way to have both directions/streams per leg using SRTP?

Please find attached the pcap trace of my snom phone.

There you can see that snom offers crypto to FS. FS sends an OK with SRTP and RTP. When you look into the RTP data you see SRTP from snom to FS and RTP from FS to snom.

Any hints?

regards Helmut <trace.pcap>_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org