[asterisk-users] client-server encryption

[Jeff Brower]

Iscario-

> I'm trying to set up a "secure" VoIP channel between a Windows softphone client
> and an Asterisk 1.6... server running with  OpenBSD. By "secure" I mean to
> prevent any man in the middle to reconstitute any vocal exchange nor
> sender/addressee/any header data/ of the VoIP call (in first step, I would be
> glad to secure vocal data ans see later for the header...)
>
> I had a look to several way to do that:
>
> - Create a VPN using OpenVPN
>     => impossible for me , i'm not admin of the Windows system.
>
> - Create a SSH tunnel from the Windows client to the Asterisk server using putty
> (redirecting ports used for VoIP)
>     => it doesn't work because either SIP/RTP or IAX2 protocol are based on UDP
> so that SSH tunneling isn't working....
>
> - Use IAX2 protocol to communicate (because I was told it was able to encrypt
> data)
>     => it doesn't work because none of the client I had support encryption (many
> deal with authentication encryption but not stream data)... Do you know a client
> which could do that ?
>
>
> Now I tried all of this, I do not have other idea... Do you have any ? Each clue
> is very welcome!

Run through Kamailio server + rtpproxy, use SRTP (or other) encryption extension to rtpproxy.

-Jeff