HI All, Has anyone got some recommendations on which ATA to buy that supports TLS and SRTP? Thanks!
sipura/linksys look in ebay. On Sun, Nov 22, 2009 at 5:35 AM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
HI All,
Has anyone got some recommendations on which ATA to buy that supports TLS and SRTP?
Thanks!
-- ------------ Itamar Reis Peixoto e-mail/msn/google talk/sip: itamar@ispbrasil.com.br skype: itamarjp icq: 81053601 +55 11 4063 5033 +55 34 3221 8599
Do LInksys devices support TLS and SRTP that FS supports? 3102 at least doesn't according to this post http://osdir.com/ml/telephony.freeswitch.user/2008-08/msg00904.html On Sun, Nov 22, 2009 at 7:20 PM, Itamar Reis Peixoto <itamar@ispbrasil.com.br> wrote:
sipura/linksys
look in ebay.
On Sun, Nov 22, 2009 at 5:35 AM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
HI All,
Has anyone got some recommendations on which ATA to buy that supports TLS and SRTP?
Thanks!
-- ------------
Itamar Reis Peixoto
e-mail/msn/google talk/sip: itamar@ispbrasil.com.br skype: itamarjp icq: 81053601 +55 11 4063 5033 +55 34 3221 8599
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
it's support SRTP On Sun, Nov 22, 2009 at 7:21 AM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Do LInksys devices support TLS and SRTP that FS supports? 3102 at least doesn't according to this post
-- ------------ Itamar Reis Peixoto e-mail/msn/google talk/sip: itamar@ispbrasil.com.br skype: itamarjp icq: 81053601 +55 11 4063 5033 +55 34 3221 8599
Hi there Itamar, Does the SPA3102 support TLS or only SRTP? And what about Brians comments that 'It uses a sick twisted method of doing SRTP'. Do you have it working using SRTP together with FS? What about TLS? Otherwise are there any other ATA's that support TLS & SRTP? On Sun, Nov 22, 2009 at 8:41 PM, Itamar Reis Peixoto <itamar@ispbrasil.com.br> wrote:
it's support SRTP
On Sun, Nov 22, 2009 at 7:21 AM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Do LInksys devices support TLS and SRTP that FS supports? 3102 at least doesn't according to this post
-- ------------
Itamar Reis Peixoto
e-mail/msn/google talk/sip: itamar@ispbrasil.com.br skype: itamarjp icq: 81053601 +55 11 4063 5033 +55 34 3221 8599
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Does the SPA3102 support TLS or only SRTP?
I don't know, but supporting only SRTP would be ridiculous, since the keys would then be transmitted in the clear and therefore amenable to interception. SRTP requires the SIP channel to be encrypted by TLS in order to be secure. ZRTP, on the other hand, doesn't have this limitation: it works entirely in RTP. I would be rather surprised were a hardware manufacturer to implement SRTP without TLS for the SIP traffic. On the other hand, we've seen often in this forum that some manufacturers are really clueless...
The only ATA mentioned on the WIKI that supports TLS/SRTP is the Grandstream HandyTone 503. But, again according to the wiki, that doesn't seem to behave to well with TLS ... On Wed, Nov 25, 2009 at 7:14 PM, Jason White <jason@jasonjgw.net> wrote:
Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Does the SPA3102 support TLS or only SRTP?
I don't know, but supporting only SRTP would be ridiculous, since the keys would then be transmitted in the clear and therefore amenable to interception. SRTP requires the SIP channel to be encrypted by TLS in order to be secure. ZRTP, on the other hand, doesn't have this limitation: it works entirely in RTP.
I would be rather surprised were a hardware manufacturer to implement SRTP without TLS for the SIP traffic. On the other hand, we've seen often in this forum that some manufacturers are really clueless...
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Check out the Linksys SPA2102 On Wed, Nov 25, 2009 at 3:34 AM, Mark Campbell-Smith < mcampbellsmith@gmail.com> wrote:
The only ATA mentioned on the WIKI that supports TLS/SRTP is the Grandstream HandyTone 503. But, again according to the wiki, that doesn't seem to behave to well with TLS ...
On Wed, Nov 25, 2009 at 7:14 PM, Jason White <jason@jasonjgw.net> wrote:
Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Does the SPA3102 support TLS or only SRTP?
I don't know, but supporting only SRTP would be ridiculous, since the keys would then be transmitted in the clear and therefore amenable to interception. SRTP requires the SIP channel to be encrypted by TLS in order to be secure. ZRTP, on the other hand, doesn't have this limitation: it works entirely in RTP.
I would be rather surprised were a hardware manufacturer to implement SRTP without TLS for the SIP traffic. On the other hand, we've seen often in this forum that some manufacturers are really clueless...
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi All, I managed to borrow a SPA3102 with the latest firmware and have got it to register using TLS, but I am still struggling with SRTP. Has anyone managed to get SRTP working with the Linksys devices and if so, can they direct me on how to do this. I have generated a mini-certificates and SRTP Private Key using the gen-mc tool found at http://www.megajournal.ru/journal/users_data/11049/msg_files/24120/gen-mc.c-.... However, when ever I initiate a call from the SPA, I can see that the call is not encrypted. Help appreciated. Thanks! On Sat, Nov 28, 2009 at 6:31 AM, eman <eman@chabotel.com> wrote:
Check out the Linksys SPA2102
On Wed, Nov 25, 2009 at 3:34 AM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
The only ATA mentioned on the WIKI that supports TLS/SRTP is the Grandstream HandyTone 503. But, again according to the wiki, that doesn't seem to behave to well with TLS ...
