[Freeswitch-users] ATA that supports TLS/SRTP w FS

[Mark Campbell-Smith]

Hi All,

I managed to borrow a SPA3102 with the latest firmware and have got it
to register using TLS, but I am still struggling with SRTP.  Has
anyone managed to get SRTP working with the Linksys devices and if so,
can they direct me on how to do this.

I have generated a mini-certificates and SRTP Private Key using the
gen-mc tool found at
http://www.megajournal.ru/journal/users_data/11049/msg_files/24120/gen-mc.c-v0.98.tar.gz.mp3.
 However, when ever I initiate a call from the SPA, I can see that the
call is not encrypted.

Help appreciated.

Thanks!


On Sat, Nov 28, 2009 at 6:31 AM, eman <eman at chabotel.com> wrote:
> Check out the Linksys SPA2102
>
> On Wed, Nov 25, 2009 at 3:34 AM, Mark Campbell-Smith
> <mcampbellsmith at gmail.com> wrote:
>>
>> The only ATA mentioned on the WIKI that supports TLS/SRTP is the
>> Grandstream HandyTone 503.  But, again according to the wiki, that
>> doesn't seem to behave to well with TLS ...
>>
>> On Wed, Nov 25, 2009 at 7:14 PM, Jason White <jason at jasonjgw.net> wrote:
>> > Mark Campbell-Smith <mcampbellsmith at gmail.com> wrote:
>> >> Does the SPA3102 support TLS or only SRTP?
>> >
>> > I don't know, but supporting only SRTP would be ridiculous, since the
>> > keys
>> > would then be transmitted in the clear and therefore amenable to
>> > interception.
>> > SRTP requires the SIP channel to be encrypted by TLS in order to be
>> > secure.
>> > ZRTP, on the other hand, doesn't have this limitation: it works entirely
>> > in
>> > RTP.
>> >
>> > I would be rather surprised were a hardware manufacturer to implement
>> > SRTP
>> > without TLS for the SIP traffic. On the other hand, we've seen often in
>> > this
>> > forum that some manufacturers are really clueless...
>> >
>> >
>> > _______________________________________________
>> > FreeSWITCH-users mailing list
>> > FreeSWITCH-users at lists.freeswitch.org
>> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> > http://www.freeswitch.org
>> >
>>
>> _______________________________________________
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>
>
> _______________________________________________
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>