Configure SRTP and ZRTP on FusionPBX
Hi, I have recently installed FusionPBX (version 4.0.0-151125) on AWS. My purpose is : 1) Make a secure call using SRTP (end to end SRTP session) I've already make some test using softphone (Linphone and Csip Simple for android), with enabling SRTP settings on both end point. The result is from the Active Calls Status(on FusionPBX Web-UI), the Caller Extension has already secure (there's SRTP crypto on the Secure column). But at the Receiver Extension, there's no SRTP crypto on the Secure column. Are those calls has been secured (end to end)? 2) Make a secure call using ZRTP (end to end ZRTP session) I've already make some test using softphone (Linphone and Csip Simple for android), with enabling ZRTP settings on both end point. The result is from the Active Calls Status(on FusionPBX Web-UI), there's no ZRTP crypto on the Secure column for both Caller Extension and Receiver Extension. So I guest the ZRTP session (end to end) still did not works. I have not make any changes with the configuration on FreeSwitch/FusionPBX, so it's still in default configuration. Any advise would be highly appreciated. Thanks.
End to end zrtp will not show anything at all we are blissfully unaware of the crypto in that case. /b On Mon, Mar 20, 2017 at 10:34 AM Ronggo Kinantoputro <ronggokp@gmail.com> wrote:
Hi,
I have recently installed FusionPBX (version 4.0.0-151125) on AWS.
My purpose is : 1) Make a secure call using SRTP (end to end SRTP session) I've already make some test using softphone (Linphone and Csip Simple for android), with enabling SRTP settings on both end point. The result is from the Active Calls Status(on FusionPBX Web-UI), the Caller Extension has already secure (there's SRTP crypto on the Secure column). But at the Receiver Extension, there's no SRTP crypto on the Secure column. Are those calls has been secured (end to end)?
2) Make a secure call using ZRTP (end to end ZRTP session) I've already make some test using softphone (Linphone and Csip Simple for android), with enabling ZRTP settings on both end point. The result is from the Active Calls Status(on FusionPBX Web-UI), there's no ZRTP crypto on the Secure column for both Caller Extension and Receiver Extension. So I guest the ZRTP session (end to end) still did not works.
I have not make any changes with the configuration on FreeSwitch/FusionPBX, so it's still in default configuration.
Any advise would be highly appreciated.
Thanks. _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com Allison prompts for FreeSWITCH: *https://www.gofundme.com/allison-prompts-for-freeswitch* <https://www.gofundme.com/allison-prompts-for-freeswitch> Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *Skype:*briankwest
Hi Brian, So is it still secure (the call with ZRTP activated on both end point)? Let say if I try to sniff/capture the Voip Call (with ZRTP enabled) using wireshark or cain tools, does those tools can listening to the Voip conversations? Thanks. On Wed, Mar 22, 2017 at 10:31 AM, Brian West <brian@freeswitch.org> wrote:
End to end zrtp will not show anything at all we are blissfully unaware of the crypto in that case. /b
On Mon, Mar 20, 2017 at 10:34 AM Ronggo Kinantoputro <ronggokp@gmail.com> wrote:
Hi,
I have recently installed FusionPBX (version 4.0.0-151125) on AWS.
My purpose is : 1) Make a secure call using SRTP (end to end SRTP session) I've already make some test using softphone (Linphone and Csip Simple for android), with enabling SRTP settings on both end point. The result is from the Active Calls Status(on FusionPBX Web-UI), the Caller Extension has already secure (there's SRTP crypto on the Secure column). But at the Receiver Extension, there's no SRTP crypto on the Secure column. Are those calls has been secured (end to end)?
2) Make a secure call using ZRTP (end to end ZRTP session) I've already make some test using softphone (Linphone and Csip Simple for android), with enabling ZRTP settings on both end point. The result is from the Active Calls Status(on FusionPBX Web-UI), there's no ZRTP crypto on the Secure column for both Caller Extension and Receiver Extension. So I guest the ZRTP session (end to end) still did not works.
I have not make any changes with the configuration on FreeSwitch/FusionPBX, so it's still in default configuration.
Any advise would be highly appreciated.
Thanks. _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*Brian West* brian@freeswitch.org
*Twitter: @FreeSWITCH , @briankwest*
http://www.freeswitchbook.com http://www.freeswitchcookbook.com
Allison prompts for FreeSWITCH:
*https://www.gofundme.com/allison-prompts-for-freeswitch* <https://www.gofundme.com/allison-prompts-for-freeswitch>
Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 <(918)%20420-9001> | *F:*+19184209002 <(918)%20420-9002> | *M:*+1918424WEST (9378) *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Yes its still RTP the payload in the RTP is encrypted. Same with either ZRTP or SRTP, the key exchange is all that differs. /b On Wed, Mar 22, 2017 at 12:23 AM, Ronggo Kinantoputro <ronggokp@gmail.com> wrote:
Hi Brian,
So is it still secure (the call with ZRTP activated on both end point)? Let say if I try to sniff/capture the Voip Call (with ZRTP enabled) using wireshark or cain tools, does those tools can listening to the Voip conversations?
Thanks.
