search for: srtp

Hi list, I'm trying to create an asterisk 1.8 rpm with SRTP. I found mention of a libsrtp rpm, <http://qutecom.ipex.cz/RPMS/srtp-1.4.4-1.i386.rpm > in these instructions, <http://www.voip-info.org/wiki/view/Asterisk+SRTP> but it is unreachable (by me, anyway). The libSRTP source is here, <http://srtp.sourceforge.net/download.html>. Has...

On 2/22/19 7:56 PM, Joshua C. Colp wrote: > On Fri, Feb 22, 2019, at 2:48 PM, hw wrote: >> >> Hi, >> >> when trying to use SRTP, I can see UDP traffic from phones to the >> asterisk server being dropped be the firewall on arbitrary ports. > > There is no separate port range used for SRTP, and Asterisk does not control the port that the phone uses for sending to Asterisk. That's up to the endpoint. Thanks!...

Hi, when trying to use SRTP, I can see UDP traffic from phones to the asterisk server being dropped be the firewall on arbitrary ports. Where do I configure the SRTP port range (like the rtp port range)? Why aren't the clients talking to each other directly but apparenty try to send the SRTP traffic to the server? T...

On 2/23/19 1:15 PM, Joshua C. Colp wrote: > On Sat, Feb 23, 2019, at 8:06 AM, hw wrote: >> On 2/22/19 7:56 PM, Joshua C. Colp wrote: >>> On Fri, Feb 22, 2019, at 2:48 PM, hw wrote: >>>> >>>> Hi, >>>> >>>> when trying to use SRTP, I can see UDP traffic from phones to the >>>> asterisk server being dropped be the firewall on arbitrary ports. >>> >>> There is no separate port range used for SRTP, and Asterisk does not control the port that the phone uses for sending to Asterisk. That's up to...

Hi, I am running asterisk 1.8.5.0 and have compiled in the srtp module All but Snom phones are working. I have set the srtp tag on the snoms to 80 and RTP/SAVP to mandatory and they worked for a few hours. This morning all snoms are reporting this when trying to make a call (this is snom calling snom). ---------snip------------------ == Using SIP RTP CoS mark...

I tried installing the Asterisk 11 RHEL6 packages from packages.asterisk.org I followed this guide: https://wiki.asterisk.org/wiki/display/AST/Asterisk+Packages The SRTP support appears to be missing though. I notice libsrtp was not automatically installed as a dependency, and no srtp module exists under /usr/lib64/asterisk/modules Is it still necessary to do a source build every time SRTP is needed? Or is the srtp module distributed in some other rpm?

Hi, I've setup TLS/SRTP with Asterisk 11.8.1 and wonder if there is a CLI command to see if SRTP is active on a channel/call. I went through sip show ... and core show channel... and did not see any mentioning of SRTP while there is an SRTP call active. Thanks, Patrick

Hi experts, I am trying Asterisk SRTP in my environment, and find that when Asterisk is behind a NAT, the audi/video UDP ports opened for SRTP relay by Asterisk are local ports on the Asterisk server, media from the two clients out of the NAT (for example from Internet) can not reach the ports, and thus the two client can not establish...

On 2/23/19 2:39 PM, Social Boh wrote: > *DIrect media with SRTP is not supported. All media when SRTP goes > through Asterisk.* > > So you have to open ports on your firewall and disable directmedia=yes > on your configuration. directmedia is not explicitly enabled; I guess it's the default. Joshua basically says there is no way to control...

Hi all, I upgraded one of our servers running asterisk 1.6.X to 1.8.2.3. I compiled it with SRTP support. Everything seems to work OK but I am having a weird issue. I cannot disable SRTP. I tried the /encryption=no/ in /sip.conf /and the /_SIPSRTP_CRYPTO=disable/ on my dailplan and it keeps trying to use the SRTP. Well, right now I have to have/ noload=res_srtp.so/ on my /modules.conf /otherw...

