Using SIPS and not SIP TLS
Hi there, I am in the middle of an argument with a softphone vendor over how to handle SIP and TLS. They support TLS with SIP and TLS with SIPS. If I pick TLS with SIPS, the softphone can lookup my SRV records and register on my FS box. However, it comes through with a transport=tcp as a contact parameter. If I use TLS with SIP, the softphone will ignore my _SIPS._TCP records but come through with a transport=tls. TLS with SIP and TLS with SIPS are almost identical with SIPS ensuring, in theory, that all signaling hops will use TLS. This, however, requires that FreeSWITCH uses a SIPS uri scheme to contact my endpoint and encapsulate in TLS regardless of the transport parameter. What do you suggest? Here is my ticket with them: https://www.acrobits.net/hesk/ticket.php?track=YQL-TRS-J3M4 Best, Emrah
I've spoke with Acrobits about this, The behavior is correct for TLS with SIPS, but confirming if maybe its ab ug on the TLS with SIP to ignore the _sips._tcp src record, I do recall Polycom and Lync using _sip._tls in their srv records. /b On Tue, Oct 11, 2016 at 6:35 AM, Emrah <lists@kavun.ch> wrote:
Hi there, I am in the middle of an argument with a softphone vendor over how to handle SIP and TLS. They support TLS with SIP and TLS with SIPS. If I pick TLS with SIPS, the softphone can lookup my SRV records and register on my FS box. However, it comes through with a transport=tcp as a contact parameter. If I use TLS with SIP, the softphone will ignore my _SIPS._TCP records but come through with a transport=tls. TLS with SIP and TLS with SIPS are almost identical with SIPS ensuring, in theory, that all signaling hops will use TLS. This, however, requires that FreeSWITCH uses a SIPS uri scheme to contact my endpoint and encapsulate in TLS regardless of the transport parameter.
What do you suggest?
Here is my ticket with them: https://www.acrobits.net/hesk/ ticket.php?track=YQL-TRS-J3M4
Best, Emrah _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com (50% Discount using code FreeSwitch50) http://www.freeswitchcookbook.com (50% Discount using code FreeSwitch50) https://www.gofundme.com/freeswitch_ubuntu Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
Confirmed us _sip._tls and it should work. /b On Tue, Oct 11, 2016 at 9:46 AM, Brian West <brian@freeswitch.org> wrote:
I've spoke with Acrobits about this, The behavior is correct for TLS with SIPS, but confirming if maybe its ab ug on the TLS with SIP to ignore the _sips._tcp src record, I do recall Polycom and Lync using _sip._tls in their srv records.
/b
On Tue, Oct 11, 2016 at 6:35 AM, Emrah <lists@kavun.ch> wrote:
Hi there, I am in the middle of an argument with a softphone vendor over how to handle SIP and TLS. They support TLS with SIP and TLS with SIPS. If I pick TLS with SIPS, the softphone can lookup my SRV records and register on my FS box. However, it comes through with a transport=tcp as a contact parameter. If I use TLS with SIP, the softphone will ignore my _SIPS._TCP records but come through with a transport=tls. TLS with SIP and TLS with SIPS are almost identical with SIPS ensuring, in theory, that all signaling hops will use TLS. This, however, requires that FreeSWITCH uses a SIPS uri scheme to contact my endpoint and encapsulate in TLS regardless of the transport parameter.
What do you suggest?
Here is my ticket with them: https://www.acrobits.net/hesk/ ticket.php?track=YQL-TRS-J3M4
Best, Emrah _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*Brian West* brian@freeswitch.org
*Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com (50% Discount using code FreeSwitch50) http://www.freeswitchcookbook.com (50% Discount using code FreeSwitch50) https://www.gofundme.com/freeswitch_ubuntu
Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com (50% Discount using code FreeSwitch50) http://www.freeswitchcookbook.com (50% Discount using code FreeSwitch50) https://www.gofundme.com/freeswitch_ubuntu Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
Thanks for this Brian! I will test and report back. In any case, is there a way to make FreeSWITCH understand SIPS whereby it would engage TLS and contact endpoints using a SIPS URI? Thanks
On Oct 11, 2016, at 4:48 PM, Brian West <brian@freeswitch.org> wrote:
Confirmed us _sip._tls and it should work.