On Wed, Mar 22, 2017 at 10:31 AM, Brian West <brian@freeswitch.org> wrote:
End to end zrtp will not show anything at all we are blissfully unaware of the crypto in that case. /b
On Mon, Mar 20, 2017 at 10:34 AM Ronggo Kinantoputro <ronggokp@gmail.com> wrote:
Hi,
I have recently installed FusionPBX (version 4.0.0-151125) on AWS.
My purpose is : 1) Make a secure call using SRTP (end to end SRTP session) I've already make some test using softphone (Linphone and Csip Simple for android), with enabling SRTP settings on both end point. The result is from the Active Calls Status(on FusionPBX Web-UI), the Caller Extension has already secure (there's SRTP crypto on the Secure column). But at the Receiver Extension, there's no SRTP crypto on the Secure column. Are those calls has been secured (end to end)?
2) Make a secure call using ZRTP (end to end ZRTP session) I've already make some test using softphone (Linphone and Csip Simple for android), with enabling ZRTP settings on both end point. The result is from the Active Calls Status(on FusionPBX Web-UI), there's no ZRTP crypto on the Secure column for both Caller Extension and Receiver Extension. So I guest the ZRTP session (end to end) still did not works.
I have not make any changes with the configuration on FreeSwitch/FusionPBX, so it's still in default configuration.
Any advise would be highly appreciated.
Thanks. ____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*Brian West* brian@freeswitch.org
*Twitter: @FreeSWITCH , @briankwest*
http://www.freeswitchbook.com http://www.freeswitchcookbook.com
Allison prompts for FreeSWITCH:
*https://www.gofundme.com/allison-prompts-for-freeswitch* <https://www.gofundme.com/allison-prompts-for-freeswitch>
Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 <(918)%20420-9001> | *F:*+19184209002 <(918)%20420-9002> | *M:*+1918424WEST (9378) *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com Allison prompts for FreeSWITCH: *https://www.gofundme.com/allison-prompts-for-freeswitch* <https://www.gofundme.com/allison-prompts-for-freeswitch> Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *Skype:*briankwest
Well noted, thanks Brian. By the way for my #1 case, how to successfully establish end to end SRTP session? because I've testing it a couple of time (using Linphone), enabling SRTP on both end point, but the result still same. From Linphone lock icon, only the caller show the secure connection. RG On Wed, Mar 22, 2017 at 7:23 PM, Brian West <brian@freeswitch.org> wrote:
Yes its still RTP the payload in the RTP is encrypted. Same with either ZRTP or SRTP, the key exchange is all that differs.
/b
On Wed, Mar 22, 2017 at 12:23 AM, Ronggo Kinantoputro <ronggokp@gmail.com> wrote:
Hi Brian,
So is it still secure (the call with ZRTP activated on both end point)? Let say if I try to sniff/capture the Voip Call (with ZRTP enabled) using wireshark or cain tools, does those tools can listening to the Voip conversations?
Thanks.
On Wed, Mar 22, 2017 at 10:31 AM, Brian West <brian@freeswitch.org> wrote:
End to end zrtp will not show anything at all we are blissfully unaware of the crypto in that case. /b
On Mon, Mar 20, 2017 at 10:34 AM Ronggo Kinantoputro <ronggokp@gmail.com> wrote:
Hi,
I have recently installed FusionPBX (version 4.0.0-151125) on AWS.
My purpose is : 1) Make a secure call using SRTP (end to end SRTP session) I've already make some test using softphone (Linphone and Csip Simple for android), with enabling SRTP settings on both end point. The result is from the Active Calls Status(on FusionPBX Web-UI), the Caller Extension has already secure (there's SRTP crypto on the Secure column). But at the Receiver Extension, there's no SRTP crypto on the Secure column. Are those calls has been secured (end to end)?
2) Make a secure call using ZRTP (end to end ZRTP session) I've already make some test using softphone (Linphone and Csip Simple for android), with enabling ZRTP settings on both end point. The result is from the Active Calls Status(on FusionPBX Web-UI), there's no ZRTP crypto on the Secure column for both Caller Extension and Receiver Extension. So I guest the ZRTP session (end to end) still did not works.
I have not make any changes with the configuration on FreeSwitch/FusionPBX, so it's still in default configuration.
Any advise would be highly appreciated.
Thanks. ____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/free switch-users http://www.freeswitch.org
--
*Brian West* brian@freeswitch.org
*Twitter: @FreeSWITCH , @briankwest*
http://www.freeswitchbook.com http://www.freeswitchcookbook.com
Allison prompts for FreeSWITCH:
*https://www.gofundme.com/allison-prompts-for-freeswitch* <https://www.gofundme.com/allison-prompts-for-freeswitch>
Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 <(918)%20420-9001> | *F:*+19184209002 <(918)%20420-9002> | *M:*+1918424WEST (9378) *Skype:*briankwest
____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*Brian West* brian@freeswitch.org
*Twitter: @FreeSWITCH , @briankwest*
http://www.freeswitchbook.com http://www.freeswitchcookbook.com
Allison prompts for FreeSWITCH:
*https://www.gofundme.com/allison-prompts-for-freeswitch* <https://www.gofundme.com/allison-prompts-for-freeswitch>
Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 <(918)%20420-9001> | *F:*+19184209002 <(918)%20420-9002> | *M:*+1918424WEST (9378) *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (2)
-
Brian West
-
Ronggo Kinantoputro