On Wed, Nov 25, 2009 at 7:14 PM, Jason White <jason@jasonjgw.net> wrote:
Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Does the SPA3102 support TLS or only SRTP?
I don't know, but supporting only SRTP would be ridiculous, since the keys would then be transmitted in the clear and therefore amenable to interception. SRTP requires the SIP channel to be encrypted by TLS in order to be secure. ZRTP, on the other hand, doesn't have this limitation: it works entirely in RTP.
I would be rather surprised were a hardware manufacturer to implement SRTP without TLS for the SIP traffic. On the other hand, we've seen often in this forum that some manufacturers are really clueless...
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
you can try xlite too. On Thu, Dec 3, 2009 at 8:05 PM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Hi All,
I managed to borrow a SPA3102 with the latest firmware and have got it to register using TLS, but I am still struggling with SRTP. Has anyone managed to get SRTP working with the Linksys devices and if so, can they direct me on how to do this.
I have generated a mini-certificates and SRTP Private Key using the gen-mc tool found at http://www.megajournal.ru/journal/users_data/11049/msg_files/24120/gen-mc.c-.... However, when ever I initiate a call from the SPA, I can see that the call is not encrypted.
Help appreciated.
Thanks!
------------ Itamar Reis Peixoto e-mail/msn/google talk/sip: itamar@ispbrasil.com.br skype: itamarjp icq: 81053601 +55 11 4063 5033 +55 34 3221 8599
AFAIK, the Cisco/Linksys SPA series ATAs do not support SDES key exchange to appropriately support SRTP and FreeSWITCH. They do their proprietary Sipura key exchange only, not sure if Cisco plans on upgrading the firmware to ever support SDES on the ATAs. They added support for SDES to their IP Phones about 1 year ago, but nothing has happened with the ATAs as of yet. Gabe On Thu, Dec 3, 2009 at 2:05 PM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Hi All,
I managed to borrow a SPA3102 with the latest firmware and have got it to register using TLS, but I am still struggling with SRTP. Has anyone managed to get SRTP working with the Linksys devices and if so, can they direct me on how to do this.
I have generated a mini-certificates and SRTP Private Key using the gen-mc tool found at http://www.megajournal.ru/journal/users_data/11049/msg_files/24120/gen-mc.c-.... However, when ever I initiate a call from the SPA, I can see that the call is not encrypted.
Help appreciated.
Thanks!
On Sat, Nov 28, 2009 at 6:31 AM, eman <eman@chabotel.com> wrote:
Check out the Linksys SPA2102
On Wed, Nov 25, 2009 at 3:34 AM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
The only ATA mentioned on the WIKI that supports TLS/SRTP is the Grandstream HandyTone 503. But, again according to the wiki, that doesn't seem to behave to well with TLS ...
On Wed, Nov 25, 2009 at 7:14 PM, Jason White <jason@jasonjgw.net> wrote:
Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Does the SPA3102 support TLS or only SRTP?
I don't know, but supporting only SRTP would be ridiculous, since the keys would then be transmitted in the clear and therefore amenable to interception. SRTP requires the SIP channel to be encrypted by TLS in order to be secure. ZRTP, on the other hand, doesn't have this limitation: it works entirely in RTP.
I would be rather surprised were a hardware manufacturer to implement SRTP without TLS for the SIP traffic. On the other hand, we've seen often in this forum that some manufacturers are really clueless...
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Quote: Cisco/Linksys SPA series ATAs do not support SDES key exchange to appropriately support SRTP and FreeSWITCH I'll check with Cisco regarding their implementation then and try to find out when/if they will support standard SRTP encryption. So, back to my origianal question then. Are there any ATA's that support TLS AND SRTP with FreeSwitch? On Fri, Dec 4, 2009 at 9:17 AM, Gabriel Kuri <gkuri@ieee.org> wrote:
AFAIK, the Cisco/Linksys SPA series ATAs do not support SDES key exchange to appropriately support SRTP and FreeSWITCH. They do their proprietary Sipura key exchange only, not sure if Cisco plans on upgrading the firmware to ever support SDES on the ATAs. They added support for SDES to their IP Phones about 1 year ago, but nothing has happened with the ATAs as of yet.
Gabe
On Thu, Dec 3, 2009 at 2:05 PM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Hi All,
I managed to borrow a SPA3102 with the latest firmware and have got it to register using TLS, but I am still struggling with SRTP. Has anyone managed to get SRTP working with the Linksys devices and if so, can they direct me on how to do this.
I have generated a mini-certificates and SRTP Private Key using the gen-mc tool found at http://www.megajournal.ru/journal/users_data/11049/msg_files/24120/gen-mc.c-.... However, when ever I initiate a call from the SPA, I can see that the call is not encrypted.
Help appreciated.
Thanks!
On Sat, Nov 28, 2009 at 6:31 AM, eman <eman@chabotel.com> wrote:
Check out the Linksys SPA2102
On Wed, Nov 25, 2009 at 3:34 AM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
The only ATA mentioned on the WIKI that supports TLS/SRTP is the Grandstream HandyTone 503. But, again according to the wiki, that doesn't seem to behave to well with TLS ...
