Hi, I've asked this question several times before but unfortunately I have yet to get any reply. Has anyone managed to get FS to recognize and enroll a ZRTP enabled client like CSipSimple? For some reason, on my default install from git, when dialing 9787 the lua script answers the call but tells me that it is only available for ZRTP enabled endpoints. Obviously it isn't recognizing the ZRTP hash even though I do see it in the FS logs. I also tried the same experiment with Jitsi and got the same results, even though ZRTP was clearly enabled. So, any clue as to why FS doesn't seem to recognize the ZRTP hash from the clients and enroll as trusted MiTM? Thanks, Peter
Yes, What problems are you encountering? What endpoints? -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED) On Apr 7, 2014, at 9:24 AM, Peter Villeneuve <petervnv1@gmail.com> wrote:
Hi,
I've asked this question several times before but unfortunately I have yet to get any reply.
Has anyone managed to get FS to recognize and enroll a ZRTP enabled client like CSipSimple?
For some reason, on my default install from git, when dialing 9787 the lua script answers the call but tells me that it is only available for ZRTP enabled endpoints. Obviously it isn't recognizing the ZRTP hash even though I do see it in the FS logs. I also tried the same experiment with Jitsi and got the same results, even though ZRTP was clearly enabled.
So, any clue as to why FS doesn't seem to recognize the ZRTP hash from the clients and enroll as trusted MiTM?
Thanks,
Peter _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thanks for helping out Brian. The problem I have is that FS doesn't seem to recognize the client has ZRTP when I dial 9787 (CSipSimple in this case with ZRTP enabled). I hear the nice lady tell me that my endpoint doesn't have ZRTP but I see in the FS logs that it correctly sees the ZRTP hash. I've disabled zrtp passthrough in the sip profile and still FS doesn't seem to detect the client has ZRTP and enroll it. On Mon, Apr 7, 2014 at 10:40 PM, Brian West <brian@freeswitch.org> wrote:
Yes, What problems are you encountering? What endpoints?
-- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
On Apr 7, 2014, at 9:24 AM, Peter Villeneuve <petervnv1@gmail.com> wrote:
Hi,
I've asked this question several times before but unfortunately I have yet to get any reply.
Has anyone managed to get FS to recognize and enroll a ZRTP enabled client like CSipSimple?
For some reason, on my default install from git, when dialing 9787 the lua script answers the call but tells me that it is only available for ZRTP enabled endpoints. Obviously it isn't recognizing the ZRTP hash even though I do see it in the FS logs. I also tried the same experiment with Jitsi and got the same results, even though ZRTP was clearly enabled.
So, any clue as to why FS doesn't seem to recognize the ZRTP hash from the clients and enroll as trusted MiTM?
Thanks,
Peter _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
You compiled with —enable-zrtp? And you you see the ZRTP activity in the logs when making calls? -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED) On Apr 7, 2014, at 4:49 PM, Peter Villeneuve <petervnv1@gmail.com> wrote:
Thanks for helping out Brian.
The problem I have is that FS doesn't seem to recognize the client has ZRTP when I dial 9787 (CSipSimple in this case with ZRTP enabled). I hear the nice lady tell me that my endpoint doesn't have ZRTP but I see in the FS logs that it correctly sees the ZRTP hash.
I've disabled zrtp passthrough in the sip profile and still FS doesn't seem to detect the client has ZRTP and enroll it.
I can't believe how stupid I am. Now that you mention it I'm no longer sure I did compile it explicitly with the --enable-zrtp flag. I guess that would explain it. Sorry for wasting your time with such a silly mistake. Guess I need to start over. Is there a make uninstall or is there a recommended way to remove FS? On Mon, Apr 7, 2014 at 10:55 PM, Brian West <brian@freeswitch.org> wrote:
You compiled with --enable-zrtp? And you you see the ZRTP activity in the logs when making calls? -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
On Apr 7, 2014, at 4:49 PM, Peter Villeneuve <petervnv1@gmail.com> wrote:
Thanks for helping out Brian.
The problem I have is that FS doesn't seem to recognize the client has ZRTP when I dial 9787 (CSipSimple in this case with ZRTP enabled). I hear the nice lady tell me that my endpoint doesn't have ZRTP but I see in the FS logs that it correctly sees the ZRTP hash.
I've disabled zrtp passthrough in the sip profile and still FS doesn't seem to detect the client has ZRTP and enroll it.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Just rebuild and install as normal, it'll be an upgrade. Your config files should be preserved, but back them up just in case. On Tuesday, April 8, 2014, Peter Villeneuve <petervnv1@gmail.com> wrote:
I can't believe how stupid I am. Now that you mention it I'm no longer sure I did compile it explicitly with the --enable-zrtp flag. I guess that would explain it. Sorry for wasting your time with such a silly mistake.
