Hi guys, The latest version of Chrome (35) stopped supporting SDES and now requires dtls-srtp. So now, I need to configure my FreeSWITCH to work with dtls-srtp. I see that my installation has dtls-srtp.crt and key files under /usr/local/freeswitch/certs/ but I could not find much info on how to enable it. Do I need to replace these with my own generated keys? Where in the config do I specify what directory the keys are in? To complicate things I am on FS 1.5.6b from about 8 months ago. It should have dtls-srtp support though, right? This is a fairly urgent matter for us - we dropped the ball and did not catch this change in time - and I'd be happy to consider commercial support from the FS team if available. If so, please contact me via email directly.
You cannot run old version of FS when it comes to WebRTC. Its a constantly moving target and countless things have been done in 8 months. It has always supported dtls since the beginning however we have run into some issues with interop with chrome and certificate sizes and MTU. You're best bet is to update the FS to latest master. Chrome gets to update, its only fair that FS does too..... On Thu, May 22, 2014 at 11:16 AM, Oleg Stolyar <olegstolyar@gmail.com>wrote:
Hi guys,
The latest version of Chrome (35) stopped supporting SDES and now requires dtls-srtp. So now, I need to configure my FreeSWITCH to work with dtls-srtp.
I see that my installation has dtls-srtp.crt and key files under /usr/local/freeswitch/certs/ but I could not find much info on how to enable it.
Do I need to replace these with my own generated keys?
Where in the config do I specify what directory the keys are in?
To complicate things I am on FS 1.5.6b from about 8 months ago. It should have dtls-srtp support though, right?
This is a fairly urgent matter for us - we dropped the ball and did not catch this change in time - and I'd be happy to consider commercial support from the FS team if available. If so, please contact me via email directly.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II ♬ @anthmfs ♬ @FreeSWITCH ♬ ☞ http://freeswitch.org/ ☞ http://cluecon.com/ ☞ http://twitter.com/FreeSWITCH ☞ irc.freenode.net #freeswitch ☞ *http://freeswitch.org/g+ <http://freeswitch.org/g+>* ClueCon Weekly Development Call ☎ sip:888@conference.freeswitch.org ☎ +19193869900
s/you're/your/ On Thu, May 22, 2014 at 11:55 AM, Anthony Minessale < anthony.minessale@gmail.com> wrote:
You cannot run old version of FS when it comes to WebRTC. Its a constantly moving target and countless things have been done in 8 months. It has always supported dtls since the beginning however we have run into some issues with interop with chrome and certificate sizes and MTU. You're best bet is to update the FS to latest master. Chrome gets to update, its only fair that FS does too.....
On Thu, May 22, 2014 at 11:16 AM, Oleg Stolyar <olegstolyar@gmail.com>wrote:
Hi guys,
The latest version of Chrome (35) stopped supporting SDES and now requires dtls-srtp. So now, I need to configure my FreeSWITCH to work with dtls-srtp.
I see that my installation has dtls-srtp.crt and key files under /usr/local/freeswitch/certs/ but I could not find much info on how to enable it.
Do I need to replace these with my own generated keys?
Where in the config do I specify what directory the keys are in?
To complicate things I am on FS 1.5.6b from about 8 months ago. It should have dtls-srtp support though, right?