On Wed, Nov 25, 2009 at 7:14 PM, Jason White <jason@jasonjgw.net> wrote:
Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Does the SPA3102 support TLS or only SRTP?
I don't know, but supporting only SRTP would be ridiculous, since the keys would then be transmitted in the clear and therefore amenable to interception. SRTP requires the SIP channel to be encrypted by TLS in order to be secure. ZRTP, on the other hand, doesn't have this limitation: it works entirely in RTP.
I would be rather surprised were a hardware manufacturer to implement SRTP without TLS for the SIP traffic. On the other hand, we've seen often in this forum that some manufacturers are really clueless...
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
The ATAs I'm aware that claim support for TLS and SRTP w/ SDES are the Grandstream and Mediatrix devices (although I've never tried either one with FreeSWITCH). I've personally never had any good experience with the Grandstream ATAs. The Mediatrix ATAs are OK devices, but I've never personally tested them with SRTP w/SDES and FreeSWITCH, but supposedly they support it (so says their marketing material and docs). I'd see if Cisco has any plans to add support for it to the ATAs. Next time I see our Cisco SE, I'll try to poke him about it. Gabe On Thu, Dec 3, 2009 at 2:34 PM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Quote: Cisco/Linksys SPA series ATAs do not support SDES key exchange to appropriately support SRTP and FreeSWITCH
I'll check with Cisco regarding their implementation then and try to find out when/if they will support standard SRTP encryption.
So, back to my origianal question then. Are there any ATA's that support TLS AND SRTP with FreeSwitch?
On Fri, Dec 4, 2009 at 9:17 AM, Gabriel Kuri <gkuri@ieee.org> wrote:
AFAIK, the Cisco/Linksys SPA series ATAs do not support SDES key exchange to appropriately support SRTP and FreeSWITCH. They do their proprietary Sipura key exchange only, not sure if Cisco plans on upgrading the firmware to ever support SDES on the ATAs. They added support for SDES to their IP Phones about 1 year ago, but nothing has happened with the ATAs as of yet.
Gabe
On Thu, Dec 3, 2009 at 2:05 PM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Hi All,
I managed to borrow a SPA3102 with the latest firmware and have got it to register using TLS, but I am still struggling with SRTP. Has anyone managed to get SRTP working with the Linksys devices and if so, can they direct me on how to do this.
I have generated a mini-certificates and SRTP Private Key using the gen-mc tool found at http://www.megajournal.ru/journal/users_data/11049/msg_files/24120/gen-mc.c-.... However, when ever I initiate a call from the SPA, I can see that the call is not encrypted.
Help appreciated.
Thanks!
On Sat, Nov 28, 2009 at 6:31 AM, eman <eman@chabotel.com> wrote:
Check out the Linksys SPA2102
On Wed, Nov 25, 2009 at 3:34 AM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
The only ATA mentioned on the WIKI that supports TLS/SRTP is the Grandstream HandyTone 503. But, again according to the wiki, that doesn't seem to behave to well with TLS ...
On Wed, Nov 25, 2009 at 7:14 PM, Jason White <jason@jasonjgw.net> wrote:
Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote: > Does the SPA3102 support TLS or only SRTP?
I don't know, but supporting only SRTP would be ridiculous, since the keys would then be transmitted in the clear and therefore amenable to interception. SRTP requires the SIP channel to be encrypted by TLS in order to be secure. ZRTP, on the other hand, doesn't have this limitation: it works entirely in RTP.
I would be rather surprised were a hardware manufacturer to implement SRTP without TLS for the SIP traffic. On the other hand, we've seen often in this forum that some manufacturers are really clueless...
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Cheers Gabriel.. thanks for the information. I'll look at the Mediatrix ATA's as an alternative - has anyone had experience with those and TLS/SRTP? On Fri, Dec 4, 2009 at 10:25 AM, Gabriel Kuri <gkuri@ieee.org> wrote:
The ATAs I'm aware that claim support for TLS and SRTP w/ SDES are the Grandstream and Mediatrix devices (although I've never tried either one with FreeSWITCH).
I've personally never had any good experience with the Grandstream ATAs. The Mediatrix ATAs are OK devices, but I've never personally tested them with SRTP w/SDES and FreeSWITCH, but supposedly they support it (so says their marketing material and docs).
I'd see if Cisco has any plans to add support for it to the ATAs. Next time I see our Cisco SE, I'll try to poke him about it.
Gabe
On Thu, Dec 3, 2009 at 2:34 PM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Quote: Cisco/Linksys SPA series ATAs do not support SDES key exchange to appropriately support SRTP and FreeSWITCH
I'll check with Cisco regarding their implementation then and try to find out when/if they will support standard SRTP encryption.
So, back to my origianal question then. Are there any ATA's that support TLS AND SRTP with FreeSwitch?
On Fri, Dec 4, 2009 at 9:17 AM, Gabriel Kuri <gkuri@ieee.org> wrote:
AFAIK, the Cisco/Linksys SPA series ATAs do not support SDES key exchange to appropriately support SRTP and FreeSWITCH. They do their proprietary Sipura key exchange only, not sure if Cisco plans on upgrading the firmware to ever support SDES on the ATAs. They added support for SDES to their IP Phones about 1 year ago, but nothing has happened with the ATAs as of yet.