/b
On Tue, Oct 11, 2016 at 9:46 AM, Brian West <brian@freeswitch.org <mailto:brian@freeswitch.org>> wrote: I've spoke with Acrobits about this, The behavior is correct for TLS with SIPS, but confirming if maybe its ab ug on the TLS with SIP to ignore the _sips._tcp src record, I do recall Polycom and Lync using _sip._tls in their srv records.
/b
On Tue, Oct 11, 2016 at 6:35 AM, Emrah <lists@kavun.ch <mailto:lists@kavun.ch>> wrote: Hi there, I am in the middle of an argument with a softphone vendor over how to handle SIP and TLS. They support TLS with SIP and TLS with SIPS. If I pick TLS with SIPS, the softphone can lookup my SRV records and register on my FS box. However, it comes through with a transport=tcp as a contact parameter. If I use TLS with SIP, the softphone will ignore my _SIPS._TCP records but come through with a transport=tls. TLS with SIP and TLS with SIPS are almost identical with SIPS ensuring, in theory, that all signaling hops will use TLS. This, however, requires that FreeSWITCH uses a SIPS uri scheme to contact my endpoint and encapsulate in TLS regardless of the transport parameter.
What do you suggest?
Here is my ticket with them: https://www.acrobits.net/hesk/ticket.php?track=YQL-TRS-J3M4 <https://www.acrobits.net/hesk/ticket.php?track=YQL-TRS-J3M4>
Best, Emrah _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org <http://www.freeswitch.org/>
-- Brian West brian@freeswitch.org <mailto:brian@freeswitch.org>
Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com <http://www.freeswitchbook.com/> (50% Discount using code FreeSwitch50) http://www.freeswitchcookbook.com <http://www.freeswitchcookbook.com/> (50% Discount using code FreeSwitch50) https://www.gofundme.com/freeswitch_ubuntu <https://www.gofundme.com/freeswitch_ubuntu> Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> T:+19184209001 <tel:%2B19184209001> | F:+19184209002 <tel:%2B19184209002> | M:+1918424WEST (9378) iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest
-- Brian West brian@freeswitch.org <mailto:brian@freeswitch.org>
Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com <http://www.freeswitchbook.com/> (50% Discount using code FreeSwitch50) http://www.freeswitchcookbook.com <http://www.freeswitchcookbook.com/> (50% Discount using code FreeSwitch50) https://www.gofundme.com/freeswitch_ubuntu <https://www.gofundme.com/freeswitch_ubuntu> Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378) iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Well if someone would like to test this https://freeswitch.org/stash/projects/FS/repos/freeswitch/pull-requests/659/... It may fix it also. /b On Tue, Oct 11, 2016 at 10:50 AM, Emrah <lists@kavun.ch> wrote:
Thanks for this Brian! I will test and report back. In any case, is there a way to make FreeSWITCH understand SIPS whereby it would engage TLS and contact endpoints using a SIPS URI?
Thanks
On Oct 11, 2016, at 4:48 PM, Brian West <brian@freeswitch.org> wrote:
Confirmed us _sip._tls and it should work.
/b
On Tue, Oct 11, 2016 at 9:46 AM, Brian West <brian@freeswitch.org> wrote:
I've spoke with Acrobits about this, The behavior is correct for TLS with SIPS, but confirming if maybe its ab ug on the TLS with SIP to ignore the _sips._tcp src record, I do recall Polycom and Lync using _sip._tls in their srv records.
/b
On Tue, Oct 11, 2016 at 6:35 AM, Emrah <lists@kavun.ch> wrote:
Hi there, I am in the middle of an argument with a softphone vendor over how to handle SIP and TLS. They support TLS with SIP and TLS with SIPS. If I pick TLS with SIPS, the softphone can lookup my SRV records and register on my FS box. However, it comes through with a transport=tcp as a contact parameter. If I use TLS with SIP, the softphone will ignore my _SIPS._TCP records but come through with a transport=tls. TLS with SIP and TLS with SIPS are almost identical with SIPS ensuring, in theory, that all signaling hops will use TLS. This, however, requires that FreeSWITCH uses a SIPS uri scheme to contact my endpoint and encapsulate in TLS regardless of the transport parameter.