Hello! Ater several successful SRTP-enabled calls with SRTP set to Mandatory, asterisk starts to give the following warnings in Log: WARNING[13714] res_srtp.c: SRTP unprotect: authentication failure (continiously) and client hears no sound. After i restart the client program it works fine again for a while. Then the same warning...

Hi all, We're testing TLS and SRTP on Asterisk 1.8.10.0 and have it working with a commerical (not self-sign) AlphaSSL wildcard (GlobalSign) using Blink Lite 1.6.2 as per https://wiki.asterisk.org/wiki/display/AST/Secure+Calling+Tutorial We've tested with Bria on an iPhone and that doesn't recognised the commercial CA (Glob...

Hi; It seems the SNOM Phones are requesting to have SRTP but I do not have the module res_srtp. I tried to compile it with asterisk 1.8, make menuselect, but I found that it can not be used (I am not able to select it) with the following details: Secure RTP SRTP Depends on: srtp E Can use: N/A Conflicts with: N/A So, how I can use it? What I have to...

please look at http://www.voip-info.org/wiki/view/Asterisk+SRTP and try compile&run clients with srtp (linksys,gxp-2000, minisip, twikle, ...) --------------------------------------- Marek Cervenka Centrum Vypocetni Techniky CVT - http://cvt.fpf.slu.cz FPF SLU OPAVA - http://www.fpf.slu.cz LCNA - http://lcna.slu.cz ==================================...

...PM, Joshua C. Colp wrote: > On Sat, Feb 23, 2019, at 11:04 AM, hw wrote: > > <snip> > >> >> directmedia is not explicitly enabled; I guess it's the default. >> >> Joshua basically says there is no way to control which ports are being >> used for SRTP because that it is "up the endpoint". Such endpoints, in >> this case, are mobile phones with software like csipsimple or gs-wave >> (or perhaps zoiper), and I see no way in these programs to define which >> ports to use for SRTP. >> >> Since I have no way t...

Hi, I'm getting messages like res_srtp.c:395 ast_srtp_unprotect: SRTP unprotect failed with replay check failed (index too old), retrying == SRTP unprotect failed on SSRC 576693764 because of authentication failure 10 == SRTP unprotect failed on SSRC 576693764 because of authentication failure 160 [...] ... after a couple minutes...

Hi all, I'm getting ready to setup SIP/TLS and SRTP. But I have a few questions. The first one is that I was reading an article at: https://supportforums.cisco.com/docs/DOC-15381 That indicated that Asterisk doesn't support TLS as an OPTIONAL transport. It's either all or nothing. Specifically, this is what it said: ====================...

Hi. I have an Asterisk Server (A) where it acts as the main gateway to offer services. There are different asterisk servers (B -D) that connect as extensions to the Server A. I would like to implement TLS and SRTP for these extensions, but have the non secure as well for other extensions. for example the extensions 4500-4504 be with TLS/SRTP and the rest be non secure(ordinary). Is there a guide on how to implement that please? I am running asterisk 11. -------------- next part -------------- An HTML attachm...

Hi All, I've been reading about Phil Zimmermann's ZRTP encryption scheme for SIP clients. This seems attactive but I don't use soft phones. I'm guessing that we'd need ZRTP support in Asterisk in order to use it to secure calls from hard phones. There seem to be issues with SRTP key exhange between various devices. So much so that the IETF is working on a standardization project. ZRTP, which is one of the proposals before the IETF, overcomes this. Since Zimmermann has open sourced the protocol I would hope that it could be implemented in Asterisk without too much trouble...

...is the next problem. I understand that IAX solves these issues, but it will be some time before IAX is a "standard" on equipment. Does anyone here use hardphones or softphones that support TLS? Is TLS stillborn? Speaking of payload encryption, has anyone ever peeked at the Vovida SRTP libraries? They're free (as in, BSD-licensed) and even in C (not C++) and found on http://www.vovida.org/protocols/downloads/srtp/index.html Asterisk is sometimes the chicken, sometimes the egg - maybe putting TLS and SRTP into Asterisk will cause some more vendors to start putting that s...