Thanks Lonnie. The Acrobits client does the same thing, plus more... you
can optionally register with a push notification server maintained by
Acrobits. In this case when you put the client to background the SIP
registration switches from the client iOS device to the Acrobits server
(yes you are trusting Acrobits with your login credentials). Now your
registration stays alive even if the Acrobits SIP client is completely shut
down.
Push is claimed to be more reliable, although it may take a second or two
longer for the "ring" to get to you and switch to the client iOS app.
Indeed with the non-push background support on an iPhone roaming between
WiFi and cellular 3G/4G I have seen log messages at the astlinux server
that suggests there are times that the client is "lost" by the asterisk
server. Not hard to understand why as IP addresses/routes will be changing.
David
On Tue, Nov 13, 2012 at 5:16 PM, Lonnie Abelbeck
<[email protected]>wrote:
> Web interface, Network tab -> Network Services: Asterisk SIP-TLS Server
> Certificate { SIP-TLS Certificate }
>
> support has been added to the SVN.
>
> As David mentioned a few weeks back, SIP-TLS is the way to go for mobile
> devices. I have been testing with an iPod Touch using Bria and a Verizon
> LTE MiFi (and local WiFi)... Bria does not need to run in the background as
> it seems iOS has some TCP tracking magic. Even with the iPod Touch turned
> off, and incoming call wakes the iPod Touch and smoothly presents the call.
> Presumably Acrobits Groundwire works in the same way.
>
> While overnight the iPod Touch maintained an open TCP state, even while
> off, but no noticeable power drain. This on my main AstLinux box now, so I
> can do more real world testing. It seems killing the Bria process is the
> only way to really turn the client off.
>
> It would be interesting to hear if Android devices work similarly with
> SIP-TLS.
>
> BTW, a screen shot is attached below... Thanks for everyone's input.
>
> Lonnie
>
>
>
>
>
> On Nov 12, 2012, at 1:35 PM, David Kerr wrote:
>
> > I agree that it is useful to have this support added to the web
> interface. Thanks Lonnie.
> >
> > David
> >
> >
> > On Mon, Nov 12, 2012 at 2:19 PM, Lonnie Abelbeck <
> [email protected]> wrote:
> > Hi Michael,
> >
> > It is not that Asterisk fails to handle SIP TLS certificates correctly,
> it is just not completely implemented.
> >
> > Though this may be somewhat moot if many of the SIP clients don't
> support client certs anyway. I'm using Bria (iOS) and unless it is hidden,
> I don't see client cert support.
> >
> > I still think this is worth adding to the web interface, client
> certificate generation can be easily added down the road if needed,
> whatever the server/proxy is.
> >
> > Lonnie
> >
> >
> > On Nov 12, 2012, at 12:49 PM, Michael Keuter wrote:
> >
> > > So IMHO it is not very efficient to waste effort on the TLS
> certificate feature in Astlinux if Asterisk fails to handle it correct ATM.
> > > Would it instead be interesting to think about a SIP proxy like e.g
> Repro?
> > > (The additional requierements are not that big).
> > >
> > > Sent from my iPad
> > >
> > > Michael
> > >
> > > Am 12.11.2012 um 19:34 schrieb Lonnie Abelbeck <
> [email protected]>:
> > >
> > >> Clarification, regarding my earlier comment:
> > >>
> > >>> Edit: Ahhh, before sending this email, I confirmed that if the CA
> CommonName is set to pbx2.priv.abelbeck.com (not the IP 10.10.50.61) and
> then try to connect via 10.10.50.61 the TLS fails. I suppose that is a
> hurdle by setting the CommonName to a DNS name rather than an IP address.
> > >>
> > >> The 'Server Certificate' (not CA as stated) CommonName or
> subjectAltName validity check is implemented on the client not the server
> (asterisk), so this feature does not add a hurdle for the evil doers.
> > >>
> > >> Lonnie
> > >>
>
>
>
> ------------------------------------------------------------------------------
> Monitor your physical, virtual and cloud infrastructure from a single
> web console. Get in-depth insight into apps, servers, databases, vmware,
> SAP, cloud infrastructure, etc. Download 30-day Free Trial.
> Pricing starts from $795 for 25 servers or applications!
> http://p.sf.net/sfu/zoho_dev2dev_nov
> _______________________________________________
> Astlinux-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>
> Donations to support AstLinux are graciously accepted via PayPal to
> [email protected].
>
------------------------------------------------------------------------------
Monitor your physical, virtual and cloud infrastructure from a single
web console. Get in-depth insight into apps, servers, databases, vmware,
SAP, cloud infrastructure, etc. Download 30-day Free Trial.
Pricing starts from $795 for 25 servers or applications!
http://p.sf.net/sfu/zoho_dev2dev_nov
_______________________________________________
Astlinux-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to
[email protected].