What do you suggest?
Here is my ticket with them: https://www.acrobits.net/hesk/ ticket.php?track=YQL-TRS-J3M4
Best, Emrah ____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*Brian West* brian@freeswitch.org
*Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com (50% Discount using code FreeSwitch50) http://www.freeswitchcookbook.com (50% Discount using code FreeSwitch50) https://www.gofundme.com/freeswitch_ubuntu
Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
--
*Brian West* brian@freeswitch.org
*Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com (50% Discount using code FreeSwitch50) http://www.freeswitchcookbook.com (50% Discount using code FreeSwitch50) https://www.gofundme.com/freeswitch_ubuntu
Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com (50% Discount using code FreeSwitch50) http://www.freeswitchcookbook.com (50% Discount using code FreeSwitch50) https://www.gofundme.com/freeswitch_ubuntu Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
Never mind that pull request, it looks like its breaks the RFC. /b On Tue, Oct 11, 2016 at 10:55 AM, Brian West <brian@freeswitch.org> wrote:
Well if someone would like to test this
https://freeswitch.org/stash/projects/FS/repos/freeswitch/ pull-requests/659/overview
It may fix it also.
/b
On Tue, Oct 11, 2016 at 10:50 AM, Emrah <lists@kavun.ch> wrote:
Thanks for this Brian! I will test and report back. In any case, is there a way to make FreeSWITCH understand SIPS whereby it would engage TLS and contact endpoints using a SIPS URI?
Thanks
On Oct 11, 2016, at 4:48 PM, Brian West <brian@freeswitch.org> wrote:
Confirmed us _sip._tls and it should work.
/b
On Tue, Oct 11, 2016 at 9:46 AM, Brian West <brian@freeswitch.org> wrote:
I've spoke with Acrobits about this, The behavior is correct for TLS with SIPS, but confirming if maybe its ab ug on the TLS with SIP to ignore the _sips._tcp src record, I do recall Polycom and Lync using _sip._tls in their srv records.
/b
On Tue, Oct 11, 2016 at 6:35 AM, Emrah <lists@kavun.ch> wrote:
Hi there, I am in the middle of an argument with a softphone vendor over how to handle SIP and TLS. They support TLS with SIP and TLS with SIPS. If I pick TLS with SIPS, the softphone can lookup my SRV records and register on my FS box. However, it comes through with a transport=tcp as a contact parameter. If I use TLS with SIP, the softphone will ignore my _SIPS._TCP records but come through with a transport=tls. TLS with SIP and TLS with SIPS are almost identical with SIPS ensuring, in theory, that all signaling hops will use TLS. This, however, requires that FreeSWITCH uses a SIPS uri scheme to contact my endpoint and encapsulate in TLS regardless of the transport parameter.
What do you suggest?
Here is my ticket with them: https://www.acrobits.net/hesk/ ticket.php?track=YQL-TRS-J3M4
Best, Emrah ____________________________________________________________ _____________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/free switch-users http://www.freeswitch.org
--
*Brian West* brian@freeswitch.org
*Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com (50% Discount using code FreeSwitch50) http://www.freeswitchcookbook.com (50% Discount using code FreeSwitch50) https://www.gofundme.com/freeswitch_ubuntu
Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
--
*Brian West* brian@freeswitch.org
*Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com (50% Discount using code FreeSwitch50) http://www.freeswitchcookbook.com (50% Discount using code FreeSwitch50) https://www.gofundme.com/freeswitch_ubuntu
Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*Brian West* brian@freeswitch.org
*Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com (50% Discount using code FreeSwitch50) http://www.freeswitchcookbook.com (50% Discount using code FreeSwitch50) https://www.gofundme.com/freeswitch_ubuntu
Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com (50% Discount using code FreeSwitch50) http://www.freeswitchcookbook.com (50% Discount using code FreeSwitch50) https://www.gofundme.com/freeswitch_ubuntu Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
participants (2)
-
Brian West
-
Emrah