[asterisk-bugs] [Asterisk 0005413]: [branch] Secure RTP (SRTP)

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=5413 
====================================================================== 
Reported By:                mikma
Assigned To:                otherwiseguy
====================================================================== 
Project:                    Asterisk
Issue ID:                   5413
Category:                   Channels/chan_sip/NewFeature
Reproducibility:            N/A
Severity:                   feature
Priority:                   normal
Status:                     assigned
Asterisk Version:           SVN 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!): 48491 
Disclaimer on File?:        Yes 
Request Review:              
====================================================================== 
Date Submitted:             2005-10-09 10:36 CDT
Last Modified:              2008-12-22 06:56 CST
====================================================================== 
Summary:                    [branch] Secure RTP (SRTP)
Description: 
This patch adds initial support for secure RTP using libsrt[1]. It can
be used in for example an implementation of the sdecriptions draft[2].

[1] http://srtp.sourceforge.net/srtp.html
[2]
http://www.ietf.org/internet-drafts/draft-ietf-mmusic-sdescriptions-12.txt


Update (17/12/2008): Branch against trunk is located here
http://svn.digium.com/svn/asterisk/team/group/srtp
======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0010129 Module SRTP can't loaded
====================================================================== 

---------------------------------------------------------------------- 
 (0096778) aanderson (reporter) - 2008-12-22 06:56
 http://bugs.digium.com/view.php?id=5413#c96778 
---------------------------------------------------------------------- 
Wow, that was fast, a lot faster than i expected, many thanks :-D

Anyway, my2cents(tm):

>1) Has anyone tested the MIKEY code lately?

Sadly, no, i dont have any phone that support's it.

>2) Do any phones actually support MIKEY

No idea, but...

>3) Since asterisk has TCP/TLS support now, do we even want to support
MIKEY?

Even if currently not much support for it (i guess that would be the
henn-egg-problem), i belive it would be bad to drop it at this point, i can
imagine a lot of scenarios where SIPS/TCP would not be possible
(uncooperative corporate-firewall admin, "noooo, it worked for years with
UDP!" ;-)).

So, if i really get a vote, please leave it there, even if it is not well
tested, it could be deactivated in the default config.

I've used this branch for a few day's now (maybe two dozens of calls,
without srtp!), i'd say it could go intro trunk without breaking
anything... 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2008-12-22 06:56 aanderson      Note Added: 0096778                          
======================================================================