zrtp endpoints have different sas through fs 1.0.4
I've got 1.0.4 running with zrtp on ubuntu 9.0.4. I have 3 zrtp capable endpoints: an xp desktop running ekiga with the 0.92 build 218 zfone client, 2 cell phones running ver 2.0.5 of the Tivi softphone: a nokia e61i (symbian s60) and an O2 Xda Flame (windows mobile 5). All 3 endpoints are registered with FS using the default extensions of 1000- 1003 With global_setvar zrtp_secure_media=true the zrtp negotiation between end points happens but the SAS never matches,below is console output for a call between 2 of the endpoints 2009-08-23 14:10:17.643073 [NOTICE] mod_sofia.c:1509 Pre-Answer sofia/internal/1003@10.12.13.45! 2009-08-23 14:10:21.257568 [NOTICE] sofia.c:3794 Channel [sofia/internal/sip:1000@10.12.13.166:5062] has been answered 2009-08-23 14:10:21.275521 [NOTICE] switch_ivr_originate.c:2015 Channel [sofia/internal/1003@10.12.13.45] has been answered 2009-08-23 14:10:22.232053 [WARNING] mod_sofia.c:810 We were told to use ptime 20 but what they meant to say was 80 This issue has so far been identified to happen on the following broken platforms/devices: Linksys/Sipura aka Cisco ShoreTel Sonus/L3 We will try to fix it but some of the devices on this list are so broken who knows what will happen.. 2009-08-23 14:11:34.496118 [NOTICE] sofia.c:322 Hangup sofia/internal/sip:1000@10.12.13.166:5062 [CS_EXCHANGE_MEDIA] [NORMAL_CLEARING] 2009-08-23 14:11:34.512100 [NOTICE] switch_ivr_bridge.c:1016 Hangup sofia/internal/1003@10.12.13.45 [CS_EXECUTE] [NORMAL_CLEARING] 2009-08-23 14:11:34.552158 [NOTICE] switch_core_session.c:1086 Session 16 (sofia/internal/sip:1000@10.12.13.166:5062) Ended 2009-08-23 14:11:34.552158 [NOTICE] switch_core_session.c:1088 Close Channel sofia/internal/sip:1000@10.12.13.166:5062 [CS_DESTROY] 2009-08-23 14:11:34.556441 [NOTICE] switch_core_session.c:1086 Session 15 (sofia/internal/1003@10.12.13.45) Ended 2009-08-23 14:11:34.556441 [NOTICE] switch_core_session.c:1088 Close Channel sofia/internal/1003@10.12.13.45 [CS_DESTROY] Of note, with the endpoints registered through the Ekiga sip server, the sas DOES match on both ends. With global_setvar zrtp_secure_media=false, the endpoints can't detect a zrtp peer. Reading the list archives hasn't enlightened me. I see this comment from 2008 http://www.nabble.com/Freeswitch-and-Twinkle-and-ZRTP- td18518140.html#a18518343 On Jul 17, 2008, at 4:23 PM, Michael Jerris wrote: > it should in bypass_media or proxy_media modes. in the other modes we > are in the media path and would not know how to handle the encrypted > packets. > > Mike Is this still relevant? Or is there some other setting not covered here http://wiki.freeswitch.org/wiki/ZRTP to make this work properly? I ask firstly about this in the context of a peer 2 peer zrtp communication between the endpoints, then secondly in the case of FS acting as a trusted middleman as in section 2 here http://www.zfoneproject.com/docs/asterisk/man/html/u_guide.html#passthrough Lastly how does one implement the security enrollment as noted above with FS -- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
This is because you didn't install the zrtpagent.lua script and dial zrtp on your keypad to enroll the FS box as a trusted man in the middle... which btw will only work with the unreleased zfone3. /b On Aug 23, 2009, at 4:37 PM, Harondel J. Sibble wrote:
I've got 1.0.4 running with zrtp on ubuntu 9.0.4. I have 3 zrtp capable endpoints: an xp desktop running ekiga with the 0.92 build 218 zfone client, 2 cell phones running ver 2.0.5 of the Tivi softphone: a nokia e61i (symbian s60) and an O2 Xda Flame (windows mobile 5).
