SRTP with AES 256
Hi, I'm trying to make sip calls with encryption. Everything works fine with AES 128, but with AES 256 there is no audio but also no error reported. How do I use AES 256? Is it implemented in FreeSWITCH already? Thanks Melanie
Yes, First off what revision of FreeSWITCH are you using? And what endpoints are you working with? On Wed, Jan 28, 2015 at 9:55 AM, Melanie Treitinger < treitinger@as-infodienste.de> wrote:
Hi, I'm trying to make sip calls with encryption. Everything works fine with AES 128, but with AES 256 there is no audio but also no error reported.
How do I use AES 256? Is it implemented in FreeSWITCH already?
Thanks Melanie
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
I'm using Version 1.5.15b git d199060 2015-01-09 00:01:19Z 32bit Endpoints are Innovaphone IP810 telephone system, registered as gateway, and Innovaphone IP241 phone wich is calling e.g. Tetris via this gateway. In my dialplan I have set <action application="export" data="rtp_secure_media=mandatory:AES_CM_128_HMAC_SHA1_80,AES_CM_128_HMAC_SHA1_32"/> With AES128, I can hear Tetris. When I change this to "AES_CM_256_HMAC_SHA1_80", which I would prefer, I hear nothing. In the file mime.types I see only "audio/rtp-enc-aescm128". Do you need more information? Am 28.01.2015 um 17:01 schrieb Brian West:
Yes, First off what revision of FreeSWITCH are you using? And what endpoints are you working with?
On Wed, Jan 28, 2015 at 9:55 AM, Melanie Treitinger <treitinger@as-infodienste.de <mailto:treitinger@as-infodienste.de>> wrote:
Hi, I'm trying to make sip calls with encryption. Everything works fine with AES 128, but with AES 256 there is no audio but also no error reported.
How do I use AES 256? Is it implemented in FreeSWITCH already?
Thanks Melanie
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
E-Mail ist virenfrei. Von AVG überprüft - www.avg.de <http://www.avg.de> Version: 2013.0.3495 / Virendatenbank: 4257/9014 - Ausgabedatum: 28.01.2015
Those phones probably do not support it, I'm unaware of any endpoints currently other than freeswitch that can do big AES. On Thu, Jan 29, 2015 at 1:53 AM, Melanie Treitinger < treitinger@as-infodienste.de> wrote:
I'm using Version 1.5.15b git d199060 2015-01-09 00:01:19Z 32bit
Endpoints are Innovaphone IP810 telephone system, registered as gateway, and Innovaphone IP241 phone wich is calling e.g. Tetris via this gateway.
In my dialplan I have set <action application="export"
data="rtp_secure_media=mandatory:AES_CM_128_HMAC_SHA1_80,AES_CM_128_HMAC_SHA1_32"/> With AES128, I can hear Tetris.
When I change this to "AES_CM_256_HMAC_SHA1_80", which I would prefer, I hear nothing.
In the file mime.types I see only "audio/rtp-enc-aescm128".
Do you need more information?
Am 28.01.2015 um 17:01 schrieb Brian West:
Yes, First off what revision of FreeSWITCH are you using? And what endpoints are you working with?
On Wed, Jan 28, 2015 at 9:55 AM, Melanie Treitinger <treitinger@as-infodienste.de <mailto:treitinger@as-infodienste.de>> wrote:
Hi, I'm trying to make sip calls with encryption. Everything works fine with AES 128, but with AES 256 there is no audio but also no error reported.
How do I use AES 256? Is it implemented in FreeSWITCH already?
Thanks Melanie
_________________________________________________________________________
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:
http://lists.freeswitch.org/mailman/options/freeswitch-users
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
E-Mail ist virenfrei. Von AVG überprüft - www.avg.de <http://www.avg.de> Version: 2013.0.3495 / Virendatenbank: 4257/9014 - Ausgabedatum:
28.01.2015
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
Yes, they can use AES 256. We have been using this encryption already without freeswitch. See http://wiki.innovaphone.com/index.php?title=Howto:SIPS_will_work_with_V7 Am 29.01.2015 um 15:49 schrieb Brian West:
Those phones probably do not support it, I'm unaware of any endpoints currently other than freeswitch that can do big AES.
