[asterisk-users] repeating TLS error in log file

2015-10-26 Thread Kevin Long
Greetings, I use TLS and SRTP on all my extensions. I use openssl and distribute my root certificate to my endpoints. Most of the time my calls work just fine. Sometimes I receive a repeating error in my log files however, and I don’t know why this is happening. I’m wondering if this

[asterisk-users] How exactly does asterisk know what IP to send RTP traffic to?

2015-11-23 Thread Kevin Long
assigned the client device. Does asterisk send RTP traffic to the IP which is in the IP headers of the SIP REGISTER , or can a client “specify” it’s truly reachable IP ? I hope this makes sense. Regards, Kevin Long

[asterisk-users] Asterisk 13 with LDAP ? (single sign on )

2016-06-10 Thread Kevin Long
of other applications, and am curious if anyone has a working example or if this is even possible? Thank you, Kevin Long -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us

Re: [asterisk-users] Need stronger SRTP ciphers (256 bit)

2016-05-30 Thread Kevin Long
suite); > On May 30, 2016, at 11:49 AM, Kevin Long <kevin.l...@haloprivacy.com> wrote: > > > > Hi folks, > > > At least several endpoints (soft phone and desk phones) are supporting > various 256 bit ciphers for SRTP these days. I *believe* libs

[asterisk-users] Need stronger SRTP ciphers (256 bit)

2016-05-30 Thread Kevin Long
with the know-how be willing/able to submit a patch ? Thank you, Kevin Long -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs

[asterisk-users] NAT traversal for mobile app softphones - best strategy?

2016-02-04 Thread Kevin Long
unclear as to whether I truly need 2 separate public IPs for the turn server to work, which I have seen mentioned in some of the documents. Thank you for your time. Regards, Kevin Long smime.p7s Description: S/MIM

[asterisk-users] PJSIP signaling question

2016-02-29 Thread Kevin Long
Greetings. I am using the PJSIP driver with TLS transport, and my endpoints are SIP mobile apps operating in environments that I do not control. I would like Asterisk to default to sending INVITES and all other SIP signals to endpoints via the existing SIP TLS connection which is already

[asterisk-users] Determining and setting TLS cipher ?

2016-02-14 Thread Kevin Long
k you, Kevin Long output from “openssl ciphers” on my Asterisk box: ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-ECDSA-AES256-SHA DHE-DSS-AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DH

Re: [asterisk-users] PJSIP signaling question

2016-03-01 Thread Kevin Long
, firewall, or Asterisk/pjsip that is the culprit . Regards, Kevin Long smime.p7s Description: S/MIME cryptographic signature -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us

[asterisk-users] conference call stuttering / clocking issue (?) - ESXi virtual environment

2016-03-09 Thread Kevin Long
, and wondering if anyone has anything I could try to fix or mitigate the problem in ESXi environment . We have freepbx (asterisk 11 chan_sip) and test environments asterisk 13.7/8 pjsip . Thank you again, Kevin Long smime.p7s Description: S/MIME cryptographic signature

[asterisk-users] 2 devices same *actual* extension - can it be done

2016-03-09 Thread Kevin Long
. Their provisioning system assumes that both devices will use the same SIP extension for auth however. Normally we would use separate extensions and a follow-me , but if there is any way to use the same extension, I need to figure it out. Thank you, Kevin Long smime.p7s Description: S/MIME

Re: [asterisk-users] conference call stuttering / clocking issue (?) - ESXi virtual environment

2016-03-09 Thread Kevin Long
Thanks John, For anyone reading this using FreePBX - simply switching the default conference app from MeetMe to ConfBridge seems to be a drastic improvement, have not stress tested but running a conf now with no stutter on Confbrdige app. Cheers, Kevin Long > On Mar 9, 2016, at 12:17

[asterisk-users] Client TLS certificates for auth ?

2016-03-28 Thread Kevin Long
a second factor of authentication besides the SIP secret , since in my current setup, despite using a TLS/SSL cert for the server, the server only verifies the client by the SIP secret. Regards, Kevin Long smime.p7s Description: S/MIME cryptographic signature

Re: [asterisk-users] Recommendations for free virtual server tech and Asterisk?

