<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Jun 24, 2021 at 10:55 AM Jared Smith <<a href="mailto:jaredsmith@jaredsmith.net">jaredsmith@jaredsmith.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div dir="ltr">On Thu, Jun 24, 2021 at 4:04 AM John T. Bittner <<a href="mailto:john@xaccel.net" target="_blank">john@xaccel.net</a>> wrote:<br></div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div>
<p class="MsoNormal"><span style="font-size:10pt">As a voip provider we are in the process of getting our own token and cert.</span><br></p>
<p class="MsoNormal"><span style="font-size:10pt">We got our OCN and did all the other FCC requirements.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt">We are at the point of working with iconectiv to get our token.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt">Based on the info we have after we get the token we go to neustar to get our cert.</span></p></div></div></blockquote><div><br></div><div>That all seems correct.</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div lang="EN-US"><div><p class="MsoNormal"><span style="font-size:10pt"> </span></p>
<p class="MsoNormal"><span style="font-size:10pt">Iconectiv are asking a lot of questions on how we are going to get certs out of there api’s ? This is confusing me, I was under impression that we get the cert from neustar.</span></p></div></div></blockquote><div><br></div><div>iConectiv is the Policy Administrator -- they don't give you the actual cert, but they do certify that you've got your OCN and are authorized to get a cert, etc. Neustar is one of the Certificate Authorities that is authorized to give out Stir/Shaken certs.</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div lang="EN-US"><div><p class="MsoNormal"><span style="font-size:10pt"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt">I have spent hours reading many things about stir shaken and a lot of it is contradicting. I also can’t find anything on the asterisk setup were we would even configure api information to connect to iconectiv.</span></p></div></div></blockquote><div><br></div><div>You don't do this from within Asterisk -- you'd have to do this outside of Asterisk, and the configure Asterisk for the cert that you get from Neustar.</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div lang="EN-US"><div><p class="MsoNormal"><span style="font-size:10pt">
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt">Our SBC’s are asterisk based so we would like to implement this directly on these servers.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt">Do I need middleman software to get this to work.</span></p></div></div></blockquote><div><br></div><div>Yes -- Asterisk doesn't handle this directly, at least at this point. Please be aware that you'll likely need to interact with the APIs from both the PA and the CA (iConectiv and Neustar, in your case).</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div lang="EN-US"><div><p class="MsoNormal"><span style="font-size:10pt"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt">Last question… We do a lot of call forwarding and passthrough caller id.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt">Is there any method to allow this with Stir Shaken ?</span></p></div></div></blockquote><div><br></div><div>You can -- but it's complicated, depending on your relationship with the customers and numbers you're forwarding. The major point of Stir/Shaken is that the recipient of a call can know that the caller ID on the call actually belongs to someone authorized to use that number. If you as a middleman know that the number presented belongs to your customer, then you can give them an "A" level attestation. If you know the customer but not that they're authorized to use that particular number, you can give the calls a "B" level attestation. If you don't know the customer or the number, you give them a "C" level attestation.<br></div></div></div></blockquote><div><br></div><div>Now let's say that I own DID 8885551212 and my upstream provider send a call to me for that DID from "someuser" at 7775551212 with a valid A level attestation. I need to forward (not route) that call back to an upstream provider (maybe not the same one), say to a cell phone. I want the caller ID to be that of the original caller. What do I do?</div><div> <br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_quote"><div></div><div><br></div><div>--</div><div>Jared Smith</div></div></div>
-- <br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" rel="noreferrer" target="_blank">http://www.api-digital.com</a> --<br>
<br>
asterisk-dev mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-dev" rel="noreferrer" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-dev</a></blockquote></div></div>