Hi Michael, thanks for reply where the difference in the configuration ? How is the right configuration for bypass and what for MiTM ? I build FS like so: sudo git clone git://git.freeswitch.org/freeswitch.git cd /usr/src/freeswitch sh build/buildzrtp.sh sudo ./bootstrap.sh sudo ./configure -C --prefix=/opt/freeswitch --enable-zrtp --enable-64 sudo make all install sounds-install moh-install Than put : global_setvar zrtp_secure_media=true in the conf and following in my dailplan: <!-- install zrtp_agent.lua into scripts (ZRTP == 9787) --> <extension name="zrtp_enrollement"> <condition field="destination_number" expression="^9787$"> <action application="answer"/> <action application="lua" data="zrtp_agent.lua"/> </condition> </extension>I can call 9787 and it’s say me that the call is secure but if I callanother user i become different SAS...?Kind regardsJacek From: Michael Collins Sent: Monday, June 20, 2011 9:50 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Have someone zrtp with correct sas ? Is media flowing through FreeSWITCH? If so I think that FS needs to be configured as a "trusted man in the middle." The other option would be to bypass media and see if that works. I would start with the bypass media since that is the low-hanging fruit. -MC On Sun, Jun 19, 2011 at 7:24 PM, J.B. BERLIN <endlesspixel@hotmail.com> wrote: Dear users, I try run FS last git build from today 19. June 2011 with ZRTP. Zfone show me green but the sas are everytime different! Tested with 2x Notebooks on Fedora 14 Twinkle(via yum) & with two desktops with Win7 x64 / Zfone 0.92.build.219 and X-Lite on both sides. FS is build with libzrtp-0.81.514 zrtp.lua is enabled ! global_setvar zrtp_secure_media=true" is set Or have someone a real good step by step guide ? Many thanks and best regards Jacek _______________________________________________ Join us at ClueCon 2011, Aug 9-11, Chicago http://www.cluecon.com 877-7-4ACLUE FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -------------------------------------------------------------------------------- _______________________________________________ Join us at ClueCon 2011, Aug 9-11, Chicago http://www.cluecon.com 877-7-4ACLUE FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

Hi Brian, This is somewhat confusing what does it mean by "who wins". According to my understanding, when FS is declared as trusted MiTM, it should pass the same SAS to called party, showing everything is OK in between after knowing same SAS on both ends. We are trusting on FS that he wont deceive us ! And so on you :) -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Have-someone-zrtp-with-correct... Sent from the freeswitch-users mailing list archive at Nabble.com.