All 3 endpoints are registered with FS using the default extensions of 1000- 1003
With global_setvar zrtp_secure_media=true the zrtp negotiation between end points happens but the SAS never matches,below is console output for a call between 2 of the endpoints
Brian, okay, that answers the case with FS acting as a trusted man in the middle, but what about in the peer to peer case? Shouldn't FS just be passing the ztrp traffic through to the endpoints? Or am I misunderstanding how it's supposed to work? Secondly where would I find info about zrtpagent.lua? Doing a search for that term on the wiki returns no results, ditto for a search of the nabble list archives (other than your response today of course). Also ditto for a search of the box running FS. On 23 Aug 2009 at 17:09, Brian West wrote:
This is because you didn't install the zrtpagent.lua script and dial zrtp on your keypad to enroll the FS box as a trusted man in the middle... which btw will only work with the unreleased zfone3.
/b
-- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
On Aug 23, 2009, at 5:39 PM, Harondel J. Sibble wrote:
Brian, okay, that answers the case with FS acting as a trusted man in the middle, but what about in the peer to peer case? Shouldn't FS just be passing the ztrp traffic through to the endpoints? Or am I misunderstanding how it's supposed to work?
Nope. FreeSWITCH is a b2bua so the traffic is decrypted... and relayed and encrypted again to the far side. Which is why you have to use the trusted man in the middle stuff but you can't use it fully unless you have zfone3 beta or release.
Secondly where would I find info about zrtpagent.lua? Doing a search for that term on the wiki returns no results, ditto for a search of the nabble list archives (other than your response today of course). Also ditto for a search of the box running FS.
scripts/lua/ (in src tree) /b
On 23 Aug 2009 at 17:48, Brian West wrote:
Nope. FreeSWITCH is a b2bua so the traffic is decrypted... and
Hadn't heard that term before http://en.wikipedia.org/wiki/Back-to-back_user_agent that clears it up. Any plans to offer straight proxy/passthru?
relayed and encrypted again to the far side. Which is why you have to use the trusted man in the middle stuff but you can't use it fully unless you have zfone3 beta or release.
Which explains the mismatched sas on each end. Okay got it.
scripts/lua/ (in src tree)
ahh, it's zrtp_agent.lua which is why I didn't find it. I'll add that into the mix and cross my fingers that zfone3 gets released soon along with it's inclusion into the softphones I have on my smartphone devices. -- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
I can confirm that it works 100% correct passing the SAS across the bridge correctly once you trust the switch in the middle. /b On Aug 23, 2009, at 6:16 PM, Harondel J. Sibble wrote:
ahh, it's zrtp_agent.lua which is why I didn't find it. I'll add that into the mix and cross my fingers that zfone3 gets released soon along with it's inclusion into the softphones I have on my smartphone devices.
On 23 Aug 2009 at 16:16, Harondel J. Sibble wrote:
ahh, it's zrtp_agent.lua which is why I didn't find it. I'll add that into the mix and cross my fingers that zfone3 gets released soon along with it's inclusion into the softphones I have on my smartphone devices.
