The TLS wiki page talks about [1] Freeswitch being able to act as a past though proxy for a SIP phone. Turning an unencrypted SIP+RTP session into a SIPS+SRTP session. Is there howto guide for the above? I'm also wondering if Freeswitch could do a drop-in encryption. ie. Phone <-> Asterisk replaced with Phone <-> FS <==> FS <-> Asterisk, where <==> is encrypted. Nicholas [1] http://wiki.freeswitch.org/wiki/Tls#Hybrid_Encryption
Or you could do Phone <-> FS <=====> FS <-> Phone... ;) Less complex. /b On Jan 27, 2010, at 11:54 PM, Nicholas Lee wrote:
The TLS wiki page talks about [1] Freeswitch being able to act as a past though proxy for a SIP phone. Turning an unencrypted SIP+RTP session into a SIPS+SRTP session.
Is there howto guide for the above?
I'm also wondering if Freeswitch could do a drop-in encryption. ie. Phone <-> Asterisk replaced with Phone <-> FS <==> FS <-> Asterisk, where <==> is encrypted.
Nicholas
Unfortunately it's not going to cover every situation. Nicholas On Fri, Jan 29, 2010 at 8:19 AM, Brian West <brian@freeswitch.org> wrote:
Or you could do Phone <-> FS <=====> FS <-> Phone...
;) Less complex.
/b
On Jan 27, 2010, at 11:54 PM, Nicholas Lee wrote:
The TLS wiki page talks about [1] Freeswitch being able to act as a past though proxy for a SIP phone. Turning an unencrypted SIP+RTP session into a SIPS+SRTP session.
Is there howto guide for the above?
I'm also wondering if Freeswitch could do a drop-in encryption. ie. Phone <-> Asterisk replaced with Phone <-> FS <==> FS <-> Asterisk, where <==> is encrypted.
Nicholas
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Is there a way to do it transparently? The FS proxies will past though the extension creds. On Fri, Jan 29, 2010 at 1:52 PM, Brian West <brian@freeswitch.org> wrote:
Then yes you could use FreeSWITCH to augment your Asterisk install and enable encryption from site to site.
/b
Unfortunately it's not going to cover every situation.
Nicholas
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Freeswitch isn't a proxy, and no, we don't provide support for passthrough auth like this. A proxy would, but not sure of any proxy based solution that would do the srtp work for you. Mike On Jan 28, 2010, at 9:08 PM, Nicholas Lee wrote:
Is there a way to do it transparently? The FS proxies will past though the extension creds.
On Fri, Jan 29, 2010 at 1:52 PM, Brian West <brian@freeswitch.org> wrote: Then yes you could use FreeSWITCH to augment your Asterisk install and enable encryption from site to site.
/b
Unfortunately it's not going to cover every situation.
Nicholas
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Ok, so when [1] talks about Freeswitch acting as intermediary in order to encrypt further communications between an end node SIP device and the main PBX, it means that the FS intermediary node is actually a full SIP node. The phones will need to auth to this and any calls will be routed to trunks via the dial plan. [1] http://wiki.freeswitch.org/wiki/SIP_TLS#Hybrid_Encryption On Sat, Jan 30, 2010 at 8:50 PM, Michael Jerris <mike@jerris.com> wrote:
Freeswitch isn't a proxy, and no, we don't provide support for passthrough auth like this. A proxy would, but not sure of any proxy based solution that would do the srtp work for you.
Mike
On Jan 28, 2010, at 9:08 PM, Nicholas Lee wrote:
Is there a way to do it transparently? The FS proxies will past though the extension creds.
On Fri, Jan 29, 2010 at 1:52 PM, Brian West <brian@freeswitch.org> wrote:
Then yes you could use FreeSWITCH to augment your Asterisk install and enable encryption from site to site.
/b
Unfortunately it's not going to cover every situation.
Nicholas
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (3)
-
Brian West
-
Michael Jerris
-
Nicholas Lee