Guess I need to start over. Is there a make uninstall or is there a recommended way to remove FS?
On Mon, Apr 7, 2014 at 10:55 PM, Brian West <brian@freeswitch.org<javascript:_e(%7B%7D,'cvml','brian@freeswitch.org');>
wrote:
You compiled with --enable-zrtp? And you you see the ZRTP activity in the logs when making calls? -- Brian West brian@freeswitch.org<javascript:_e(%7B%7D,'cvml','brian@freeswitch.org');> FreeSWITCH Solutions, LLC PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
On Apr 7, 2014, at 4:49 PM, Peter Villeneuve <petervnv1@gmail.com<javascript:_e(%7B%7D,'cvml','petervnv1@gmail.com');>> wrote:
Thanks for helping out Brian.
The problem I have is that FS doesn't seem to recognize the client has ZRTP when I dial 9787 (CSipSimple in this case with ZRTP enabled). I hear the nice lady tell me that my endpoint doesn't have ZRTP but I see in the FS logs that it correctly sees the ZRTP hash.
I've disabled zrtp passthrough in the sip profile and still FS doesn't seem to detect the client has ZRTP and enroll it.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');> http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thanks guys. It was indeed a silly mistake. Recompiling latest mster from git with the ZRTP flag now works. I see ZRTP being established correctly but I still can't get FS to confirm that the call is secure in the dialplan. I think the issue may lie with the correct wording of the ${zrtp_secure_media_confirmed} Here's what the logs show (note that zrtp is indeed active as I can see the SAS in both Jitsi and CSipSimple) parsing [features->is_zrtp_secure] continue=true Dialplan: sofia/internal/1010@my.domain.com Regex (FAIL) [is_zrtp_secure] ${zrtp_secure_media_confirmed}() =~ /^true$/ break=on-false Dialplan: sofia/internal/1010@my.domain.com ANTI-Action eval(not_secure) EXECUTE sofia/internal/1010@my.domain.com eval(not_secure) 2014-04-09 18:33:10.872707 [NOTICE] switch_core_session.c:2953 Execute eval(not_secure) EXECUTE sofia/internal/1010@my.domain.com eval(not_secure) I've tried playing with the wording of the ${zrtp_secure_media_confirmed} since I recall a similar problem with SRTP and some recent code changes in FS (I added audio to the name of the variable) Unfortunately none of the 2 options I tried made any difference. <extension name="is_zrtp_secure" continue="true"> <condition field="${zrtp_secure_media_confirmed}" expression="^true$"> <!-- <condition field="${zrtp_secure_media_confirmed_audio}" expression="^true$">--> <action application="sleep" data="1000"/> <action application="playback" data="misc/call_secured.wav"/> <anti-action application="eval" data="not_secure"/> </condition> </extension> Any clues as to what's wrong? Thanks, Peter On Tue, Apr 8, 2014 at 2:04 PM, Steven Ayre <steveayre@gmail.com> wrote:
Just rebuild and install as normal, it'll be an upgrade. Your config files should be preserved, but back them up just in case.
On Tuesday, April 8, 2014, Peter Villeneuve <petervnv1@gmail.com> wrote:
I can't believe how stupid I am. Now that you mention it I'm no longer sure I did compile it explicitly with the --enable-zrtp flag. I guess that would explain it. Sorry for wasting your time with such a silly mistake.
Guess I need to start over. Is there a make uninstall or is there a recommended way to remove FS?
On Mon, Apr 7, 2014 at 10:55 PM, Brian West <brian@freeswitch.org> wrote:
You compiled with --enable-zrtp? And you you see the ZRTP activity in the logs when making calls? -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
On Apr 7, 2014, at 4:49 PM, Peter Villeneuve <petervnv1@gmail.com> wrote:
Thanks for helping out Brian.
The problem I have is that FS doesn't seem to recognize the client has ZRTP when I dial 9787 (CSipSimple in this case with ZRTP enabled). I hear the nice lady tell me that my endpoint doesn't have ZRTP but I see in the FS logs that it correctly sees the ZRTP hash.
I've disabled zrtp passthrough in the sip profile and still FS doesn't seem to detect the client has ZRTP and enroll it.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Sleep longer in the lua script Sent from my iPhone
On Apr 9, 2014, at 1:48 PM, Peter Villeneuve <petervnv1@gmail.com> wrote:
Thanks guys. It was indeed a silly mistake. Recompiling latest mster from git with the ZRTP flag now works.