2016-04-06 Thread Kevin Long
Personally I am about to try asterisk on proxmox using containers since they run code "native". I've had timing issues on conference calls (stutter) with VMware esxi . Not sure about KVM I hope it's also better than esxi too. Sent from my iPhone > On Apr 6, 2016, at 9:13 AM, Markos Vakondios

Re: [asterisk-users] RTP / NAT question ( pjsip )

2016-03-03 Thread Kevin Long
again, Kevin Long smime.p7s Description: S/MIME cryptographic signature -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs

Re: [asterisk-users] PJSIP signaling question

2016-03-03 Thread Kevin Long
ot working and the internal IP being sent in the SDP from asterisk - I applied this patch to the codebase and recompiled I am seeing the TLS “new transport” issue again , I think. Regards, Kevin Long smime.p7s Description: S/MIME cryptographic

Re: [asterisk-users] PJSIP signaling question

2016-03-04 Thread Kevin Long
rge Joseph <george.jos...@fairview5.com> > wrote: > > > >> On Thu, Mar 3, 2016 at 8:25 PM, Kevin Long <kevin.l...@haloprivacy.com> >> wrote: >> >> Thanks George I appreciate the info . Being able to see what codec is in >> use for call in p

Re: [asterisk-users] PJSIP signaling question

2016-03-04 Thread Kevin Long
Joseph <george.jos...@fairview5.com> wrote: > > > > On Fri, Mar 4, 2016 at 1:16 AM, Kevin Long <kevin.l...@haloprivacy.com> wrote: > Hi George the patch was from here , you wrote it I believe . I pulled > asterisk 13 from git, apply this patch which fixed RTP issue , bu

[asterisk-users] RTP / NAT question ( pjsip )

2016-03-02 Thread Kevin Long
I am having trouble with RTP and NAT : Below is a SIP SDP invite from a remote endpoint which is trying to call extension 420 which is the ECHO application . As you can see, the public IP is where the request comes in from, but the SDP contains the private, internal IP in numerous places.

Re: [asterisk-users] RTP / NAT question ( pjsip )

2016-03-02 Thread Kevin Long
Hi Joshua, Looking at the transmitted SIP packets from Asterisk, it looks like Asterisk is only sending it’s own internal IP (it is behind a NAT too, with proper port forwarding) . I did set in my transport the external_signaling_address and external_media_address , and I have now put

Re: [asterisk-users] RTP / NAT question ( pjsip )

2016-03-02 Thread Kevin Long
Thank you for the response Joshua . I had rtp_symmetric=yes before I wrote the email, then I set it to no, restart asterisk, and tried to make the call from the remote endpoint again but still tcpdump is showing me the RTP packets are being sent from Asterisk to the private IP. tcpdump

Re: [asterisk-users] RTP / NAT question ( pjsip )

2016-03-03 Thread Kevin Long
Hi Joshua, This Asterisk 13 was pulled from git master branch just 2-3 days ago: GIT-13-d1495b . I used this very recent source code to overcome a pjsip problem (you can see my email list post from a few days ago) Thanks again smime.p7s Description: S/MIME cryptographic signature --

[asterisk-users] packet loss stats - how does asterisk know about packets sent % lost ?

2017-01-28 Thread Kevin Long
! Kevin Long -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- Check out the new Asterisk community forum at: https://community.asterisk.org/ New to Asterisk? Start here: https://wiki.asterisk.org

[asterisk-users] 256 bit SRTP ciphers in Asterisk 14.x , only works for outbound call ?

2017-01-11 Thread Kevin Long
on the phone, the call fails. Perhaps this is just not documented, or may not be implemented yet. Anyone have a thought? Thank you,. Kevin Long -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com

[asterisk-users] TLS certificate warnings in softphone, but not until after successful registration and call placed ?

2016-12-30 Thread Kevin Long
Hello, I am using asterisk 14.2 and PJSIP, with TLS transport. I’m sure I’m doing something wrong here .. In 2 distinct softphone clients (Bria and Groundwire), I am able to register successfully, and place a SIP call, with no certificate warnings. But shortly after I place that first

[asterisk-users] RTP / NAT question with IPv6/IPv4 problem

2017-06-06 Thread Kevin Long
Hello, All my asterisk systems use only IPv4 currently. I have one phone which is on T-Mobile network, and this network is only IPv6 now. The phone can register fine, because T-Mobile does NAT64 and it connects fine to my IPv4 asterisk server. But in the SDP for a call setup, this

[asterisk-users] pjsip trunking configuration issue

2018-02-07 Thread Kevin Long
Greetings ! My goal is to get Twilio trunking working, and with TLS/SRTP. I see this concerning message in my log: [Feb 7 16:50:26] ERROR[20596] res_sorcery_config.c: Could not create an object of type 'endpoint' with id ’twilio' from configuration file ‘pjsip.conf’ Thus, ‘pjsip show

[asterisk-users] how to get "SMS" messages (http) into Asterisk "sip messages"

2018-02-19 Thread Kevin Long
something like this. Outbound is the easy part. How are you handling inbound SMS->SIP ? Regards, Kevin Long -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- Check out the new Asterisk community fo

[asterisk-users] pjsip trunk config question + DNS related error messages

2018-03-29 Thread Kevin Long
Greetings, I am getting the following error (below) continually in my asterisk log, related to qualify_frequency I believe. I am trying to use sip trunking with the company flowroute. 3 questions if I may: 1) Is using qualify_frequency with a sip trunk a common or recommended practice? I