On Thu, Jan 29, 2015 at 1:53 AM, Melanie Treitinger <treitinger@as-infodienste.de <mailto:treitinger@as-infodienste.de>> wrote:
I'm using Version 1.5.15b git d199060 2015-01-09 00:01:19Z 32bit
Endpoints are Innovaphone IP810 telephone system, registered as gateway, and Innovaphone IP241 phone wich is calling e.g. Tetris via this gateway.
In my dialplan I have set <action application="export" data="rtp_secure_media=mandatory:AES_CM_128_HMAC_SHA1_80,AES_CM_128_HMAC_SHA1_32"/> With AES128, I can hear Tetris.
When I change this to "AES_CM_256_HMAC_SHA1_80", which I would prefer, I hear nothing.
In the file mime.types I see only "audio/rtp-enc-aescm128".
Do you need more information?
Am 28.01.2015 um 17:01 schrieb Brian West: > Yes, First off what revision of FreeSWITCH are you using? And what > endpoints are you working with? > > On Wed, Jan 28, 2015 at 9:55 AM, Melanie Treitinger > <treitinger@as-infodienste.de <mailto:treitinger@as-infodienste.de> <mailto:treitinger@as-infodienste.de <mailto:treitinger@as-infodienste.de>>> wrote: > > Hi, I'm trying to make sip calls with encryption. > Everything works fine with AES 128, but with AES 256 there is no audio > but also no error reported. > > How do I use AES 256? Is it implemented in FreeSWITCH already? > > Thanks > Melanie > > _________________________________________________________________________ > Professional FreeSWITCH Consulting Services: > consulting@freeswitch.org <mailto:consulting@freeswitch.org> <mailto:consulting@freeswitch.org <mailto:consulting@freeswitch.org>> >http://www.freeswitchsolutions.com > > Official FreeSWITCH Sites >http://www.freeswitch.org >http://confluence.freeswitch.org >http://www.cluecon.com > > FreeSWITCH-users mailing list >FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> > <mailto:FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org>> >http://lists.freeswitch.org/mailman/listinfo/freeswitch-users > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users >http://www.freeswitch.org > > > > > -- > > */Brian West/* > brian@freeswitch.org <mailto:brian@freeswitch.org> <mailto:brian@freeswitch.org <mailto:brian@freeswitch.org>> > > > */Twitter: @FreeSWITCH , @briankwest/* > http://www.freeswitchbook.com > http://www.freeswitchcookbook.com > > *T:*+19184209001 <tel:%2B19184209001> | *F:*+19184209002 <tel:%2B19184209002> | *M:*+1918424WEST (9378) > *iNUM:*+883 5100 1420 9001 <tel:%2B883%205100%201420%209001> | *ISN:*410*543 | *Skype:*briankwest > > > > _________________________________________________________________________ > Professional FreeSWITCH Consulting Services: >consulting@freeswitch.org <mailto:consulting@freeswitch.org> >http://www.freeswitchsolutions.com > > Official FreeSWITCH Sites >http://www.freeswitch.org >http://confluence.freeswitch.org >http://www.cluecon.com > > FreeSWITCH-users mailing list >FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> >http://lists.freeswitch.org/mailman/listinfo/freeswitch-users > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users >http://www.freeswitch.org > > > > E-Mail ist virenfrei. > Von AVG überprüft - www.avg.de <http://www.avg.de> <http://www.avg.de> > Version: 2013.0.3495 / Virendatenbank: 4257/9014 - Ausgabedatum: 28.01.2015 >
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
E-Mail ist virenfrei. Von AVG überprüft - www.avg.de <http://www.avg.de> Version: 2013.0.3495 / Virendatenbank: 4257/9020 - Ausgabedatum: 29.01.2015
Does anyone have any idea or experiences on this issue? Am 29.01.2015 um 16:04 schrieb Melanie Treitinger:
Yes, they can use AES 256. We have been using this encryption already without freeswitch.