Gabe
On Thu, Dec 3, 2009 at 2:05 PM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Hi All,
I managed to borrow a SPA3102 with the latest firmware and have got it to register using TLS, but I am still struggling with SRTP. Has anyone managed to get SRTP working with the Linksys devices and if so, can they direct me on how to do this.
I have generated a mini-certificates and SRTP Private Key using the gen-mc tool found at http://www.megajournal.ru/journal/users_data/11049/msg_files/24120/gen-mc.c-.... However, when ever I initiate a call from the SPA, I can see that the call is not encrypted.
Help appreciated.
Thanks!
On Sat, Nov 28, 2009 at 6:31 AM, eman <eman@chabotel.com> wrote:
Check out the Linksys SPA2102
On Wed, Nov 25, 2009 at 3:34 AM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
The only ATA mentioned on the WIKI that supports TLS/SRTP is the Grandstream HandyTone 503. But, again according to the wiki, that doesn't seem to behave to well with TLS ...
On Wed, Nov 25, 2009 at 7:14 PM, Jason White <jason@jasonjgw.net> wrote: > Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote: >> Does the SPA3102 support TLS or only SRTP? > > I don't know, but supporting only SRTP would be ridiculous, since the > keys > would then be transmitted in the clear and therefore amenable to > interception. > SRTP requires the SIP channel to be encrypted by TLS in order to be > secure. > ZRTP, on the other hand, doesn't have this limitation: it works entirely > in > RTP. > > I would be rather surprised were a hardware manufacturer to implement > SRTP > without TLS for the SIP traffic. On the other hand, we've seen often in > this > forum that some manufacturers are really clueless... > > > _______________________________________________ > FreeSWITCH-users mailing list > FreeSWITCH-users@lists.freeswitch.org > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users > http://www.freeswitch.org >
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hello, I have AudioCodes MP and Vega ATA adapters. They both support SRTP; they should support TLS also (will try it next week; up to now I preffered to not use TLS so I can sniff the traffic and debug things). Regards, __Yehavi: 2009/12/4 Mark Campbell-Smith <mcampbellsmith@gmail.com>
Cheers Gabriel.. thanks for the information.
I'll look at the Mediatrix ATA's as an alternative - has anyone had experience with those and TLS/SRTP?
On Fri, Dec 4, 2009 at 10:25 AM, Gabriel Kuri <gkuri@ieee.org> wrote:
The ATAs I'm aware that claim support for TLS and SRTP w/ SDES are the Grandstream and Mediatrix devices (although I've never tried either one with FreeSWITCH).
I've personally never had any good experience with the Grandstream ATAs. The Mediatrix ATAs are OK devices, but I've never personally tested them with SRTP w/SDES and FreeSWITCH, but supposedly they support it (so says their marketing material and docs).
I'd see if Cisco has any plans to add support for it to the ATAs. Next time I see our Cisco SE, I'll try to poke him about it.
Gabe
On Thu, Dec 3, 2009 at 2:34 PM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Quote: Cisco/Linksys SPA series ATAs do not support SDES key exchange to appropriately support SRTP and FreeSWITCH
I'll check with Cisco regarding their implementation then and try to find out when/if they will support standard SRTP encryption.
So, back to my origianal question then. Are there any ATA's that support TLS AND SRTP with FreeSwitch?
On Fri, Dec 4, 2009 at 9:17 AM, Gabriel Kuri <gkuri@ieee.org> wrote:
AFAIK, the Cisco/Linksys SPA series ATAs do not support SDES key exchange to appropriately support SRTP and FreeSWITCH. They do their proprietary Sipura key exchange only, not sure if Cisco plans on upgrading the firmware to ever support SDES on the ATAs. They added support for SDES to their IP Phones about 1 year ago, but nothing has happened with the ATAs as of yet.
Gabe
On Thu, Dec 3, 2009 at 2:05 PM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Hi All,
I managed to borrow a SPA3102 with the latest firmware and have got it to register using TLS, but I am still struggling with SRTP. Has anyone managed to get SRTP working with the Linksys devices and if so, can they direct me on how to do this.
I have generated a mini-certificates and SRTP Private Key using the gen-mc tool found at
http://www.megajournal.ru/journal/users_data/11049/msg_files/24120/gen-mc.c-... .
However, when ever I initiate a call from the SPA, I can see that the call is not encrypted.
Help appreciated.
Thanks!
