[Freeswitch-users] Missing Privacy and PAI headers with bypass-media=true/resume-media-on-hold

Denys Pozniak denys.pozniak at gmail.com
Mon Jun 10 15:47:49 UTC 2019


Hello!

We are bridging calls in *bypass-media* mode with profile parameter *<param
name="media-option" value="resume-media-on-hold"/>*
...
<action application="set" data="bypass_media=true" />
<action application="privacy" data="yes" />
<action application="bridge" data="{...}sofia/external/+
12223334455 at 10.10.10.10" />
...

So initial origination INVITE on B-leg has Privacy: id and PAI headers -
everything works as expected.
But if a user on A-leg presses Hold button, re-INVITE (without SDP) on
B-leg (corresponding to the option *resume-media-on-hold*) will not have
privacy headers.
And this leads to disclosure of caller anonymity on some phones.

On the picture below I marked re-INVITE (B-leg) that has no Privacy and PAI.

[image: image.png]

FreeSWITCH (Version 1.8.5  64bit)

How to force FS to send privacy headers in such scenario?

-- 

BR,
Denys Pozniak
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20190610/b0086f44/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 38401 bytes
Desc: not available
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20190610/b0086f44/attachment-0001.png>


More information about the FreeSWITCH-users mailing list