similar to: configure SRTP port range?

On 2/22/19 7:56 PM, Joshua C. Colp wrote: > On Fri, Feb 22, 2019, at 2:48 PM, hw wrote: >> >> Hi, >> >> when trying to use SRTP, I can see UDP traffic from phones to the >> asterisk server being dropped be the firewall on arbitrary ports. > > There is no separate port range used for SRTP, and Asterisk does not control the port that the phone uses for sending

On 2/23/19 1:15 PM, Joshua C. Colp wrote: > On Sat, Feb 23, 2019, at 8:06 AM, hw wrote: >> On 2/22/19 7:56 PM, Joshua C. Colp wrote: >>> On Fri, Feb 22, 2019, at 2:48 PM, hw wrote: >>>> >>>> Hi, >>>> >>>> when trying to use SRTP, I can see UDP traffic from phones to the >>>> asterisk server being dropped be the firewall

On 2/23/19 2:39 PM, Social Boh wrote: > *DIrect media with SRTP is not supported. All media when SRTP goes > through Asterisk.* > > So you have to open ports on your firewall and disable directmedia=yes > on your configuration. directmedia is not explicitly enabled; I guess it's the default. Joshua basically says there is no way to control which ports are being used for

On 2/23/19 4:19 PM, Joshua C. Colp wrote: > On Sat, Feb 23, 2019, at 11:04 AM, hw wrote: > > <snip> > >> >> directmedia is not explicitly enabled; I guess it's the default. >> >> Joshua basically says there is no way to control which ports are being >> used for SRTP because that it is "up the endpoint". Such endpoints, in >>

Hi, I'm getting messages like res_srtp.c:395 ast_srtp_unprotect: SRTP unprotect failed with replay check failed (index too old), retrying == SRTP unprotect failed on SSRC 576693764 because of authentication failure 10 == SRTP unprotect failed on SSRC 576693764 because of authentication failure 160 [...] ... after a couple minutes during voice calls after which the connection is being

On Thu, Jan 16, 2020 at 11:35 AM hw <hw at gc-24.de> wrote: > On Tuesday, January 14, 2020 5:29:04 PM CET hw wrote: > > Hi, > > > > I'm getting messages like > > > > > > res_srtp.c:395 ast_srtp_unprotect: SRTP unprotect failed with replay > check > > failed (index too old), retrying == SRTP unprotect failed on SSRC > 576693764 > >

Hi experts, I am trying Asterisk SRTP in my environment, and find that when Asterisk is behind a NAT, the audi/video UDP ports opened for SRTP relay by Asterisk are local ports on the Asterisk server, media from the two clients out of the NAT (for example from Internet) can not reach the ports, and thus the two client can not establish the secure call via Asterisk. I have set up a STUN server

Given a box with a sip proxy listen(2)ing on 0.0.0.0 and chan_sip or chan_pjsip listen(2)ing on 127.0.0.1, with ast sending rtp directly, will ast negotiate srtp or dtls even ast and the proxy speak sip in the clear over the lo interface? Avoiding encryption over lo can aid debugging, but will doing so also block secure media? -JimC -- James Cloos <cloos at jhcloos.com> OpenPGP:

Hi; It seems the SNOM Phones are requesting to have SRTP but I do not have the module res_srtp. I tried to compile it with asterisk 1.8, make menuselect, but I found that it can not be used (I am not able to select it) with the following details: Secure RTP SRTP Depends on: srtp E Can use: N/A Conflicts with: N/A So, how I can use it? What I have to do to know the reason for not being able to

Hi, I am running asterisk 1.8.5.0 and have compiled in the srtp module All but Snom phones are working. I have set the srtp tag on the snoms to 80 and RTP/SAVP to mandatory and they worked for a few hours. This morning all snoms are reporting this when trying to make a call (this is snom calling snom). ---------snip------------------ == Using SIP RTP CoS mark 5 -- Executing [10000 at

Hi List, I am trying to setup a Asterisk setup in AWS instance Centos6.5 . I have installed Asterisk 13.4 with srtp,pjproject. I have configured two numbers for webRTC clients, when i try to call from a client (sipml5) to another client (sipml5) it throws the following error: "chan_sip.c:5851 dialog_initialize_dtls_srtp: Attempted to set an invalid DTLS-SRTP configuration on RTP

Hi all, I'm getting ready to setup SIP/TLS and SRTP. But I have a few questions. The first one is that I was reading an article at: https://supportforums.cisco.com/docs/DOC-15381 That indicated that Asterisk doesn't support TLS as an OPTIONAL transport. It's either all or nothing. Specifically, this is what it said: ============================================== *Note: There is

CentOS-6.5 (FreePBX-2.6) Asterisk-11.14.2 (FreePBX) snom870-SIP 8.7.3.25.5 I am having a very difficult time attempting to get TLS and SRTP working with Asterisk and anything else. At the moment I am trying to get TLS functioning with our Snom870 desk-sets. And I am not having much luck. Since this is an extraordinarily (to me) Byzantine environemnt I am going to ask if any of you have gotten

Hi, I've setup TLS/SRTP with Asterisk 11.8.1 and wonder if there is a CLI command to see if SRTP is active on a channel/call. I went through sip show ... and core show channel... and did not see any mentioning of SRTP while there is an SRTP call active. Thanks, Patrick

> Joshua Colp wrote: > > There should be nothing different, except for how you configure things. > What is the full PJSIP configuration? What is the environment where > Asterisk is running? Is ICE actually in use on the other side? What is > the full SIP trace? > The full configuration is here: http://pastebin.com/XqZG1m5X I am connection over TLS / SRTP on port 5063. When

Hi folks, At least several endpoints (soft phone and desk phones) are supporting various 256 bit ciphers for SRTP these days. I *believe* libsrtp has been updated to allow this, and that only the code in Asterisk has not been been updated to allow these stronger ciphers. Would anyone with the know-how be willing/able to submit a patch ? Thank you, Kevin Long

Hello, short question: is there a possibility to use asterisk as an outbound proxy? iam open for any suggestions, use asterisk trunk, dirty patches, ugly workarounds, everything. What is want to build is: SIP Phone -> via TLS/SRTP -> Asterisk as outbound proxy -> via UDP/RTP -> VoIP-Provider So Asterisk should just forward any incoming SIP messages (INVITE, REGISTER) to the

Asterisk is on public IP (as described in the first email) i have 10 years experience in voip, 4 years webrtc in production. i know about ICE/STUN/DTLS-SRTP. yes, not every detail but the basic mechanism but i confess. i dont understand WHY Asterisk SOMETIMES switches destination IP in RTP. this is not only about ICE. its about RTP engine too which is Asterisk specific and Asterisk DEBUG is

I see no indication of how to do this in sip.conf, and when I start Asterisk, it doesn't wait on port 80. Greetings, -- Juan Carlos Castro y Castro Instant Solutions - Telefonia Gerando Resultado http://www.instant.com.br Principais capitais: 4063-6100 Demais regi?es: (11)4063-6100

with wireshark i need decrypt traffic every call which is time consuming. get debug from pjnat through asterisk is not possible because of technical reasons or nobody did it? in my case its strange that ice candidates are the same good call v=0 o=- 3669976329745317845 2 IN IP4 127.0.0.1 s=- t=0 0 a=msid-semantic: WMS EoNIdKcMZvWBLULGqGPJTDe12ujjFEemeapo m=audio 52421 RTP/SAVPF 8 0 101 c=IN