TLS but OPTIONS requests in clear text from port 5060
Hello, I have successfully set up Snom phones for TLS and SRTP so the whole communication should be encrypted. However I see OPTIONS SIP requests in clear text coming from Freeswitch. Is there a chance to avoid this? Best regards Peter
Turn off all the nat settings. /b On Aug 6, 2008, at 7:47 AM, Peter P GMX wrote:
Hello,
I have successfully set up Snom phones for TLS and SRTP so the whole communication should be encrypted. However I see OPTIONS SIP requests in clear text coming from Freeswitch.
Is there a chance to avoid this?
Best regards Peter
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Does this work? What about when the phone IS behind nat? We should use the same transport for the options that we got on. The register or invite. If that is not the case can you please file a bug on jira.freeswitch.org with all the traces so we can look into this further? Mike On Aug 6, 2008, at 8:05 AM, Brian West <brian@freeswitch.org> wrote:
Turn off all the nat settings.
/b
On Aug 6, 2008, at 7:47 AM, Peter P GMX wrote:
Hello,
I have successfully set up Snom phones for TLS and SRTP so the whole communication should be encrypted. However I see OPTIONS SIP requests in clear text coming from Freeswitch.
Is there a chance to avoid this?
Best regards Peter
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hello Michael, now that I have set all UAs to TLS, there are no more OPTIONS requests in clear text. The point was that I had 2 accounts registered on one Snom Phone, one account with SIP (e.e.1001), another one TLS (e.g.1000). In this case the Snom phone starts to respond on OPTIONS requests on the SIP account (1001) with SIP answers from the TLS account (1000) which is wrong, of course. As long as I keep only TLS accounts registered on FS, its fine. Thanks for your support Peter Michael Jerris schrieb:
Does this work? What about when the phone IS behind nat? We should use the same transport for the options that we got on. The register or invite. If that is not the case can you please file a bug on jira.freeswitch.org with all the traces so we can look into this further?
Mike
On Aug 6, 2008, at 8:05 AM, Brian West <brian@freeswitch.org> wrote:
Turn off all the nat settings.
/b
On Aug 6, 2008, at 7:47 AM, Peter P GMX wrote:
Hello,
I have successfully set up Snom phones for TLS and SRTP so the whole communication should be encrypted. However I see OPTIONS SIP requests in clear text coming from Freeswitch.
Is there a chance to avoid this?
Best regards Peter
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ Freeswitch-users mailing list Freeswitch-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (3)
-
Brian West
-
Michael Jerris
-
Peter P GMX