On Sat, Nov 28, 2009 at 6:31 AM, eman <eman@chabotel.com> wrote:
Check out the Linksys SPA2102
On Wed, Nov 25, 2009 at 3:34 AM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote: > > The only ATA mentioned on the WIKI that supports TLS/SRTP is the > Grandstream HandyTone 503. But, again according to the wiki, that > doesn't seem to behave to well with TLS ... > > On Wed, Nov 25, 2009 at 7:14 PM, Jason White <jason@jasonjgw.net> wrote: > > Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote: > >> Does the SPA3102 support TLS or only SRTP? > > > > I don't know, but supporting only SRTP would be ridiculous, since the > > keys > > would then be transmitted in the clear and therefore amenable to > > interception. > > SRTP requires the SIP channel to be encrypted by TLS in order to be > > secure. > > ZRTP, on the other hand, doesn't have this limitation: it works entirely > > in > > RTP. > > > > I would be rather surprised were a hardware manufacturer to implement > > SRTP > > without TLS for the SIP traffic. On the other hand, we've seen often in > > this > > forum that some manufacturers are really clueless... > > > > > > _______________________________________________ > > FreeSWITCH-users mailing list > > FreeSWITCH-users@lists.freeswitch.org > > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users > > UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users > > http://www.freeswitch.org > > > > _______________________________________________ > FreeSWITCH-users mailing list > FreeSWITCH-users@lists.freeswitch.org > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users > UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users > http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thanks Yehavi, I would be very interested to find out how your test goes... can you report back after you have tested it? Thanks! On Fri, Dec 4, 2009 at 3:38 PM, Yehavi Bourvine <yehavi.bourvine@gmail.com> wrote:
Hello,
I have AudioCodes MP and Vega ATA adapters. They both support SRTP; they should support TLS also (will try it next week; up to now I preffered to not use TLS so I can sniff the traffic and debug things).
Regards, __Yehavi:
2009/12/4 Mark Campbell-Smith <mcampbellsmith@gmail.com>
Cheers Gabriel.. thanks for the information.
I'll look at the Mediatrix ATA's as an alternative - has anyone had experience with those and TLS/SRTP?
On Fri, Dec 4, 2009 at 10:25 AM, Gabriel Kuri <gkuri@ieee.org> wrote:
The ATAs I'm aware that claim support for TLS and SRTP w/ SDES are the Grandstream and Mediatrix devices (although I've never tried either one with FreeSWITCH).
I've personally never had any good experience with the Grandstream ATAs. The Mediatrix ATAs are OK devices, but I've never personally tested them with SRTP w/SDES and FreeSWITCH, but supposedly they support it (so says their marketing material and docs).
I'd see if Cisco has any plans to add support for it to the ATAs. Next time I see our Cisco SE, I'll try to poke him about it.
Gabe
On Thu, Dec 3, 2009 at 2:34 PM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Quote: Cisco/Linksys SPA series ATAs do not support SDES key exchange to appropriately support SRTP and FreeSWITCH
I'll check with Cisco regarding their implementation then and try to find out when/if they will support standard SRTP encryption.
So, back to my origianal question then. Are there any ATA's that support TLS AND SRTP with FreeSwitch?
On Fri, Dec 4, 2009 at 9:17 AM, Gabriel Kuri <gkuri@ieee.org> wrote:
AFAIK, the Cisco/Linksys SPA series ATAs do not support SDES key exchange to appropriately support SRTP and FreeSWITCH. They do their proprietary Sipura key exchange only, not sure if Cisco plans on upgrading the firmware to ever support SDES on the ATAs. They added support for SDES to their IP Phones about 1 year ago, but nothing has happened with the ATAs as of yet.
Gabe
On Thu, Dec 3, 2009 at 2:05 PM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Hi All,
I managed to borrow a SPA3102 with the latest firmware and have got it to register using TLS, but I am still struggling with SRTP. Has anyone managed to get SRTP working with the Linksys devices and if so, can they direct me on how to do this.
I have generated a mini-certificates and SRTP Private Key using the gen-mc tool found at
http://www.megajournal.ru/journal/users_data/11049/msg_files/24120/gen-mc.c-.... However, when ever I initiate a call from the SPA, I can see that the call is not encrypted.
Help appreciated.
Thanks!
On Sat, Nov 28, 2009 at 6:31 AM, eman <eman@chabotel.com> wrote: > Check out the Linksys SPA2102 > > On Wed, Nov 25, 2009 at 3:34 AM, Mark Campbell-Smith > <mcampbellsmith@gmail.com> wrote: >> >> The only ATA mentioned on the WIKI that supports TLS/SRTP is the >> Grandstream HandyTone 503. But, again according to the wiki, that >> doesn't seem to behave to well with TLS ... >> >> On Wed, Nov 25, 2009 at 7:14 PM, Jason White <jason@jasonjgw.net> >> wrote: >> > Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote: >> >> Does the SPA3102 support TLS or only SRTP? >> > >> > I don't know, but supporting only SRTP would be ridiculous, since >> > the >> > keys >> > would then be transmitted in the clear and therefore amenable to >> > interception. >> > SRTP requires the SIP channel to be encrypted by TLS in order to >> > be >> > secure. >> > ZRTP, on the other hand, doesn't have this limitation: it works >> > entirely >> > in >> > RTP. >> > >> > I would be rather surprised were a hardware manufacturer to >> > implement >> > SRTP >> > without TLS for the SIP traffic. On the other hand, we've seen >> > often in >> > this >> > forum that some manufacturers are really clueless... >> > >> > >> > _______________________________________________ >> > FreeSWITCH-users mailing list >> > FreeSWITCH-users@lists.freeswitch.org >> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users >> > >> > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users >> > http://www.freeswitch.org >> > >> >> _______________________________________________ >> FreeSWITCH-users mailing list >> FreeSWITCH-users@lists.freeswitch.org >> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users >> >> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users >> http://www.freeswitch.org > > > _______________________________________________ > FreeSWITCH-users mailing list > FreeSWITCH-users@lists.freeswitch.org > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users > > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users > http://www.freeswitch.org > >
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
I'll report when I am done. So far I've enabled only SRTP and both support it. __Yehavi: 2009/12/4 Mark Campbell-Smith <mcampbellsmith@gmail.com>
Thanks Yehavi,
I would be very interested to find out how your test goes... can you report back after you have tested it?
