| 10:28.08 | *** join/#asterisk infobot (~infobot@rikers.org) |
| 10:28.08 | *** topic/#asterisk is #asterisk The Open Source PBX and Telephony Platform (asterisk.org) -=- LTS: 13.17.0 (2017/07/12), 11.25.1 (2016/12/08), Standard: 14.6.0 (2017/07/12); DAHDI: DAHDI-linux 2.11.1 (2016/03/01), DAHDI-tools 2.11.1 (2016/03/01); libpri 1.6.0 (2017/01/27) -=- Wiki: wiki.asterisk.org -=- Code of Conduct: bit.ly/1hH6P22 -=- Logs: bit.ly/1s4AKKu |
| 11:27.15 | *** join/#asterisk kannan (~chatzilla@182.65.240.97) |
| 12:47.29 | *** join/#asterisk yoink (~yoink@unaffiliated/yoink) |
| 13:07.05 | Samot | yes |
| 13:47.10 | *** join/#asterisk stefanauss (~stefanaus@host163-142-static.0-79-b.business.telecomitalia.it) |
| 14:02.54 | *** join/#asterisk kannan (~chatzilla@182.65.240.97) |
| 14:07.18 | *** join/#asterisk cemotyz09 (~cemotyz09@cpe-70-121-157-202.satx.res.rr.com) |
| 14:29.04 | *** join/#asterisk [TK]D-Fender (~joe@64.235.216.2) |
| 15:27.26 | *** join/#asterisk elcontrastador (~textual@c-67-182-43-55.hsd1.ca.comcast.net) |
| 15:36.32 | *** join/#asterisk woddy (~woddy@unaffiliated/woddy) |
| 15:43.58 | *** join/#asterisk rwb (~Thunderbi@65-183-131-95-dhcp.burlingtontelecom.net) |
| 15:56.08 | *** join/#asterisk puzzled (~puzzled@2001:982:1097:1::1:3) |
| 16:17.21 | *** join/#asterisk shootbird (~quassel@205.185.122.214) |
| 16:25.33 | *** join/#asterisk Iamnacho (~Iamnacho@ip70-171-163-5.om.om.cox.net) |
| 17:00.45 | *** join/#asterisk forgotmynick (uid24625@gateway/web/irccloud.com/x-oxzlpcvwyrjabpsb) |
| 17:00.49 | *** join/#asterisk shanth__ (~shanth@wsip-98-182-126-226.ph.ph.cox.net) |
| 17:37.26 | *** join/#asterisk gerhard7 (~gerhard7@ip5657ee30.direct-adsl.nl) |
| 17:38.22 | *** join/#asterisk shootbird (~quassel@beepbeep.serverpit.com) |
| 17:46.58 | *** join/#asterisk jameswf (uid27319@gateway/web/irccloud.com/x-pnaqprykorzgnnin) |
| 17:52.40 | *** join/#asterisk Typhon (~Typhon@dslb-084-056-168-047.084.056.pools.vodafone-ip.de) |
| 17:56.11 | *** join/#asterisk war9407 (war@pool-70-106-197-167.clppva.fios.verizon.net) |
| 18:51.02 | *** join/#asterisk woddy (~woddy@unaffiliated/woddy) |
| 18:54.02 | iheartlinux | Don't think 550's support pjsip/sdes. No matter, happy with tls. |
| 19:01.02 | *** join/#asterisk miralin (~Thunderbi@91.237.94.4) |
| 19:14.40 | Samot | Uhm. |
| 19:15.01 | Samot | The phone doesn't care about the SIP stack. |
| 19:15.06 | Samot | As long as it is SIP. |
| 19:15.44 | Samot | Polycom wants the RTP encrypted with TLS. |
| 19:16.02 | Samot | Not TLS for signalling and then DTLS for RTP. |
| 19:16.36 | Samot | Well not "encrypted" so much as encapsulated. |
| 19:24.47 | iheartlinux | Samot: does asterisk's included pjsip enable dtls? |
| 19:26.02 | Samot | PJSIP supports DTLS. |
| 19:26.33 | Samot | That doesn't change the fact the Polycom won't use DTLS on RTP with TLS transport. |
| 19:26.49 | iheartlinux | oh ok |
| 19:27.01 | Samot | Again, PJSIP is a SIP stack. |
| 19:27.09 | Samot | Just like Sophia, Chan_SIP, SIP-B, etc. |
| 19:27.31 | Samot | Polycom phones care about SIP RFC compliance. |
| 19:29.49 | iheartlinux | so I used this tutorial: https://wiki.asterisk.org/wiki/display/AST/Secure+Calling+Tutorial which called for media_encryption=sdes. But like you said, polycom doesen't do sdes |
| 19:30.19 | iheartlinux | so just leave out media_encryption all-to-gether |
| 19:32.53 | Samot | Well. |
| 19:32.59 | Samot | It's "no" by default. |
| 19:33.05 | Samot | So not having it there means, "no" |
| 19:33.19 | Samot | media_encryption=yes |
| 19:33.22 | Samot | That should work. |
| 19:33.33 | iheartlinux | ah, i'll try it |
| 19:33.44 | Samot | Note the media_encryption option for the endpoint. In this case, we've configured an endpoint that will be using SDES encryption for RTP. |
| 19:33.46 | Samot | ^^^^^^ |
| 19:33.53 | Samot | That's what it says in the wiki |
| 19:34.08 | Samot | The _endpoint_ wants SDES |
| 19:34.34 | iheartlinux | ah, right |
| 19:34.55 | Samot | <PROTECTED> |
| 19:34.55 | Samot | ; option to additionally enable SRTP, though they are not mutually inclusive. |
| 19:35.58 | iheartlinux | I went to the sample pjsip.conf and didn't find a list of options for media_encryption. |
| 19:36.03 | iheartlinux | it only mentioned sdes |
| 19:37.02 | *** join/#asterisk woddy (~woddy@unaffiliated/woddy) |
| 19:40.08 | *** join/#asterisk woddy1 (~woddy@unaffiliated/woddy) |
| 21:08.27 | *** join/#asterisk miralin (~Thunderbi@91.237.94.4) |
| 21:17.38 | *** join/#asterisk evil_gordita (robert@ip70-188-41-127.rn.hr.cox.net) |
| 21:40.59 | *** join/#asterisk mmlj4 (~mmlj4@47-44-49-2.static.unas.mo.charter.com) |
| 22:11.48 | *** join/#asterisk u0m3 (~u0m3@86.127.157.203) |
| 22:14.02 | *** join/#asterisk woddy (~woddy@unaffiliated/woddy) |
| 22:18.56 | *** join/#asterisk tzafrir (~tzafrir@bzq-179-40-170.cust.bezeqint.net) |
| 23:01.02 | *** join/#asterisk woddy1 (~woddy@unaffiliated/woddy) |
| 23:09.03 | *** join/#asterisk j-fish (uid178161@gateway/web/irccloud.com/x-emixwfmqckrmrlpy) |