This is a fairly urgent matter for us - we dropped the ball and did not catch this change in time - and I'd be happy to consider commercial support from the FS team if available. If so, please contact me via email directly.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II ♬ @anthmfs ♬ @FreeSWITCH ♬
☞ http://freeswitch.org/ ☞ http://cluecon.com/ ☞ http://twitter.com/FreeSWITCH ☞ irc.freenode.net #freeswitch ☞ *http://freeswitch.org/g+ <http://freeswitch.org/g+>*
ClueCon Weekly Development Call ☎ sip:888@conference.freeswitch.org ☎ +19193869900
-- Anthony Minessale II ♬ @anthmfs ♬ @FreeSWITCH ♬ ☞ http://freeswitch.org/ ☞ http://cluecon.com/ ☞ http://twitter.com/FreeSWITCH ☞ irc.freenode.net #freeswitch ☞ *http://freeswitch.org/g+ <http://freeswitch.org/g+>* ClueCon Weekly Development Call ☎ sip:888@conference.freeswitch.org ☎ +19193869900
Thanks Anthony, I tried upgrading to master but ran into several issues in ./configuration where it was looking for later versions of libraries than I had available. Like sqlite3 and some others. I am on CentOS and tried to do yum install to get the latest but still only got versions older than the installation required. For example I can only get sqlite 3.3.6 but the installation asks for a higher version. Do I need to locally compile all these libraries or am I missing something? On Thu, May 22, 2014 at 9:55 AM, Anthony Minessale < anthony.minessale@gmail.com> wrote:
You cannot run old version of FS when it comes to WebRTC. Its a constantly moving target and countless things have been done in 8 months. It has always supported dtls since the beginning however we have run into some issues with interop with chrome and certificate sizes and MTU. You're best bet is to update the FS to latest master. Chrome gets to update, its only fair that FS does too.....
On Thu, May 22, 2014 at 11:16 AM, Oleg Stolyar <olegstolyar@gmail.com>wrote:
Hi guys,
The latest version of Chrome (35) stopped supporting SDES and now requires dtls-srtp. So now, I need to configure my FreeSWITCH to work with dtls-srtp.
I see that my installation has dtls-srtp.crt and key files under /usr/local/freeswitch/certs/ but I could not find much info on how to enable it.
Do I need to replace these with my own generated keys?
Where in the config do I specify what directory the keys are in?
To complicate things I am on FS 1.5.6b from about 8 months ago. It should have dtls-srtp support though, right?
This is a fairly urgent matter for us - we dropped the ball and did not catch this change in time - and I'd be happy to consider commercial support from the FS team if available. If so, please contact me via email directly.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II ♬ @anthmfs ♬ @FreeSWITCH ♬
☞ http://freeswitch.org/ ☞ http://cluecon.com/ ☞ http://twitter.com/FreeSWITCH ☞ irc.freenode.net #freeswitch ☞ *http://freeswitch.org/g+ <http://freeswitch.org/g+>*
ClueCon Weekly Development Call ☎ sip:888@conference.freeswitch.org ☎ +19193869900
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
If you’re using CentOS 5.x you MUST be on 5.10 64bit, 32bit is broken, wget -o Makefile http://bkw.org/Makefile make deps Problem solved for 5.10. -- Brian West brian@freeswitch.org Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED) On May 22, 2014, at 12:22 PM, Oleg Stolyar <olegstolyar@gmail.com> wrote:
For example I can only get sqlite 3.3.6 but the installation asks for a higher version. Do I need to locally compile all these libraries or am I missing something?
Thanks Brian, of course I am on 5.9 64bit, so I am guessing this won't work for me :-) In any case, are there instructions on how to set up dtls-srtp for the latest FS? Or will it work out of the box? On Thu, May 22, 2014 at 10:31 AM, Brian West <brian@freeswitch.org> wrote:
If you’re using CentOS 5.x you MUST be on 5.10 64bit, 32bit is broken,
wget -o Makefile http://bkw.org/Makefile
make deps
Problem solved for 5.10.
-- Brian West brian@freeswitch.org
Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
On May 22, 2014, at 12:22 PM, Oleg Stolyar <olegstolyar@gmail.com> wrote:
For example I can only get sqlite 3.3.6 but the installation asks for a higher version. Do I need to locally compile all these libraries or am I missing something?
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Try it, it may JUST work. -- Brian West brian@freeswitch.org Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED) On May 22, 2014, at 12:57 PM, Oleg Stolyar <olegstolyar@gmail.com> wrote:
Thanks Brian, of course I am on 5.9 64bit, so I am guessing this won't work for me :-)
In any case, are there instructions on how to set up dtls-srtp for the latest FS? Or will it work out of the box?
lets get it built first, it should just work and generate the certs required automatically… -- Brian West brian@freeswitch.org Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED) On May 22, 2014, at 12:57 PM, Oleg Stolyar <olegstolyar@gmail.com> wrote:
dtls-srtp for the latest FS? Or will it work out of the box?
