Hi Olivier, Looking into this I don't think you need to use the TLS/SSL support in PJSIP.
Instead, you can set up a secured websocket in websockets.cpp (which will need new config options to pass the necessary certificates in), then pass this onto PJSIP in the same way as a standard websocket connection. If you look in https://github.com/zaphoyd/websocketpp/tree/master/examples (this is the websockets module we use), there are two examples, echo_server.cpp and echo_server_both.cpp, where echo_server_both.cpp supports secure websockets. I think you'll need to add the changes between echo_server.cpp and echo_server_both.cpp to the websockets.cpp in Sprout. Hope this helps, Ellie From: DURECU, OLIVIER (OLIVIER) [mailto:[email protected]] Sent: 04 June 2014 13:29 To: Eleanor Merry Cc: [email protected] Subject: RE: Seured Websockets support Ellie, No pb, I have started looking at the code. It seems that PJSIP is already compiled with TLS/SSL support enabled So I guess that the main point is to add config elements for Bono to indicate the certificates for the TLS link and to pass them from websocket.cpp towards pjsip? Olivier De : Eleanor Merry [mailto:[email protected]] Envoyé : mercredi 4 juin 2014 14:06 À : DURECU, OLIVIER (OLIVIER) Cc : [email protected]<mailto:[email protected]> Objet : RE: Seured Websockets support Hi Olivier, We're not going to be able to look at this within the next month, but we'd be happy to discuss how the websockets code will need changing to support this though. Ellie From: DURECU, OLIVIER (OLIVIER) [mailto:[email protected]] Sent: 28 May 2014 19:24 To: Eleanor Merry Cc: [email protected]<mailto:[email protected]> Subject: RE: Seured Websockets support The need comes from Firefox (using a web based ims client hosted on HTTPS server, wss becomes mandatory for the browser) It would be nice having it within one month and I would be happy contributing. But this this is less blocking than the SIP message size I am facing (yesterday email...) where I would be happy contributing if possible... Olivier Le 28 mai 2014 19:57, Eleanor Merry <[email protected]<mailto:[email protected]>> a écrit : Hi Olivier, Clearwater doesn't currently support secured websockets. Do you have a particular need/timeframe for this function? Would you like to contribute to Clearwater by helping to add the support for this? Ellie -----Original Message----- From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of DURECU, OLIVIER (OLIVIER) Sent: 26 May 2014 16:54 To: [email protected]<mailto:[email protected]> Subject: [Clearwater] Seured Websockets support Hi all, Can Bono be configured to support secured websockets (wss://...) to have traffic encrypted between Bono and clients? Thanks, Olivier DURECU Bell Labs / IP Platform Research Villarceaux Center Tel: +33(0) 160402759 GSM: +33(0) 683776482 _______________________________________________ Clearwater mailing list [email protected]<mailto:[email protected]> http://lists.projectclearwater.org/listinfo/clearwater _______________________________________________ Clearwater mailing list [email protected] http://lists.projectclearwater.org/listinfo/clearwater