I see ZRTP being established correctly but I still can't get FS to confirm that the call is secure in the dialplan. I think the issue may lie with the correct wording of the ${zrtp_secure_media_confirmed}
Here's what the logs show (note that zrtp is indeed active as I can see the SAS in both Jitsi and CSipSimple)
parsing [features->is_zrtp_secure] continue=true Dialplan: sofia/internal/1010@my.domain.com Regex (FAIL) [is_zrtp_secure] ${zrtp_secure_media_confirmed}() =~ /^true$/ break=on-false Dialplan: sofia/internal/1010@my.domain.com ANTI-Action eval(not_secure) EXECUTE sofia/internal/1010@my.domain.com eval(not_secure) 2014-04-09 18:33:10.872707 [NOTICE] switch_core_session.c:2953 Execute eval(not_secure) EXECUTE sofia/internal/1010@my.domain.com eval(not_secure)
I've tried playing with the wording of the ${zrtp_secure_media_confirmed} since I recall a similar problem with SRTP and some recent code changes in FS (I added audio to the name of the variable) Unfortunately none of the 2 options I tried made any difference.
<extension name="is_zrtp_secure" continue="true"> <condition field="${zrtp_secure_media_confirmed}" expression="^true$"> <!-- <condition field="${zrtp_secure_media_confirmed_audio}" expression="^true$">--> <action application="sleep" data="1000"/> <action application="playback" data="misc/call_secured.wav"/> <anti-action application="eval" data="not_secure"/> </condition> </extension>
Any clues as to what's wrong?
Thanks,
Peter
On Tue, Apr 8, 2014 at 2:04 PM, Steven Ayre <steveayre@gmail.com> wrote: Just rebuild and install as normal, it'll be an upgrade. Your config files should be preserved, but back them up just in case.
On Tuesday, April 8, 2014, Peter Villeneuve <petervnv1@gmail.com> wrote: I can't believe how stupid I am. Now that you mention it I'm no longer sure I did compile it explicitly with the ―enable-zrtp flag. I guess that would explain it. Sorry for wasting your time with such a silly mistake.
Guess I need to start over. Is there a make uninstall or is there a recommended way to remove FS?
On Mon, Apr 7, 2014 at 10:55 PM, Brian West <brian@freeswitch.org> wrote: You compiled with ―enable-zrtp? And you you see the ZRTP activity in the logs when making calls? -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
On Apr 7, 2014, at 4:49 PM, Peter Villeneuve <petervnv1@gmail.com> wrote:
Thanks for helping out Brian.
The problem I have is that FS doesn't seem to recognize the client has ZRTP when I dial 9787 (CSipSimple in this case with ZRTP enabled). I hear the nice lady tell me that my endpoint doesn't have ZRTP but I see in the FS logs that it correctly sees the ZRTP hash.
I've disabled zrtp passthrough in the sip profile and still FS doesn't seem to detect the client has ZRTP and enroll it.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
I did as you said Brian. I think I've given the script plenty of time. When I call 9787 I do get the zrtp is secure message and I see the SAS displayed on my CSipSimple endpoint. However, the detection in the dialplan doesn't seem to work since it always evals as not secure. -- ZRTP Enrollment Agent session:setVariable("zrtp_secure_media", "true"); session:setVariable("zrtp_enrollment", "true"); session:sleep(600); session:answer(); session:streamFile("zrtp/zrtp-status_securing.wav"); session:sleep(5000); -- Give the agent time to bring up ZRTP. Despite the fact that I do see the SAS, I also see this error message in the logs [ERR] switch_rtp.c:4987 Error: zRTP protection drop with code 9 This seems to be related to this jira bug http://jira.freeswitch.org/browse/FS-509 On Wed, Apr 9, 2014 at 8:25 PM, Brian West <brian@freeswitch.org> wrote:
Sleep longer in the lua script
Sent from my iPhone
On Apr 9, 2014, at 1:48 PM, Peter Villeneuve <petervnv1@gmail.com> wrote:
Thanks guys. It was indeed a silly mistake. Recompiling latest mster from git with the ZRTP flag now works.
I see ZRTP being established correctly but I still can't get FS to confirm that the call is secure in the dialplan. I think the issue may lie with the correct wording of the ${zrtp_secure_media_confirmed}
Here's what the logs show (note that zrtp is indeed active as I can see the SAS in both Jitsi and CSipSimple)
parsing [features->is_zrtp_secure] continue=true Dialplan: sofia/internal/1010@my.domain.com Regex (FAIL) [is_zrtp_secure] ${zrtp_secure_media_confirmed}() =~ /^true$/ break=on-false Dialplan: sofia/internal/1010@my.domain.com ANTI-Action eval(not_secure) EXECUTE sofia/internal/1010@my.domain.com eval(not_secure) 2014-04-09 18:33:10.872707 [NOTICE] switch_core_session.c:2953 Execute eval(not_secure) EXECUTE sofia/internal/1010@my.domain.com eval(not_secure)
I've tried playing with the wording of the ${zrtp_secure_media_confirmed} since I recall a similar problem with SRTP and some recent code changes in FS (I added audio to the name of the variable) Unfortunately none of the 2 options I tried made any difference.