Well good news for the Tiviphone client Dear Harondel J. Sibble, We support zfone3 starting from Tiviphone release 2.0.6 it is available for Symbian try upgrading. -- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
They have a trial version of the full client available from their website, I think it's only for 10 days though. I suspect if you approached them, they'd probably give you a full client for permanent use for interoperability testing. http://www.tivi.com/en/download/credit_paypal.php Opps, my bad, it's only for 3 days :-( You can bid on the price you want to pay if you are into buying a copy. Just got the word back from them, the 2.0.6 client is available for Windows Mobile but not officially released since it has some issues with video encryption. Since I'm not using video yet, I am going to upgrade the windows mobile phones with this version. So I popped the zrtp_agent.lua script into /usr/local/freeswitch/scripts/ added following line to /usr/local/freeswitch/conf/autoload_configs/lua.conf.xml <!--<param name="startup-script" value="zrtp_agent.lua"/>--> under this section <!-- The following options identifies a lua script that is launched at startup and may live forever in the background. You can define multiple lines, one for each script you need to run. And restarted FS, when I try to connect and type zrtp on the keypad it doesn't work and I see 2009-08-23 17:06:46.272135 [NOTICE] switch_channel.c:602 New Channel sofia/internal/1001@10.12.13.45 [03265312-9042-11de-8c5d-d333d780ffc7] 2009-08-23 17:06:46.288730 [INFO] mod_dialplan_xml.c:315 Processing 1001-
zrtp in context default 2009-08-23 17:06:46.301899 [NOTICE] switch_ivr.c:1349 Transfer sofia/internal/1001@10.12.13.45 to enum[zrtp@default] 2009-08-23 17:06:46.495944 [INFO] switch_core_state_machine.c:136 No Route, Aborting 2009-08-23 17:06:46.495944 [NOTICE] switch_core_state_machine.c:137 Hangup sofia/internal/1001@10.12.13.45 [CS_ROUTING] [NO_ROUTE_DESTINATION] 2009-08-23 17:06:46.503261 [NOTICE] switch_core_session.c:1086 Session 3 (sofia/internal/1001@10.12.13.45) Ended 2009-08-23 17:06:46.503261 [NOTICE] switch_core_session.c:1088 Close Channel sofia/internal/1001@10.12.13.45 [CS_DESTROY]
Were you being literal when you said to type in zrtp on the phones keypad? I assume you meant dial the phone number equivalent to that. I also assume this is not working because 1) I should put the zrtp_agent.lua script in one of the designated script dirs like <!-- <param name="module-directory" value="/usr/lib/lua/5.1/?.so"/> --> <!-- <param name="module-directory" value="/usr/local/lib/lua/5.1/?.so"/> --> or 2) I need to wait until zfone3 is released and recompile FS with the new tar file from the zfoneproject site or 3) both of the above apply? On 23 Aug 2009 at 18:53, Brian West wrote:
Wish they would send me one for my E63 for testing... only been working with zfone 3 so far.
-- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
On Aug 23, 2009, at 7:20 PM, Harondel J. Sibble wrote:
added following line to
/usr/local/freeswitch/conf/autoload_configs/lua.conf.xml
WRONG.
<!--<param name="startup-script" value="zrtp_agent.lua"/>-->
Don't touch this.
under this section
<!-- The following options identifies a lua script that is launched at startup and may live forever in the background. You can define multiple lines, one for each script you need to run.
And restarted FS, when I try to connect and type zrtp on the keypad it doesn't work and I see
Just put it into the scripts folder and run it from the dialplan see default configs. <!-- install zrtp_agent.lua into scripts (ZRTP == 9787) --> <extension name="zrtp_enrollement"> <condition field="destination_number" expression="^9787$"> <action application="answer"/> <action application="lua" data="zrtp_agent.lua"/> </condition> </extension> /b
On 23 Aug 2009 at 19:53, Brian West wrote:
Just put it into the scripts folder and run it from the dialplan see default configs.