Will do :-) On Thu, May 22, 2014 at 11:13 AM, Brian West <brian@freeswitch.org> wrote:
lets get it built first, it should just work and generate the certs required automatically…
-- Brian West brian@freeswitch.org
Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
On May 22, 2014, at 12:57 PM, Oleg Stolyar <olegstolyar@gmail.com> wrote:
dtls-srtp for the latest FS? Or will it work out of the box?
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
I just love when things "just" work (appreciating how much work it was for the team to make it so!) Brian, your make file worked fine on CentOS 5.9 64bit. And the latest FS is working fine with the latest Chrome! On Thu, May 22, 2014 at 11:20 AM, Oleg Stolyar <olegstolyar@gmail.com>wrote:
Will do :-)
On Thu, May 22, 2014 at 11:13 AM, Brian West <brian@freeswitch.org> wrote:
lets get it built first, it should just work and generate the certs required automatically…
-- Brian West brian@freeswitch.org
Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
On May 22, 2014, at 12:57 PM, Oleg Stolyar <olegstolyar@gmail.com> wrote:
dtls-srtp for the latest FS? Or will it work out of the box?
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Looks like I am just on a too old version of CentOS. Let me figure out a way to switch (probably to Ubuntu) and then I'll try it again. Still, are there instructions on how to set up dtls-srtp? Or will it just work out of the box? On Thu, May 22, 2014 at 10:22 AM, Oleg Stolyar <olegstolyar@gmail.com>wrote:
Thanks Anthony, I tried upgrading to master but ran into several issues in ./configuration where it was looking for later versions of libraries than I had available. Like sqlite3 and some others. I am on CentOS and tried to do yum install to get the latest but still only got versions older than the installation required.
For example I can only get sqlite 3.3.6 but the installation asks for a higher version. Do I need to locally compile all these libraries or am I missing something?
On Thu, May 22, 2014 at 9:55 AM, Anthony Minessale < anthony.minessale@gmail.com> wrote:
You cannot run old version of FS when it comes to WebRTC. Its a constantly moving target and countless things have been done in 8 months. It has always supported dtls since the beginning however we have run into some issues with interop with chrome and certificate sizes and MTU. You're best bet is to update the FS to latest master. Chrome gets to update, its only fair that FS does too.....
On Thu, May 22, 2014 at 11:16 AM, Oleg Stolyar <olegstolyar@gmail.com>wrote:
Hi guys,
The latest version of Chrome (35) stopped supporting SDES and now requires dtls-srtp. So now, I need to configure my FreeSWITCH to work with dtls-srtp.
I see that my installation has dtls-srtp.crt and key files under /usr/local/freeswitch/certs/ but I could not find much info on how to enable it.
Do I need to replace these with my own generated keys?
Where in the config do I specify what directory the keys are in?
To complicate things I am on FS 1.5.6b from about 8 months ago. It should have dtls-srtp support though, right?
This is a fairly urgent matter for us - we dropped the ball and did not catch this change in time - and I'd be happy to consider commercial support from the FS team if available. If so, please contact me via email directly.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II ♬ @anthmfs ♬ @FreeSWITCH ♬
☞ http://freeswitch.org/ ☞ http://cluecon.com/ ☞ http://twitter.com/FreeSWITCH ☞ irc.freenode.net #freeswitch ☞ *http://freeswitch.org/g+ <http://freeswitch.org/g+>*
ClueCon Weekly Development Call ☎ sip:888@conference.freeswitch.org ☎ +19193869900
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Switch to Debian 7, I can build a fully working 5.10 system capable of doing DTLS without a single problem with that Makefile I posted. -- Brian West brian@freeswitch.org Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED) On May 22, 2014, at 12:35 PM, Oleg Stolyar <olegstolyar@gmail.com> wrote:
Looks like I am just on a too old version of CentOS. Let me figure out a way to switch (probably to Ubuntu) and then I'll try it again.
Still, are there instructions on how to set up dtls-srtp? Or will it just work out of the box?
participants (3)
-
Anthony Minessale
-
Brian West
-
Oleg Stolyar