<div dir="ltr">Hi Nitesh,<div><br></div><div>my chan_sip is rather messy right now, as I changed several things due to other experiments as well. I tried to prepare a patch that only allegedly covers the DTLS experiments: just beware that it is for asterisk-11.1.2 and so you may need to tweak it a bit for your case. Anyway, what I did with respect to DTLS in chan_sip as you can see wasn't much (as I explained in that report, most of the SDP manipulation I did in my webapp), so just to summarize:</div>
<div><ol><li>I moved the DTLS initialization after the RTCP stuff, for the reasons explained in the report;</li><li>I made sure that sha-256 fingerprints (sent by Chrome and Firefox) were accepted by the parser, and that sha-256 fingerprints were added in the reply too (this needs a change in the RTP engine, of course, which by default generates sha-1 fingerprints);</li>
<li>a couple of fixes to an incorrect SAVPF behaviour (the wrong crypto context was used);</li><li>an ugly hack to force DTLS if it is disabled in the configuration, but you get a fingerprint in the SDP: I chose to do it this way as enabling it in the configuration forces DTLS for all calls, which I didn't want.</li>
</ol><div>Hope that helps, let me know if you need any further help.</div></div><div><br></div><div>Lorenzo</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">2013/12/4 nitesh bansal <span dir="ltr"><<a href="mailto:nitesh.bansal@gmail.com" target="_blank">nitesh.bansal@gmail.com</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi Lorenzo,<div><br></div><div>Thanks for your response. Can you share your patch on chan_sip.</div><div>
<br></div><div>Regards,</div><div>Nitesh Bansal</div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">
On Mon, Dec 2, 2013 at 4:09 PM, Lorenzo Miniero <span dir="ltr"><<a href="mailto:lminiero@gmail.com" target="_blank">lminiero@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><div>2013/12/2 Mark Michelson <span dir="ltr"><<a href="mailto:mmichelson@digium.com" target="_blank">mmichelson@digium.com</a>></span><br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div><div>On 12/02/2013 05:29 AM, nitesh bansal wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
Hello everybody,<br>
<br>
I want to setup a basic Demo of WebRTC using Asterisk as WebServer and SRTP-DTLS.<br>
I got the demo setup using SRTP-DES with chrome, chrome is porpoising both DTLS and DES,<br>
Asterisk responds with DES abd call is connected.<br>
But i want asterisk to propose DTLS also in its response, can you please tell me if asterisk supports DTLS and if yes, is there a wiki page with the documentation?<br>
I could not find any relevant wikipage.<br>
<br>
Regards,<br>
Nitesh<br>
<br>
</blockquote>
<br></div></div>
Asterisk supports DTLS. Your best bet for documentation at the moment is to look at configs/sip.conf.sample in Asterisk 11 and grep for "DTLS-SRTP CONFIGURATION". That will direct you to a section that explains the various DTLS-related configuration options for chan_sip.<span><font color="#888888"><br>
<br>
Mark Michelson<br>
<br></font></span></blockquote><div><br></div><div><br></div></div><div>Just as an additional cue point, you may also refer to the report I wrote a few months ago on making DTLS work in my case. I don't know whether or not some of those points eventually made it to the documentation, and some of them may be obsolete (e.g., you definitely don't need the fake crypto anymore), but they may be oh help nonetheless:</div>
<div><br></div><div><a href="http://lists.digium.com/pipermail/asterisk-dev/2013-May/060435.html" target="_blank">http://lists.digium.com/pipermail/asterisk-dev/2013-May/060435.html</a><span><font color="#888888"><br>
</font></span></div><span><font color="#888888"><div><br></div><div>Lorenzo</div></font></span><div><div><br>
</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span><font color="#888888">
-- <br>
______________________________<u></u>______________________________<u></u>_________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
<br>
asterisk-dev mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-dev" target="_blank">http://lists.digium.com/<u></u>mailman/listinfo/asterisk-dev</a><br>
</font></span></blockquote></div></div><br></div></div>
<br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
<br>
asterisk-dev mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-dev" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-dev</a><br></blockquote></div><br></div>
</div></div><br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
<br>
asterisk-dev mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-dev" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-dev</a><br></blockquote></div><br></div>