Hi Klaus,
tested TLS transport with client. But that didn't hide the protocol as
the way we want. from the tcp header, we still see SIP/2.0 as SIP
protocol. TLS only encrypts the URI and port of from header. Is
there any other solution to completely hide the SIP protocol being
detected.
INVITE
sip:[EMAIL PROTECTED]:5060;user=phone
SIP/2.0
Record-Route:
<sip:[EMAIL PROTECTED]:5060;user=phone;maddr=64.102.254.146>
Via SIP/2.0/UDP
64.102.254.146:5060;branch=4708f6b8-16a78dd4-f3d5e768-aa17128a-1
Via SIP/2.0/UDP 207.68.169.181;branch=393E1BB3, SIP/2.0/TLS
64.102.254.150:2402;received-port=2402
Record-Route:
<sip:[EMAIL PROTECTED]:5060;user=phone;maddr=207.68.169.181>;
tag=729CC26274322D2EB8C120684CB7557C
Proxy-Authorization: basic MDAwMzNmZmY4MDM5Yjg5ZDou
From: "00033fff8039b89d"
<[EMAIL PROTECTED]>;tag=c7ee8263-4337-48b7-8ffe-d8a7e3f447cc
To:
<sip:[EMAIL PROTECTED];user=phone>
Call-ID: [EMAIL PROTECTED]
CSeq: 2 INVITE
Contact: <sip:64.102.254.1502402;transport=tls>
User-Agent: Windows RTC/1.0
Content-Type: application/sdp
Content-Length: 464
thanks
Ray
Raymond Chen wrote:
Klaus
Darilion wrote:
Raymond Chen wrote:
hi Klaus,
is there a native vpn solution to openser? I see TLS is supported in
server to server scenario. can we implement client tls solution without
making change to openser?
TLS can be used for server-server and client-server connections. It's
not heavily used (thus not heavily tested) but theoretically it should
work. Maybe there can be some issues with TLS and client behind NAT
(keep alive ...) which may occur. But once the issues are detected and
you can give exact problem description I'm sure we can fix it.
regards
klaus
thanks, klaus. I am going to try minisip client first to see if I can
make it work simply by configuration. let you know when I am done.
thanks
Ray
_______________________________________________
Devel mailing list
[email protected]
http://openser.org/cgi-bin/mailman/listinfo/devel
--

|
_______________________________________________
Devel mailing list
[email protected]
http://openser.org/cgi-bin/mailman/listinfo/devel