We use Opensips (with TLS) as a dispatcher to multiple Asterisk servers.  
Currently we are in the process of upgrading from 1.7.1 to 1.11.5, and we ran 
into a discrepancy between 1.7.1 and 1.11.5 regarding SIP NOTIFY messages.


Here is the flow (both ways):

UAC    (TLS) ->     Opensips   (UDP)->     Asterisk
Asterisk     (UDP) ->     Opensips       (TLS)->    UAC


In 1.7.1,  all messages between Opensips and UAC were encrypted - didn't matter 
if it was originated at UAC or Asterisk.

In 1.11.5, the SIP NOTIFY messages coming from Asterisk are sent to UAC 
unencrypted (and not accepted by UAC). Here is the request that Opensips 
receives and sends to the UAC in plaintext:

Request-Line: NOTIFY sip:101@1.2.3.4:5075;transport=tls;nat=yes SIP/2.0

Anything we can do to have that leg encrypted as well?

Thanks,
Matt

_______________________________________________
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Reply via email to