Re: [Asterisk-Users] Encrypted VOIP?

2005-02-09 Thread Nils Ohlmeier
Our SIPS implementation is absolutely standard conform according to RFC3261 
and our SRTP implementation follows RFC3711.

Regards
  Nils Ohlmeier

On Tuesday 08 February 2005 13:37, Remco Barende wrote:
> What about SIPS (Secure SIP)?
>
> I cannot find anything about it in the Wiki but the Snom phones claim
> support for SIPS. No clue whether this is a standard or something
> proprietary that Snom have developed themselves.
-- 
snom technology AGPascalstrasse 10bD-10581 Berlin
Nils Ohlmeier
mailto:[EMAIL PROTECTED]  http://www.snom.com
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Encrypted VOIP?

2005-02-08 Thread Remco Barende
What about SIPS (Secure SIP)?
I cannot find anything about it in the Wiki but the Snom phones claim 
support for SIPS. No clue whether this is a standard or something 
proprietary that Snom have developed themselves.


On Fri, 4 Feb 2005, Steven P. Donegan wrote:
Well, not really 'looking for' anything except info - as an earlier gentleman 
said I can always just do stuff over a VPN - it's more a simple interest in 
where things might be going.

Thanks as always for the feedback folks
Nick Bachmann wrote:
[EMAIL PROTECTED] wrote:
If I remeber correctly, Mark Spencer is working on encryption in IAX2

Sort of.  Some IAX encryption code went into CVS a while back, but it was 
more of a "talking point" than anything else, meant to give interested 
developers a starting point.  The -dev and -security list archives have 
some discussion about this.  I don't think there's been too much 
continued work on it, but volunteers are always accepted!

For SIP, native encryption should be done through SRTP, which many people 
have asked for but nobody has really delivered.  Again, you will find 
some good background discussion in the list archives.

Running IAX over stunnel would probably be feasible if both sides of a 
tunnel were machines. That's at least a little closer to to native, and 
very easy to set up.  However, I don't think that's what you were looking 
for... :)

Nick
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Encrypted VOIP?

2005-02-06 Thread Trevor Peirce
Wolfgang S. Rupprecht wrote:
In theory, the Sipura line supports SRTP.  I've got both a spa-841 and
a spa-3000 that have config areas for loading the srtp rsa keys.
Unfortunately there isn't enough information given by sipura as to how
to generate these rsa keys.  (eg. can one use an openssl generated
key?)
 

In the Sipura support area (authentication required), there is a tool to 
generate Mini Certificates for this.

___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Encrypted VOIP?

2005-02-05 Thread Wolfgang S. Rupprecht

[EMAIL PROTECTED] (Steve Blair) writes:
>  Some SIP phones support sRTP. I know Zultys claims to but I have
> no real experience in this area, yet. Our installation is at the point where
> this is very likely the next issue to be addressed.

In theory, the Sipura line supports SRTP.  I've got both a spa-841 and
a spa-3000 that have config areas for loading the srtp rsa keys.
Unfortunately there isn't enough information given by sipura as to how
to generate these rsa keys.  (eg. can one use an openssl generated
key?)

It would be great to have asterisk interoperate with the sipuras.

-wolfgang
-- 
Wolfgang S. Rupprechthttp://www.wsrcc.com/wolfgang/
 Hate software patents?  Sign here: http://thankpoland.info/
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Encrypted VOIP?

2005-02-05 Thread John Middleton
http://www.telephonyworld.com/cgi-bin/news/viewnews.cgi?category=all&id=1107474518

On Fri, 04 Feb 2005 17:26:22 -0800, Steven P. Donegan <[EMAIL PROTECTED]> wrote:
> Is there any support in Asterisk for encryption of IAX and/or any other
> VOIP protocols? I haven't seen anything on this in the wiki or on the
> list. Just curious.
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Encrypted VOIP?

2005-02-05 Thread Steve Blair
Some SIP phones support sRTP. I know Zultys claims to but I have
no real experience in this area, yet. Our installation is at the point where
this is very likely the next issue to be addressed.
Steven P. Donegan wrote:
Well, not really 'looking for' anything except info - as an earlier 
gentleman said I can always just do stuff over a VPN - it's more a 
simple interest in where things might be going.

Thanks as always for the feedback folks
Nick Bachmann wrote:
[EMAIL PROTECTED] wrote:
If I remeber correctly, Mark Spencer is working on encryption in IAX2
 

Sort of.  Some IAX encryption code went into CVS a while back, but it 
was more of a "talking point" than anything else, meant to give 
interested developers a starting point.  The -dev and -security list 
archives have some discussion about this.  I don't think there's been 
too much continued work on it, but volunteers are always accepted!

For SIP, native encryption should be done through SRTP, which many 
people have asked for but nobody has really delivered.  Again, you 
will find some good background discussion in the list archives.

Running IAX over stunnel would probably be feasible if both sides of 
a tunnel were machines. That's at least a little closer to to native, 
and very easy to set up.  However, I don't think that's what you were 
looking for... :)

Nick
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Encrypted VOIP?

2005-02-04 Thread Howard Lowndes
On Sat, 2005-02-05 at 12:33, Steven P. Donegan wrote:
> I have done that extensively (H.323 and SIP over IPSEC tunnels) I was 
> more interested in the possibilities of 'native' support of some kind. 
> But thank you very much for the response.