Thanks!
On Fri, Dec 4, 2009 at 3:38 PM, Yehavi Bourvine <yehavi.bourvine@gmail.com> wrote:
Hello,
I have AudioCodes MP and Vega ATA adapters. They both support SRTP; they should support TLS also (will try it next week; up to now I preffered to not use TLS so I can sniff the traffic and debug things).
Regards, __Yehavi:
2009/12/4 Mark Campbell-Smith <mcampbellsmith@gmail.com>
Cheers Gabriel.. thanks for the information.
I'll look at the Mediatrix ATA's as an alternative - has anyone had experience with those and TLS/SRTP?
On Fri, Dec 4, 2009 at 10:25 AM, Gabriel Kuri <gkuri@ieee.org> wrote:
The ATAs I'm aware that claim support for TLS and SRTP w/ SDES are the Grandstream and Mediatrix devices (although I've never tried either one with FreeSWITCH).
I've personally never had any good experience with the Grandstream ATAs. The Mediatrix ATAs are OK devices, but I've never personally tested them with SRTP w/SDES and FreeSWITCH, but supposedly they support it (so says their marketing material and docs).
I'd see if Cisco has any plans to add support for it to the ATAs. Next time I see our Cisco SE, I'll try to poke him about it.
Gabe
On Thu, Dec 3, 2009 at 2:34 PM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Quote: Cisco/Linksys SPA series ATAs do not support SDES key exchange to appropriately support SRTP and FreeSWITCH
I'll check with Cisco regarding their implementation then and try to find out when/if they will support standard SRTP encryption.
So, back to my origianal question then. Are there any ATA's that support TLS AND SRTP with FreeSwitch?
On Fri, Dec 4, 2009 at 9:17 AM, Gabriel Kuri <gkuri@ieee.org> wrote:
AFAIK, the Cisco/Linksys SPA series ATAs do not support SDES key exchange to appropriately support SRTP and FreeSWITCH. They do their proprietary Sipura key exchange only, not sure if Cisco plans on upgrading the firmware to ever support SDES on the ATAs. They added support for SDES to their IP Phones about 1 year ago, but nothing
has
happened with the ATAs as of yet.
Gabe
On Thu, Dec 3, 2009 at 2:05 PM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote: > Hi All, > > I managed to borrow a SPA3102 with the latest firmware and have got > it > to register using TLS, but I am still struggling with SRTP. Has > anyone managed to get SRTP working with the Linksys devices and if > so, > can they direct me on how to do this. > > I have generated a mini-certificates and SRTP Private Key using the > gen-mc tool found at > > http://www.megajournal.ru/journal/users_data/11049/msg_files/24120/gen-mc.c-... . > However, when ever I initiate a call from the SPA, I can see that > the > call is not encrypted. > > Help appreciated. > > Thanks! > > > On Sat, Nov 28, 2009 at 6:31 AM, eman <eman@chabotel.com> wrote: >> Check out the Linksys SPA2102 >> >> On Wed, Nov 25, 2009 at 3:34 AM, Mark Campbell-Smith >> <mcampbellsmith@gmail.com> wrote: >>> >>> The only ATA mentioned on the WIKI that supports TLS/SRTP is the >>> Grandstream HandyTone 503. But, again according to the wiki, that >>> doesn't seem to behave to well with TLS ... >>> >>> On Wed, Nov 25, 2009 at 7:14 PM, Jason White <jason@jasonjgw.net
>>> wrote: >>> > Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote: >>> >> Does the SPA3102 support TLS or only SRTP? >>> > >>> > I don't know, but supporting only SRTP would be ridiculous, since >>> > the >>> > keys >>> > would then be transmitted in the clear and therefore amenable to >>> > interception. >>> > SRTP requires the SIP channel to be encrypted by TLS in order to >>> > be >>> > secure. >>> > ZRTP, on the other hand, doesn't have this limitation: it works >>> > entirely >>> > in >>> > RTP. >>> > >>> > I would be rather surprised were a hardware manufacturer to >>> > implement >>> > SRTP >>> > without TLS for the SIP traffic. On the other hand, we've seen >>> > often in >>> > this >>> > forum that some manufacturers are really clueless... >>> > >>> > >>> > _______________________________________________ >>> > FreeSWITCH-users mailing list >>> > FreeSWITCH-users@lists.freeswitch.org >>> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users >>> > >>> > UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users >>> > http://www.freeswitch.org >>> > >>> >>> _______________________________________________ >>> FreeSWITCH-users mailing list >>> FreeSWITCH-users@lists.freeswitch.org >>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users >>> >>> UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users >>> http://www.freeswitch.org >> >> >> _______________________________________________ >> FreeSWITCH-users mailing list >> FreeSWITCH-users@lists.freeswitch.org >> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users >> >> UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users >> http://www.freeswitch.org >> >> > > _______________________________________________ > FreeSWITCH-users mailing list > FreeSWITCH-users@lists.freeswitch.org > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users > > UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users > http://www.freeswitch.org >
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
An intermediate report: *Audiocodes*: TLS works only on outgoing requests, incoming ones are ignored. I am waiting for Audiocodes' help in order to debug it. SRTP: worked when no TLS is active. When TLS is active the call is disconnected when the remote party answers. Still debugging it. *VegaStream Europa-50*: SRTP works. Waiting for Vega for instructions how to enable TLS from the WEB interface. Regards, __Yehavi: 2009/12/4 Yehavi Bourvine <yehavi.bourvine@gmail.com>
I'll report when I am done.
