[asterisk-bugs] [Asterisk 0005413]: [patch] Secure RTP (SRTP)

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=5413 
====================================================================== 
Reported By:                mikma
Assigned To:                oej
====================================================================== 
Project:                    Asterisk
Issue ID:                   5413
Category:                   Core/RTP
Reproducibility:            N/A
Severity:                   feature
Priority:                   normal
Status:                     ready for testing
Asterisk Version:           SVN 
SVN Branch (only for SVN checkouts, not tarball releases): trunk 
SVN Revision (number only!): 48491 
Disclaimer on File?:        Yes 
Request Review:              
====================================================================== 
Date Submitted:             10-09-2005 10:36 CDT
Last Modified:              09-15-2007 17:38 CDT
====================================================================== 
Summary:                    [patch] Secure RTP (SRTP)
Description: 
This patch adds initial support for secure RTP using libsrt[1]. It can
be used in for example an implementation of the sdecriptions draft[2].

[1] http://srtp.sourceforge.net/srtp.html
[2]
http://www.ietf.org/internet-drafts/draft-ietf-mmusic-sdescriptions-12.txt

======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0010129 Module SRTP can't loaded
====================================================================== 

---------------------------------------------------------------------- 
 student - 09-15-07 17:38  
---------------------------------------------------------------------- 
Thanks a lot mikma,

I'm running asterisk r81432 now with the correspondent patch. The ip
phones I use for testing are snom 300 and minisip clients. Although calls
work in conjunction with sdes, I can't establish an efficient connection
with mikey. The calling party has always an encrypted channel to the
server, but the callee hasn't and you just hear noise. I've only tested
mikey with pre shared keys till now.

I've added these lines to the extensions.conf:
[...]
exten => _X.,1,Set(_SIPSRTP=require)
exten => _X.,n,Set(_SIPSRTP_MIKEY=enable)
exten => _X.,n,Dial(SIP/${EXTEN},20,tT)
[...]

Do I need to configure anything else?

Also I have to enter a different sip-uri within the minisip clients
composed by "phone number"@"ip adress" of the collee instead of a simple
phone number, since I've activated mikey. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
09-15-07 17:38  student        Note Added: 0070627                          
======================================================================