<p dir="ltr">We don't support SRTP de/re-encryption at this point, neither in master nor in 2.0. The work to add it is underway, but we are not quite there yet. Pass-through mode should be working fine though, we've tested it recently specifically.</p>
<div class="gmail_quote">On Jun 7, 2016 12:27 PM, "Albert Petit" <<a href="mailto:albert.petit@genaker.net">albert.petit@genaker.net</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi ,<div><br>Sorry for previous question. Finally it seems i got confused because traffic my UA was sending was not properly encrypted .Then when doing server tcpdump wireshark was seeing it still as RTCP (and not SRTCP) when jumping on rtpproxy :-) When fixed problem in user agent all traffic is SRTCP and rtpproxy just bridges it to the destination.</div><div><br></div><div>I was thinking of some interaction because new feature at <a href="https://github.com/sipwise/mediaproxy-ng" target="_blank">https://github.com/sipwise/mediaproxy-ng</a> ( (B<span style="color:rgb(51,51,51);font-family:"Helvetica Neue",Helvetica,"Segoe UI",Arial,freesans,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";line-height:25.6px">ridging between RTP and SRTP user agents) but i understand this feature to decode SRTP can only be enabled when mediaproxy-ng is used (that feature is not supported by rtpproxy, but by mediaproxy-ng correct?).</span></div><div><span style="color:rgb(51,51,51);font-family:"Helvetica Neue",Helvetica,"Segoe UI",Arial,freesans,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";line-height:25.6px"><br></span></div><div><span style="color:rgb(51,51,51);font-family:"Helvetica Neue",Helvetica,"Segoe UI",Arial,freesans,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";line-height:25.6px"> </span><span style="color:rgb(51,51,51);font-family:"Helvetica Neue",Helvetica,"Segoe UI",Arial,freesans,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";line-height:25.6px">BTW can this feature be enabled easily when mediaproxy-ng is used? Is that enabled using following flags on rtpproxy_offer etc? </span><span style="color:rgb(51,51,51);font-family:"Helvetica Neue",Helvetica,"Segoe UI",Arial,freesans,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";line-height:25.6px">(</span><span style="color:rgb(0,0,0);font-family:Helvetica,Arial;text-align:justify"><em>s, S, p, P</em></span><span style="color:rgb(0,0,0);font-family:Helvetica,Arial;text-align:justify"> - These flags control the RTP transport protocol that should be used towards the recipient of the SDP. If none of them are specified, the protocol given in the SDP is left untouched. Otherwise, the "S" flag indicates that SRTP should be used, while "s" indicates that SRTP should not be used. "P" indicates that the advanced RTCP profile with feedback messages should be used, and "p" indicates that the regular RTCP profile should be used. As such, the combinations "sp", "sP", "Sp" and "SP" select between RTP/AVP, RTP/AVPF, RTP/SAVP and RTP/SAVPF, respectively.)</span></div><div><span style="color:rgb(0,0,0);font-family:Helvetica,Arial;text-align:justify"><br></span></div><div><span style="color:rgb(51,51,51);font-family:"Helvetica Neue",Helvetica,"Segoe UI",Arial,freesans,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";line-height:25.6px">Thanks</span></div><div><span style="color:rgb(51,51,51);font-family:"Helvetica Neue",Helvetica,"Segoe UI",Arial,freesans,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";line-height:25.6px">Albert</span></div><div><span style="color:rgb(51,51,51);font-family:"Helvetica Neue",Helvetica,"Segoe UI",Arial,freesans,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";font-size:16px;line-height:25.6px"><br></span></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">2016-06-01 12:18 GMT+02:00 Albert Petit <span dir="ltr"><<a href="mailto:albert.petit@genaker.net" target="_blank">albert.petit@genaker.net</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi list<div><br></div><div>I have installed a newer version of rtpproxy (2.0) in our development server , i was happy because it brings lot of performance improvements </div><div><br></div><div>However i have found an issue when clients use TLS+SRTP</div><div><br></div><div>In that scenario i do not want rtpproxy to decrypt/reencrypt the traffic as my B2BUA does that or in some scenarios we do plan to add end to end encryption. RTPProxy 1.X was doing that perfectly</div><div><br></div><div>Instead since i use rtpproxy 2.0 all SRTP and SRTCP traffic is decrypted by rtpproxy and i receive it clear in the B2BUA</div><div><br></div><div>How can i disable this new feature and that rtpproxy just keeps sending the received SRTP/SRTCP stream without decrypting it?</div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div data-smartmail="gmail_signature"><div dir="ltr"><div>Albert Petit</div>
<div><a href="http://www.linkedin.com/in/albertpv" target="_blank">Agile Software Architect</a><br></div>
<div>GENAKER - Esi Mobile Solutions SL<br><a href="http://www.genaker.net/" target="_blank">www.genaker.net</a><br>Phone <a href="tel:%2B34%20932%20422%20885" value="+34932422885" target="_blank">+34 932 422 885</a><br><br></div>
<p> </p></div></div>
</div>
<br>_______________________________________________<br>
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br>
<a href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a><br>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><br>
<br></blockquote></div>