<!-- install zrtp_agent.lua into scripts (ZRTP == 9787) --> <extension name="zrtp_enrollement"> <condition field="destination_number" expression="^9787$"> <action application="answer"/> <action application="lua" data="zrtp_agent.lua"/> </condition> </extension>
Okay, where do I get the audio files? 2009-08-23 18:54:08.991629 [INFO] mod_dialplan_xml.c:315 Processing 1001-
9787 in context default 2009-08-23 18:54:09.10863 [NOTICE] mod_dptools.c:649 Channel [sofia/internal/1001@10.12.13.45] has been answered 2009-08-23 18:54:09.215288 [ERR] mod_sndfile.c:194 Error Opening File [/usr/local/freeswitch/sounds/en/us/callie/zr tp/zrtp- status_securing.wav] [System error : No such file or directory.] 2009-08-23 18:54:12.233267 [ERR] mod_sndfile.c:194 Error Opening File [/usr/local/freeswitch/sounds/en/us/callie/zr tp/zrtp- status_secure.wav] [System error : No such file or directory.] 2009-08-23 18:54:12.234565 [ERR] mod_sndfile.c:194 Error Opening File [/usr/local/freeswitch/sounds/en/us/callie/zr tp/zrtp- enroll_welcome.wav] [System error : No such file or directory.] 2009-08-23 18:54:13.252933 [ERR] mod_sndfile.c:194 Error Opening File [/usr/local/freeswitch/sounds/en/us/callie/zr tp/zrtp- enroll_confirmed.wav] [System error : No such file or directory.] 2009-08-23 18:54:15.293476 [WARNING] mod_sofia.c:810 We were told to use ptime 20 but what they meant to say was 80 This issue has so far been identified to happen on the following broken platforms/devices: Linksys/Sipura aka Cisco ShoreTel Sonus/L3 We will try to fix it but some of the devices on this list are so broken who knows what will happen.. 2009-08-23 18:54:17.333543 [ERR] mod_sndfile.c:194 Error Opening File [/usr/local/freeswitch/sounds/en/us/callie/zr tp/zrtp- thankyou_goodbye.wav] [System error : No such file or directory.]
my /usr/local/freeswitch/sounds is bereft of any files whatsoever, searching the full filesystem for callie only gets me /home/sibbleh/freeswitch-1.0.4/debian/freeswitch-sounds-en-us-callie- 16000.install /home/sibbleh/freeswitch-1.0.4/debian/freeswitch-sounds-en-us-callie- 32000.install /home/sibbleh/freeswitch-1.0.4/debian/freeswitch-sounds-en-us-callie- 8000.install -- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
Ahh, I didn't quite clue-in that I had to run the additional installers as below when the main compile finished, I thought it was saying it had already done that. Makes perfect sense in hindsite ;-) +-------- FreeSWITCH install Complete ----------+ + FreeSWITCH has been successfully installed. + + + + Install sounds: + + (uhd-sounds includes hd-sounds, sounds) + + (hd-sounds includes sounds) + + ------------------------------------ + + make cd-sounds-install + + make cd-moh-install + + + + make uhd-sounds-install + + make uhd-moh-install + + + + make hd-sounds-install + + make hd-moh-install + + + + make sounds-install + + make moh-install + + + + Install non english sounds: + + replace XX with language + + (ru : Russian) + + ------------------------------------ + + make cd-sounds-XX-install + + make uhd-sounds-XX-install + + make hd-sounds-XX-install + + make sounds-XX-install + On 23 Aug 2009 at 21:30, Brian West wrote:
If you reinstall the latest sound files you'll have them.
-- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
Whoah..... 2009-08-23 20:07:52.583524 [NOTICE] switch_channel.c:602 New Channel sofia/internal/1001@192.168.73.45 [4ff9d452-905b-11de-8c5d-d333d780ffc7] 2009-08-23 20:07:52.740094 [INFO] mod_dialplan_xml.c:315 Processing 1001-
9787 in context default 2009-08-23 20:07:52.980164 [NOTICE] mod_dptools.c:649 Channel [sofia/internal/1001@192.168.73.45] has been answered 2009-08-23 20:07:54.333362 [WARNING] mod_sofia.c:810 We were told to use ptime 20 but what they meant to say was 80 This issue has so far been identified to happen on the following broken platforms/devices: Linksys/Sipura aka Cisco ShoreTel Sonus/L3 We will try to fix it but some of the devices on this list are so broken who knows what will happen.. 2009-08-23 20:08:16.912027 [NOTICE] sofia.c:322 Hangup sofia/internal/1001@192.168.73.45 [CS_EXECUTE] [NORMAL_CLEARING] 2009-08-23 20:08:22.54838 [NOTICE] switch_core_session.c:1086 Session 12 (sofia/internal/1001@192.168.73.45) Ended 2009-08-23 20:08:22.54838 [NOTICE] switch_core_session.c:1088 Close Channel sofia/internal/1001@192.168.73.45 [CS_DESTROY]
I get audio now, but it's running really slooooooooooooooowly. I'd say about 1/4 to 1/8 normal speech speed I did the following make cd-sounds-install;make uhd-sounds-install;make uhd-moh-install Probably relevant, box this is running on is a Celeron 1ghz with 512mb ram. Weird, it starts off okay, but when this pops up 2009-08-23 20:21:10.93004 [WARNING] mod_sofia.c:810 We were told to use ptime 20 but what they meant to say was 80 This issue has so far been identified to happen on the following broken platforms/devices: Linksys/Sipura aka Cisco ShoreTel Sonus/L3 We will try to fix it but some of the devices on this list are so broken who knows what will happen.. the audio starts to crawl... On 23 Aug 2009 at 21:30, Brian West wrote:
If you reinstall the latest sound files you'll have them.
/b
On Aug 23, 2009, at 9:05 PM, Harondel J. Sibble wrote:
</extension>
Okay, where do I get the audio files?
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
On 23 Aug 2009 at 20:22, Harondel J. Sibble wrote:
Whoah..... I get audio now, but it's running really slooooooooooooooowly. I'd say about 1/4 to 1/8 normal speech speed
Hmmm, using one of my hardphones, specifically the Integrated Networks IN- 1002 2009-08-23 20:46:07.334596 [NOTICE] switch_channel.c:602 New Channel sofia/internal/1004@10.12.13.45 [a7c10746-9060-11de-8c5d-d333d780ffc7] 2009-08-23 20:46:07.348834 [INFO] mod_dialplan_xml.c:315 Processing 1004-
5000 in context default 2009-08-23 20:46:07.364484 [NOTICE] mod_dptools.c:649 Channel [sofia/internal/1004@10.12.13.45] has been answered 2009-08-23 20:46:08.33173 [WARNING] mod_sofia.c:810 We were told to use ptime 20 but what they meant to say was 10 This issue has so far been identified to happen on the following broken platforms/devices: Linksys/Sipura aka Cisco ShoreTel Sonus/L3 We will try to fix it but some of the devices on this list are so broken who knows what will happen.. 2009-08-23 20:47:30.512970 [NOTICE] switch_core_state_machine.c:179 Hangup sofia/internal/1004@10.12.13.45 [CS_EXECUTE] [NORMAL_CLEARING] 2009-08-23 20:47:30.541157 [NOTICE] switch_core_session.c:1086 Session 20 (sofia/internal/1004@10.12.13.45) Ended 2009-08-23 20:47:30.541157 [NOTICE] switch_core_session.c:1088 Close Channel sofia/internal/1004@10.12.13.45 [CS_DESTROY]
gets me much better results and no slowdown of audio, although there are some drop outs. Running Ekiga on xp machine with zfone client works okay, but being it's an older verison of zfone, I'm guessing it doesn't support the enrollment packet from FS as the voice says I have to choose to enroll and then says goodbye ;-)
From looking through the list archives, I am guessing I need to talk to the Tivi developers, question is what should I say to them, there's nothing really exposed in the client, other than adjusting the codecs, 3 choices GSM, uLaw and aLaw can be enabled or disabled.
Both phones are running over a wifi link and there is (randomly) a fair bit of interference affecting speeds. -- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
Me too :) ----- Original Message ----- From: "Brian West" <brian@freeswitch.org> To: <freeswitch-users@lists.freeswitch.org> Sent: Monday, August 24, 2009 1:53 AM Subject: Re: [Freeswitch-users] zrtp endpoints have different sas through fs1.0.4
Wish they would send me one for my E63 for testing... only been working with zfone 3 so far.
