<div dir="ltr"><div><div><div><div>I have.<br><br></div>On the receiving side I had gotten:<br><span class="">[2014-04-05 23:28:12] WARNING[1832] chan_iax2.c: Rejected connect attempt. No secret present while force encrypt enabled.<br>
<br></span></div><div><span class="">I had no secret because I was using RSA authentication and didn't think I needed it, so I added EXACTLY the same line on both sides </span><span class=""><span class="">(copy/paste)</span>.</span> Now I get:<br>
</div><span class="">[2014-04-05 23:30:42] NOTICE[1832] chan_iax2.c: Call Terminated, Incoming call is unencrypted while force encrypt is enabled.</span><br><br></div>On the sending side I really get nothing useful:<br>[2014-04-05 23:30:42] VERBOSE[2795][C-00000002] pbx.c: -- Executing [s@macro-dialout-trunk:22] <span class="">Dial</span>("<span class="">SIP/comp-in-ch01-00000001</span>", "<span class="">IAX2/ch01_ch02/1234,300,Ttr</span>") in new stack<br>
[2014-04-05 23:30:42] VERBOSE[2795][C-00000002] app_dial.c: -- Called IAX2/ch01_ch02/1234<br>[2014-04-05 23:30:43] VERBOSE[2795][C-00000002] chan_iax2.c: -- Hungup 'IAX2/ch01_ch02-17634'<br>[2014-04-05 23:30:43] VERBOSE[2795][C-00000002] app_dial.c: == Everyone is busy/congested at this time (1:0/0/1)<br>
</div>I modified the extension and the trunk name for security reasons, but without force encryption calls flow back and forth easily.<br><div><div><div><div><br></div><div>These three directives exist on both sides:<br>encryption=yes<br>
forceencryption=yes<br></div><div>secret=mysecretcode<br></div><div><br></div><div>So I'm kind of at a loss, I can see the options set, I can see:<br>[2014-04-05 23:59:32] VERBOSE[1832] chan_iax2.c: -- Accepting AUTHENTICATED call from xxx.yyy.zzz.aaa:<br>
</div><div>when I DON'T have the force encryption set, so I can't see what else I need to do..<br><br></div><div>CEW<br></div><div><br></div><div><br></div></div></div></div></div><div class="gmail_extra"><br><br>
<div class="gmail_quote">On Fri, Apr 4, 2014 at 7:07 PM, Steve Totaro <span dir="ltr"><<a href="mailto:stotaro@totarotechnologies.com" target="_blank">stotaro@totarotechnologies.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Have you enabled IAX2 debugging and tried some test calls?<div><br></div><div>Thanks,</div><div>Steve T<div><div class="h5"><br><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Apr 4, 2014 at 6:59 PM, Elliott W <span dir="ltr"><<a href="mailto:digium@private-address.info" target="_blank">digium@private-address.info</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>That answered my question as to whether it WAS encrypted, I think, and the answer is no, the credentials are but all the rest is not. That just leaves the question of what I need to do to get it encrypted.. <br>
<br></div>Thanks.<br><div><div class="gmail_extra"><br><br><div class="gmail_quote"><div><div>On Fri, Apr 4, 2014 at 12:59 PM, Steve Totaro <span dir="ltr"><<a href="mailto:stotaro@totarotechnologies.com" target="_blank">stotaro@totarotechnologies.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div dir="ltr">Wireshark. <div><div><br><div class="gmail_extra"><br><br><div class="gmail_quote">
On Fri, Apr 4, 2014 at 11:13 AM, Elliott W <span dir="ltr"><<a href="mailto:digium@private-address.info" target="_blank">digium@private-address.info</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>
<div><div><div><p>Ok, I think I am 90%+ there.</p>
<p>Note: the configuration or status is the same on both sides unless otherwise noted.</p>
<p>I am using RSA keys for authentication and the calls are coming through as authenticated so I'm sure that part works.</p>
<p>The peer shows the "(E)" next to the status in Asterisk Info for the IAX2 peers</p>
<p>The trunk configuration contains:<br>
encryption=yes</p>
<p>So here is my question, Calls stop flowing when I use the directive: <br>
forceencryption=yes<br>
At the trunk level or higher does not matter, same effect.</p>
<p>So my question comes down to, are my calls getting encrypted and why does this directive cause them to fail, AND how can I tell.</p>
<p>Thanks.</p>
</div></div></div> </div></div>
<br></blockquote><div><br></div><div> </div></div></div></div></div></div>
<br></div></div><span><font color="#888888">--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></font></span></blockquote></div><br></div></div></div>
<br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></div><br></div></div></div></div></div>
<br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></div><br></div>