Isn't there a fairly significant overhead with this, given the small
size if the IAX2 datagrams?

> 
> dean collins wrote:
> 
> >Just run point to point encryption over a vpn.
> >
> >
> >
> >-Original Message-
> >From: [EMAIL PROTECTED]
> >[mailto:[EMAIL PROTECTED] On Behalf Of Steven P.
> >Donegan
> >Sent: Friday, February 04, 2005 8:26 PM
> >To: asterisk-users@lists.digium.com
> >Subject: [Asterisk-Users] Encrypted VOIP?
> >
> >Is there any support in Asterisk for encryption of IAX and/or any other 
> >VOIP protocols? I haven't seen anything on this in the wiki or on the 
> >list. Just curious.
> >___
> >Asterisk-Users mailing list
> >Asterisk-Users@lists.digium.com
> >http://lists.digium.com/mailman/listinfo/asterisk-users
> >To UNSUBSCRIBE or update options visit:
> >   http://lists.digium.com/mailman/listinfo/asterisk-users
> >
> >___
> >Asterisk-Users mailing list
> >Asterisk-Users@lists.digium.com
> >http://lists.digium.com/mailman/listinfo/asterisk-users
> >To UNSUBSCRIBE or update options visit:
> >   http://lists.digium.com/mailman/listinfo/asterisk-users
> >
> >  
> >
> 
> ___
> Asterisk-Users mailing list
> Asterisk-Users@lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-users
> To UNSUBSCRIBE or update options visit:
>http://lists.digium.com/mailman/listinfo/asterisk-users
-- 
Howard.
LANNet Computing Associates;
Your Linux people <http://www.lannetlinux.com>
--
"When you just want a system that works, you choose Linux;
when you want a system that just works, you choose Microsoft."
--
"Flatter government, not fatter government;
Get rid of the Australian states."


___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Encrypted VOIP?

2005-02-04 Thread Steven P. Donegan
Well, not really 'looking for' anything except info - as an earlier 
gentleman said I can always just do stuff over a VPN - it's more a 
simple interest in where things might be going.

Thanks as always for the feedback folks
Nick Bachmann wrote:
[EMAIL PROTECTED] wrote:
If I remeber correctly, Mark Spencer is working on encryption in IAX2
 

Sort of.  Some IAX encryption code went into CVS a while back, but it 
was more of a "talking point" than anything else, meant to give 
interested developers a starting point.  The -dev and -security list 
archives have some discussion about this.  I don't think there's been 
too much continued work on it, but volunteers are always accepted!

For SIP, native encryption should be done through SRTP, which many 
people have asked for but nobody has really delivered.  Again, you 
will find some good background discussion in the list archives.

Running IAX over stunnel would probably be feasible if both sides of a 
tunnel were machines. That's at least a little closer to to native, 
and very easy to set up.  However, I don't think that's what you were 
looking for... :)

Nick
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Encrypted VOIP?

2005-02-04 Thread Nick Bachmann
[EMAIL PROTECTED] wrote:
If I remeber correctly, Mark Spencer is working on encryption in IAX2
 

Sort of.  Some IAX encryption code went into CVS a while back, but it 
was more of a "talking point" than anything else, meant to give 
interested developers a starting point.  The -dev and -security list 
archives have some discussion about this.  I don't think there's been 
too much continued work on it, but volunteers are always accepted!

For SIP, native encryption should be done through SRTP, which many 
people have asked for but nobody has really delivered.  Again, you will 
find some good background discussion in the list archives.

Running IAX over stunnel would probably be feasible if both sides of a 
tunnel were machines. That's at least a little closer to to native, and 
very easy to set up.  However, I don't think that's what you were 
looking for... :)

Nick
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Encrypted VOIP?

2005-02-04 Thread timebandit001
If I remeber correctly, Mark Spencer is working on encryption in IAX2

hth
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Encrypted VOIP?

2005-02-04 Thread Steven P. Donegan
I have done that extensively (H.323 and SIP over IPSEC tunnels) I was 
more interested in the possibilities of 'native' support of some kind. 
But thank you very much for the response.

dean collins wrote:
Just run point to point encryption over a vpn.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Steven P.
Donegan
Sent: Friday, February 04, 2005 8:26 PM
To: asterisk-users@lists.digium.com
Subject: [Asterisk-Users] Encrypted VOIP?
Is there any support in Asterisk for encryption of IAX and/or any other 
VOIP protocols? I haven't seen anything on this in the wiki or on the 
list. Just curious.
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users

___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users
 

___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users


RE: [Asterisk-Users] Encrypted VOIP?

2005-02-04 Thread dean collins
Just run point to point encryption over a vpn.



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Steven P.
Donegan
Sent: Friday, February 04, 2005 8:26 PM
To: asterisk-users@lists.digium.com
Subject: [Asterisk-Users] Encrypted VOIP?

Is there any support in Asterisk for encryption of IAX and/or any other 
VOIP protocols? I haven't seen anything on this in the wiki or on the 
list. Just curious.
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


[Asterisk-Users] Encrypted VOIP?

2005-02-04 Thread Steven P. Donegan
Is there any support in Asterisk for encryption of IAX and/or any other 
VOIP protocols? I haven't seen anything on this in the wiki or on the 
list. Just curious.
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users