<extension name="is_zrtp_secure" continue="true"> <condition field="${zrtp_secure_media_confirmed}" expression="^true$"> <!-- <condition field="${zrtp_secure_media_confirmed_audio}" expression="^true$">--> <action application="sleep" data="1000"/> <action application="playback" data="misc/call_secured.wav"/> <anti-action application="eval" data="not_secure"/> </condition> </extension>
Any clues as to what's wrong?
Thanks,
Peter
On Tue, Apr 8, 2014 at 2:04 PM, Steven Ayre <steveayre@gmail.com> wrote:
Just rebuild and install as normal, it'll be an upgrade. Your config files should be preserved, but back them up just in case.
On Tuesday, April 8, 2014, Peter Villeneuve <petervnv1@gmail.com> wrote:
I can't believe how stupid I am. Now that you mention it I'm no longer sure I did compile it explicitly with the --enable-zrtp flag. I guess that would explain it. Sorry for wasting your time with such a silly mistake.
Guess I need to start over. Is there a make uninstall or is there a recommended way to remove FS?
On Mon, Apr 7, 2014 at 10:55 PM, Brian West <brian@freeswitch.org>wrote:
You compiled with --enable-zrtp? And you you see the ZRTP activity in the logs when making calls? -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
On Apr 7, 2014, at 4:49 PM, Peter Villeneuve <petervnv1@gmail.com> wrote:
Thanks for helping out Brian.
The problem I have is that FS doesn't seem to recognize the client has ZRTP when I dial 9787 (CSipSimple in this case with ZRTP enabled). I hear the nice lady tell me that my endpoint doesn't have ZRTP but I see in the FS logs that it correctly sees the ZRTP hash.
I've disabled zrtp passthrough in the sip profile and still FS doesn't seem to detect the client has ZRTP and enroll it.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Since I have no android devices to test with, I can’t answer this. my address is on my whois for bkw.org if anyone wishes to send me a Nexsus? :) I have only tested between iOS devices. -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED) On Apr 10, 2014, at 12:53 PM, Peter Villeneuve <petervnv1@gmail.com> wrote:
I did as you said Brian. I think I've given the script plenty of time. When I call 9787 I do get the zrtp is secure message and I see the SAS displayed on my CSipSimple endpoint. However, the detection in the dialplan doesn't seem to work since it always evals as not secure.
-- ZRTP Enrollment Agent session:setVariable("zrtp_secure_media", "true"); session:setVariable("zrtp_enrollment", "true"); session:sleep(600); session:answer(); session:streamFile("zrtp/zrtp-status_securing.wav"); session:sleep(5000); -- Give the agent time to bring up ZRTP.
Despite the fact that I do see the SAS, I also see this error message in the logs [ERR] switch_rtp.c:4987 Error: zRTP protection drop with code 9
This seems to be related to this jira bug http://jira.freeswitch.org/browse/FS-509
Well you could always try out latest jitsi nightly as it also fails to detect zrtp_secure_media in FS. Although I haven't seen the same error message as above in the jitsi calls, I do see some ERROR! Decrypt failed. ID=4:DH s=SRTP authentication failure messages although ZRTP appears to be successfully negotiated. Is the "${zrtp_secure_media_confirmed}" variable correct or should it be " ${zrtp_secure_media_confirmed_audio}" instead? I've tried both to no avail. On Fri, Apr 11, 2014 at 5:30 PM, Brian West <brian@freeswitch.org> wrote:
Since I have no android devices to test with, I can't answer this. my address is on my whois for bkw.org if anyone wishes to send me a Nexsus? :) I have only tested between iOS devices. -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
On Apr 10, 2014, at 12:53 PM, Peter Villeneuve <petervnv1@gmail.com> wrote:
I did as you said Brian. I think I've given the script plenty of time. When I call 9787 I do get the zrtp is secure message and I see the SAS displayed on my CSipSimple endpoint. However, the detection in the dialplan doesn't seem to work since it always evals as not secure.
-- ZRTP Enrollment Agent session:setVariable("zrtp_secure_media", "true"); session:setVariable("zrtp_enrollment", "true"); session:sleep(600); session:answer(); session:streamFile("zrtp/zrtp-status_securing.wav"); session:sleep(5000); -- Give the agent time to bring up ZRTP.
Despite the fact that I do see the SAS, I also see this error message in the logs [ERR] switch_rtp.c:4987 Error: zRTP protection drop with code 9
This seems to be related to this jira bug http://jira.freeswitch.org/browse/FS-509
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (3)
-
Brian West
-
Peter Villeneuve
-
Steven Ayre