[Freeswitch-users] problems with freeswitch + zrtp in proxy-media mode

Steven Ayre steveayre at gmail.com
Tue Apr 9 20:00:21 MSD 2013


>
> There is a way to do Trusted MITM I believe there is a setting for that


<action application="set" data="zrtp_enrollment=true"/>


On 9 April 2013 16:11, Ken Rice <krice at freeswitch.org> wrote:

> Also, keep in mind that FS in a mode other then proxy or bypass media, when
> you have a ZRTP call is kind of pointless, that leads to a vector for a man
> in the middle attack which is also the reason the SASs don't match is you
> have 2 different ZRTP legs with FS in the middle decrypting and
> re-encrypting the conversation...
>
> There is a way to do Trusted MITM I believe there is a setting for that
>
>
> On 4/9/13 4:57 AM, "mehroz" <mehroz.ashraf85 at gmail.com> wrote:
>
> > Any luck with this issue?
> >
> > I am having the same configurations, FS acting as normal mode i.e bypass
> and
> > proxy on default(commented)
> >
> > Clients are Linphone, and SAS does not match......
> >
> > Over jitsi ... SAS are identical ONLY IF
> >
> > IF linphone does not support "zrtp-hash" attribute in SIP/SDP, what is
> the
> > next possible solution?
> >
> >
> >
> > --
> > View this message in context:
> >
> http://freeswitch-users.2379917.n2.nabble.com/problems-with-freeswitch-zrtp-in
> > -proxy-media-mode-tp7586936p7589541.html
> > Sent from the freeswitch-users mailing list archive at Nabble.com.
> >
> > _________________________________________________________________________
> > Professional FreeSWITCH Consulting Services:
> > consulting at freeswitch.org
> > http://www.freeswitchsolutions.com
> >
> > 
> > 
> >
> > Official FreeSWITCH Sites
> > http://www.freeswitch.org
> > http://wiki.freeswitch.org
> > http://www.cluecon.com
> >
> > FreeSWITCH-users mailing list
> > FreeSWITCH-users at lists.freeswitch.org
> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> > http://www.freeswitch.org
>
> --
> Ken
> http://www.FreeSWITCH.org
> http://www.ClueCon.com
> http://www.OSTAG.org
> irc.freenode.net #freeswitch
>
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20130409/c6096d59/attachment-0001.html 


Join us at ClueCon 2011 Aug 9-11, 2011
More information about the FreeSWITCH-users mailing list