See http://wiki.innovaphone.com/index.php?title=Howto:SIPS_will_work_with_V7
Am 29.01.2015 um 15:49 schrieb Brian West:
Those phones probably do not support it, I'm unaware of any endpoints currently other than freeswitch that can do big AES.
On Thu, Jan 29, 2015 at 1:53 AM, Melanie Treitinger <treitinger@as-infodienste.de <mailto:treitinger@as-infodienste.de>> wrote:
I'm using Version 1.5.15b git d199060 2015-01-09 00:01:19Z 32bit
Endpoints are Innovaphone IP810 telephone system, registered as gateway, and Innovaphone IP241 phone wich is calling e.g. Tetris via this gateway.
In my dialplan I have set <action application="export" data="rtp_secure_media=mandatory:AES_CM_128_HMAC_SHA1_80,AES_CM_128_HMAC_SHA1_32"/> With AES128, I can hear Tetris.
When I change this to "AES_CM_256_HMAC_SHA1_80", which I would prefer, I hear nothing.
In the file mime.types I see only "audio/rtp-enc-aescm128".
Do you need more information?
Am 28.01.2015 um 17:01 schrieb Brian West: > Yes, First off what revision of FreeSWITCH are you using? And what > endpoints are you working with? > > On Wed, Jan 28, 2015 at 9:55 AM, Melanie Treitinger > <treitinger@as-infodienste.de <mailto:treitinger@as-infodienste.de> <mailto:treitinger@as-infodienste.de <mailto:treitinger@as-infodienste.de>>> wrote: > > Hi, I'm trying to make sip calls with encryption. > Everything works fine with AES 128, but with AES 256 there is no audio > but also no error reported. > > How do I use AES 256? Is it implemented in FreeSWITCH already? > > Thanks > Melanie > > _________________________________________________________________________ > Professional FreeSWITCH Consulting Services: > consulting@freeswitch.org <mailto:consulting@freeswitch.org> <mailto:consulting@freeswitch.org <mailto:consulting@freeswitch.org>> >http://www.freeswitchsolutions.com > > Official FreeSWITCH Sites >http://www.freeswitch.org >http://confluence.freeswitch.org >http://www.cluecon.com > > FreeSWITCH-users mailing list >FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> > <mailto:FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org>> >http://lists.freeswitch.org/mailman/listinfo/freeswitch-users > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users >http://www.freeswitch.org > > > > > -- > > */Brian West/* > brian@freeswitch.org <mailto:brian@freeswitch.org> <mailto:brian@freeswitch.org <mailto:brian@freeswitch.org>> > > > */Twitter: @FreeSWITCH , @briankwest/* > http://www.freeswitchbook.com > http://www.freeswitchcookbook.com > > *T:*+19184209001 <tel:%2B19184209001> | *F:*+19184209002 <tel:%2B19184209002> | *M:*+1918424WEST (9378) > *iNUM:*+883 5100 1420 9001 <tel:%2B883%205100%201420%209001> | *ISN:*410*543 | *Skype:*briankwest > > > > _________________________________________________________________________ > Professional FreeSWITCH Consulting Services: >consulting@freeswitch.org <mailto:consulting@freeswitch.org> >http://www.freeswitchsolutions.com > > Official FreeSWITCH Sites >http://www.freeswitch.org >http://confluence.freeswitch.org >http://www.cluecon.com > > FreeSWITCH-users mailing list >FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> >http://lists.freeswitch.org/mailman/listinfo/freeswitch-users > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users >http://www.freeswitch.org > > > > E-Mail ist virenfrei. > Von AVG überprüft - www.avg.de <http://www.avg.de> <http://www.avg.de> > Version: 2013.0.3495 / Virendatenbank: 4257/9014 - Ausgabedatum: 28.01.2015 >
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
E-Mail ist virenfrei. Von AVG überprüft - www.avg.de <http://www.avg.de> Version: 2013.0.3495 / Virendatenbank: 4257/9020 - Ausgabedatum: 29.01.2015
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
----- E-Mail ist virenfrei. Von AVG überprüft - www.avg.de Version: 2013.0.3495 / Virendatenbank: 4257/9020 - Ausgabedatum: 29.01.2015
participants (2)
-
Brian West
-
Melanie Treitinger