/b
On Aug 23, 2009, at 6:50 PM, Harondel J. Sibble wrote:
Well good news for the Tiviphone client
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Brian, you have any inside info on when zfone3 is supposed to be available? Emails to the zfoneproject addresses haven't gotten me any info (or a reponse for that matter), I guess cause I am not a dev... On 23 Aug 2009 at 18:53, Brian West wrote:
Wish they would send me one for my E63 for testing... only been working with zfone 3 so far.
/b
On Aug 23, 2009, at 6:50 PM, Harondel J. Sibble wrote:
Well good news for the Tiviphone client
-- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
Hmm, I emailed the zfoneproject folks about an hour ago asking about a release date for zfone3 and was surprised about a half hour later with a call from PRZ himself. Here's what I got from the call 1) the currently released version of zfone already has support for secure pbx enrollment 2) the tivi softphone client which I am using on windows mobile and symbian smartphones does not yet have secure pbx enrollment support I contacted Tivi support and the 2.0.7 client with support for secure pbx enrollment is due out close to the end of the year, depending on various factors yada, yada, yada. Am I correct in assuming that connecting via a softphone (eikga) on a windows machine also running the latest official zfone client, and calling 9787 should give me more than just a message saying the following? 1) call is secure 2) welcome to the zrtp enrollment agent 3) thank you for calling (about 1-2 seconds after item 2) then I get a few beeps, I see the zhone client saying security is interrupted and the call drops. This is the same class of behaviour I get with the Tivi clients. On 23 Aug 2009 at 17:09, Brian West wrote:
This is because you didn't install the zrtpagent.lua script and dial zrtp on your keypad to enroll the FS box as a trusted man in the middle... which btw will only work with the unreleased zfone3.
/b
On Aug 23, 2009, at 4:37 PM, Harondel J. Sibble wrote:
I've got 1.0.4 running with zrtp on ubuntu 9.0.4. I have 3 zrtp capable endpoints: an xp desktop running ekiga with the 0.92 build 218 zfone client, 2 cell phones running ver 2.0.5 of the Tivi softphone: a nokia e61i (symbian s60) and an O2 Xda Flame (windows mobile 5).
All 3 endpoints are registered with FS using the default extensions of 1000- 1003
With global_setvar zrtp_secure_media=true the zrtp negotiation between end points happens but the SAS never matches,below is console output for a call between 2 of the endpoints
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
if you don't have ZRTP compiled in as per the wiki it won't work... their are a few changes coming to this code soon. /b On Dec 14, 2009, at 8:01 PM, Harondel J. Sibble wrote:
Hmm, I emailed the zfoneproject folks about an hour ago asking about a release date for zfone3 and was surprised about a half hour later with a call from PRZ himself.
Here's what I got from the call
1) the currently released version of zfone already has support for secure pbx enrollment
2) the tivi softphone client which I am using on windows mobile and symbian smartphones does not yet have secure pbx enrollment support
I contacted Tivi support and the 2.0.7 client with support for secure pbx enrollment is due out close to the end of the year, depending on various factors yada, yada, yada.
Am I correct in assuming that connecting via a softphone (eikga) on a windows machine also running the latest official zfone client, and calling 9787 should give me more than just a message saying the following?
1) call is secure 2) welcome to the zrtp enrollment agent 3) thank you for calling (about 1-2 seconds after item 2)
then I get a few beeps, I see the zhone client saying security is interrupted and the call drops.
This is the same class of behaviour I get with the Tivi clients.
I do have it compiled in as per the wiki ;-) That's why I am continually scratching my head on why it's not working. I did have to use the scrooge codec setup otherwise the enrollment messages would play at about 1/10 normal speed. :-( On 14 Dec 2009 at 20:50, Brian West wrote:
if you don't have ZRTP compiled in as per the wiki it won't work... their are a few changes coming to this code soon.
-- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
Hmm, okay, I went back to basics and did a full rebuild for 1.0.4 svn trunk, I am able to now enroll my nokia e61i running the beta 2.0.7 Tiviphone client, however I am not seeing the enrollment option popup in zfone 0.92 build 218 on windows in front of an x-lite client. Any suggestions on what I should look at to troubleshoot this? I am waiting for the Tivi folks to send a 2.0.7 beta for windows mobile, but until then.... On 14 Dec 2009 at 20:50, Brian West wrote:
if you don't have ZRTP compiled in as per the wiki it won't work... their are a few changes coming to this code soon.
/b
On Dec 14, 2009, at 8:01 PM, Harondel J. Sibble wrote:
Hmm, I emailed the zfoneproject folks about an hour ago asking about a release date for zfone3 and was surprised about a half hour later with a call from PRZ himself.
Here's what I got from the call
1) the currently released version of zfone already has support for secure pbx enrollment
-- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
I'm still not done with this I think we found a bug in the lib... Viktor fixed it today and I'm going to retry after I get done testing G729 more today! ;) /b On Dec 28, 2009, at 5:38 PM, Harondel J. Sibble wrote:
Hmm, okay, I went back to basics and did a full rebuild for 1.0.4 svn trunk, I am able to now enroll my nokia e61i running the beta 2.0.7 Tiviphone client, however I am not seeing the enrollment option popup in zfone 0.92 build 218 on windows in front of an x-lite client.
Any suggestions on what I should look at to troubleshoot this?
I am waiting for the Tivi folks to send a 2.0.7 beta for windows mobile, but until then....
Coolio, well if you need me to test something, just holler. here's what I'm running FreeSWITCH Version 1.0.trunk (16066) on Ubuntu 9.0.4 zfone 0.92 build 218 (windows xp) with ekiga and x-lite clients tiviphone 2.0.7 (beta) for symbian hopefully will have the tiviphone 2.0.7 (beta) for windows mobile shortly On 28 Dec 2009 at 17:49, Brian West wrote:
I'm still not done with this I think we found a bug in the lib... Viktor fixed it today and I'm going to retry after I get done testing G729 more today! ;)
/b
On Dec 28, 2009, at 5:38 PM, Harondel J. Sibble wrote:
Hmm, okay, I went back to basics and did a full rebuild for 1.0.4 svn trunk, I am able to now enroll my nokia e61i running the beta 2.0.7 Tiviphone client, however I am not seeing the enrollment option popup in zfone 0.92 build 218 on windows in front of an x-lite client.
Any suggestions on what I should look at to troubleshoot this?
-- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
Brian, Just following up on this, any news? On 28 Dec 2009 at 17:49, Brian West wrote:
I'm still not done with this I think we found a bug in the lib... Viktor fixed it today and I'm going to retry after I get done testing G729 more today! ;)
/b
On Dec 28, 2009, at 5:38 PM, Harondel J. Sibble wrote:
Hmm, okay, I went back to basics and did a full rebuild for 1.0.4 svn trunk, I am able to now enroll my nokia e61i running the beta 2.0.7 Tiviphone client, however I am not seeing the enrollment option popup in zfone 0.92 build 218 on windows in front of an x-lite client.
Any suggestions on what I should look at to troubleshoot this?
I am waiting for the Tivi folks to send a 2.0.7 beta for windows mobile, but until then....
-- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
Maybe that's what's affecting me now..... I've both phones registered (confirmed by calling 9787) on both devices and it says each device is already enrolled. (how does one un-enroll????). Both phones are running the Tivi 2.0.7 beta. Now however, other than the first call I made between devices after enrollment, the sas is not matching anymore. I set both these options in the console global_action application="set" data="zrtp_enrollment=true" global_setvar zrtp_secure_media=true What should I be looking for in the console output On 28 Dec 2009 at 17:49, Brian West wrote:
I'm still not done with this I think we found a bug in the lib... Viktor fixed it today and I'm going to retry after I get done testing G729 more today! ;)
/b
On Dec 28, 2009, at 5:38 PM, Harondel J. Sibble wrote:
Hmm, okay, I went back to basics and did a full rebuild for 1.0.4 svn trunk, I am able to now enroll my nokia e61i running the beta 2.0.7 Tiviphone client, however I am not seeing the enrollment option popup in zfone 0.92 build 218 on windows in front of an x-lite client.
-- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
Harondel, Please update your FreeSWITCH source rev 16204 fixes the SAS passing in all cases from my testing. You'll need the latest ZRTP Lib and zfone application to make this work... I'm not too sure Tiviphone does this yet as I don't have one to test with. This also fixes the issue when both sides are enrolled. Next we will fix the video portion so both video and audio will go thru zrtp. Please try it and let me know. Thanks, Brian On Jan 5, 2010, at 12:54 AM, Harondel J. Sibble wrote:
Maybe that's what's affecting me now.....
I've both phones registered (confirmed by calling 9787) on both devices and it says each device is already enrolled. (how does one un-enroll????). Both phones are running the Tivi 2.0.7 beta.
Now however, other than the first call I made between devices after enrollment, the sas is not matching anymore.
I set both these options in the console
global_action application="set" data="zrtp_enrollment=true" global_setvar zrtp_secure_media=true
What should I be looking for in the console output
On 28 Dec 2009 at 17:49, Brian West wrote:
I'm still not done with this I think we found a bug in the lib... Viktor fixed it today and I'm going to retry after I get done testing G729 more today! ;)
/b
On Dec 28, 2009, at 5:38 PM, Harondel J. Sibble wrote:
Hmm, okay, I went back to basics and did a full rebuild for 1.0.4 svn trunk, I am able to now enroll my nokia e61i running the beta 2.0.7 Tiviphone client, however I am not seeing the enrollment option popup in zfone 0.92 build 218 on windows in front of an x-lite client.
-- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thanks, I'll do that this week and report back. When you say the latest lib and client, are you refering to developer only versions? All I have access to are the official releases on the zfone site. On 7 Jan 2010 at 17:30, Brian West wrote:
Harondel, Please update your FreeSWITCH source rev 16204 fixes the SAS passing in all cases from my testing. You'll need the latest ZRTP Lib and zfone application to make this work... I'm not too sure Tiviphone does this yet as I don't have one to test with. This also fixes the issue when both sides are enrolled. Next we will fix the video portion so both video and audio will go thru zrtp.
Please try it and let me know.
-- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
Okay, all I've done so far is make current from SVN and now have latest installed 2010-01-19 07:36:12.591283 [CONSOLE] switch_core.c:1565 FreeSWITCH Version 1.0.trunk (16400) Started. Do I need to rebuild libzrtp for Freeswitch? Or just try it as is? On 7 Jan 2010 at 17:30, Brian West wrote:
Harondel, Please update your FreeSWITCH source rev 16204 fixes the SAS passing in all cases from my testing. You'll need the latest ZRTP Lib and zfone application to make this work... I'm not too sure Tiviphone does this yet as I don't have one to test with. This also fixes the issue when both sides are enrolled. Next we will fix the video portion so both video and audio will go thru zrtp.
Please try it and let me know.
-- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
Brian Okay, so far so good, I'm getting consistent SAS's between devices, I'll test some more and report back. I didn't rebuild libzrtp in this case. On 19 Jan 2010 at 7:41, Harondel J. Sibble wrote:
Okay, all I've done so far is make current from SVN and now have latest installed
2010-01-19 07:36:12.591283 [CONSOLE] switch_core.c:1565 FreeSWITCH Version 1.0.trunk (16400) Started.
Do I need to rebuild libzrtp for Freeswitch? Or just try it as is?
-- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice)
participants (3)
-
bakko
-
Brian West
-
Harondel J. Sibble