So far I've enabled only SRTP and both support it.
__Yehavi:
2009/12/4 Mark Campbell-Smith <mcampbellsmith@gmail.com>
Thanks Yehavi,
I would be very interested to find out how your test goes... can you report back after you have tested it?
Thanks!
On Fri, Dec 4, 2009 at 3:38 PM, Yehavi Bourvine <yehavi.bourvine@gmail.com> wrote:
Hello,
I have AudioCodes MP and Vega ATA adapters. They both support SRTP; they should support TLS also (will try it next week; up to now I preffered to not use TLS so I can sniff the traffic and debug things).
Regards, __Yehavi:
2009/12/4 Mark Campbell-Smith <mcampbellsmith@gmail.com>
Cheers Gabriel.. thanks for the information.
I'll look at the Mediatrix ATA's as an alternative - has anyone had experience with those and TLS/SRTP?
On Fri, Dec 4, 2009 at 10:25 AM, Gabriel Kuri <gkuri@ieee.org> wrote:
The ATAs I'm aware that claim support for TLS and SRTP w/ SDES are
the
Grandstream and Mediatrix devices (although I've never tried either one with FreeSWITCH).
I've personally never had any good experience with the Grandstream ATAs. The Mediatrix ATAs are OK devices, but I've never personally tested them with SRTP w/SDES and FreeSWITCH, but supposedly they support it (so says their marketing material and docs).
I'd see if Cisco has any plans to add support for it to the ATAs. Next time I see our Cisco SE, I'll try to poke him about it.
Gabe
On Thu, Dec 3, 2009 at 2:34 PM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
Quote: Cisco/Linksys SPA series ATAs do not support SDES key exchange to appropriately support SRTP and FreeSWITCH
I'll check with Cisco regarding their implementation then and try to find out when/if they will support standard SRTP encryption.
So, back to my origianal question then. Are there any ATA's that support TLS AND SRTP with FreeSwitch?
On Fri, Dec 4, 2009 at 9:17 AM, Gabriel Kuri <gkuri@ieee.org> wrote: > AFAIK, the Cisco/Linksys SPA series ATAs do not support SDES key > exchange to appropriately support SRTP and FreeSWITCH. They do their > proprietary Sipura key exchange only, not sure if Cisco plans on > upgrading the firmware to ever support SDES on the ATAs. They added > support for SDES to their IP Phones about 1 year ago, but nothing has > happened with the ATAs as of yet. > > Gabe > > > On Thu, Dec 3, 2009 at 2:05 PM, Mark Campbell-Smith > <mcampbellsmith@gmail.com> wrote: >> Hi All, >> >> I managed to borrow a SPA3102 with the latest firmware and have got >> it >> to register using TLS, but I am still struggling with SRTP. Has >> anyone managed to get SRTP working with the Linksys devices and if >> so, >> can they direct me on how to do this. >> >> I have generated a mini-certificates and SRTP Private Key using the >> gen-mc tool found at >> >> http://www.megajournal.ru/journal/users_data/11049/msg_files/24120/gen-mc.c-... . >> However, when ever I initiate a call from the SPA, I can see that >> the >> call is not encrypted. >> >> Help appreciated. >> >> Thanks! >> >> >> On Sat, Nov 28, 2009 at 6:31 AM, eman <eman@chabotel.com> wrote: >>> Check out the Linksys SPA2102 >>> >>> On Wed, Nov 25, 2009 at 3:34 AM, Mark Campbell-Smith >>> <mcampbellsmith@gmail.com> wrote: >>>> >>>> The only ATA mentioned on the WIKI that supports TLS/SRTP is the >>>> Grandstream HandyTone 503. But, again according to the wiki, that >>>> doesn't seem to behave to well with TLS ... >>>> >>>> On Wed, Nov 25, 2009 at 7:14 PM, Jason White < jason@jasonjgw.net> >>>> wrote: >>>> > Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote: >>>> >> Does the SPA3102 support TLS or only SRTP? >>>> > >>>> > I don't know, but supporting only SRTP would be ridiculous, since >>>> > the >>>> > keys >>>> > would then be transmitted in the clear and therefore amenable to >>>> > interception. >>>> > SRTP requires the SIP channel to be encrypted by TLS in order to >>>> > be >>>> > secure. >>>> > ZRTP, on the other hand, doesn't have this limitation: it works >>>> > entirely >>>> > in >>>> > RTP. >>>> > >>>> > I would be rather surprised were a hardware manufacturer to >>>> > implement >>>> > SRTP >>>> > without TLS for the SIP traffic. On the other hand, we've seen >>>> > often in >>>> > this >>>> > forum that some manufacturers are really clueless... >>>> > >>>> > >>>> > _______________________________________________ >>>> > FreeSWITCH-users mailing list >>>> > FreeSWITCH-users@lists.freeswitch.org >>>> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users >>>> > >>>> > UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users >>>> > http://www.freeswitch.org >>>> > >>>> >>>> _______________________________________________ >>>> FreeSWITCH-users mailing list >>>> FreeSWITCH-users@lists.freeswitch.org >>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users >>>> >>>> UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users >>>> http://www.freeswitch.org >>> >>> >>> _______________________________________________ >>> FreeSWITCH-users mailing list >>> FreeSWITCH-users@lists.freeswitch.org >>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users >>> >>> UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users >>> http://www.freeswitch.org >>> >>> >> >> _______________________________________________ >> FreeSWITCH-users mailing list >> FreeSWITCH-users@lists.freeswitch.org >> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users >> >> UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users >> http://www.freeswitch.org >> > > _______________________________________________ > FreeSWITCH-users mailing list > FreeSWITCH-users@lists.freeswitch.org > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users > > UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users > http://www.freeswitch.org >
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
I have confirmed it works with Polycom, Snom and a few others .... polycom is the hardest to set due to having to put the ca cert into the phone... but other than that its good. /b On Dec 10, 2009, at 3:11 AM, Yehavi Bourvine wrote:
An intermediate report:
Audiocodes: TLS works only on outgoing requests, incoming ones are ignored. I am waiting for Audiocodes' help in order to debug it. SRTP: worked when no TLS is active. When TLS is active the call is disconnected when the remote party answers. Still debugging it.
VegaStream Europa-50: SRTP works. Waiting for Vega for instructions how to enable TLS from the WEB interface.
Regards, __Yehavi:
An interim update: - *Audiocodes*: No success yet. I am working with the manufacturer to debug it. - *VegaStream:* Got the necessary license, configured TLS but it doesn't work. I am working with the local representatives on it. Regards, __Yehavi: 2009/12/10 Brian West <brian@freeswitch.org>
I have confirmed it works with Polycom, Snom and a few others .... polycom is the hardest to set due to having to put the ca cert into the phone... but other than that its good.
/b
On Dec 10, 2009, at 3:11 AM, Yehavi Bourvine wrote:
An intermediate report:
Audiocodes: TLS works only on outgoing requests, incoming ones are ignored. I am waiting for Audiocodes' help in order to debug it. SRTP: worked when no TLS is active. When TLS is active the call is disconnected when the remote party answers. Still debugging it.
VegaStream Europa-50: SRTP works. Waiting for Vega for instructions how to enable TLS from the WEB interface.
Regards, __Yehavi:
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thanks Yehavi... I posted a question on the Cisco Forum and am waiting a response from 'engineering' to tell us if they plan to implement standard SRTP support in the Linksys ATA's. TLS is working fine. On Thu, Dec 17, 2009 at 4:39 PM, Yehavi Bourvine <yehavi.bourvine@gmail.com> wrote:
An interim update:
Audiocodes: No success yet. I am working with the manufacturer to debug it. VegaStream: Got the necessary license, configured TLS but it doesn't work. I am working with the local representatives on it.
Regards, __Yehavi:
2009/12/10 Brian West <brian@freeswitch.org>
I have confirmed it works with Polycom, Snom and a few others .... polycom is the hardest to set due to having to put the ca cert into the phone... but other than that its good.
/b
On Dec 10, 2009, at 3:11 AM, Yehavi Bourvine wrote:
An intermediate report:
Audiocodes: TLS works only on outgoing requests, incoming ones are ignored. I am waiting for Audiocodes' help in order to debug it. SRTP: worked when no TLS is active. When TLS is active the call is disconnected when the remote party answers. Still debugging it.
VegaStream Europa-50: SRTP works. Waiting for Vega for instructions how to enable TLS from the WEB interface.
Regards, __Yehavi:
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
More update: VegaStream engineers found the bug and the fix will be available sometime in January. I am still waiting for AudioCodes... Regards, __Yehavi: 2009/12/17 Mark Campbell-Smith <mcampbellsmith@gmail.com>
Thanks Yehavi...
I posted a question on the Cisco Forum and am waiting a response from 'engineering' to tell us if they plan to implement standard SRTP support in the Linksys ATA's.
TLS is working fine.
On Thu, Dec 17, 2009 at 4:39 PM, Yehavi Bourvine <yehavi.bourvine@gmail.com> wrote:
An interim update:
Audiocodes: No success yet. I am working with the manufacturer to debug it. VegaStream: Got the necessary license, configured TLS but it doesn't work. I am working with the local representatives on it.
Regards, __Yehavi:
2009/12/10 Brian West <brian@freeswitch.org>
I have confirmed it works with Polycom, Snom and a few others .... polycom is the hardest to set due to having to put the ca cert into the phone... but other than that its good.
/b
On Dec 10, 2009, at 3:11 AM, Yehavi Bourvine wrote:
An intermediate report:
Audiocodes: TLS works only on outgoing requests, incoming ones are ignored. I am waiting for Audiocodes' help in order to debug it. SRTP: worked when no TLS is active. When TLS is active the call is disconnected when the remote party answers. Still debugging it.
VegaStream Europa-50: SRTP works. Waiting for Vega for instructions how to enable TLS from the WEB interface.
Regards, __Yehavi:
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:
http://lists.freeswitch.org/mailman/options/freeswitch-users
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (7)
-
Brian West
-
eman
-
Gabriel Kuri
-
Itamar Reis Peixoto
-
Jason White
-
Mark Campbell-Smith
-
Yehavi Bourvine