<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p>Hello,</p>
    <p>for phones that are using tls, you can do the following tests:</p>
    <p>  - for incoming traffic: proto==TLS<br>
        - for outgoing traffic: after lookup location, the R-URI ($ru)
      should have 'transport=tls'</p>
    <p>For RTPEngine there are some flags to specify you want or not
      SDES SRTP, I used them few times in the past, but I don't recall
      them by heart -- the docs should have them.</p>
    <p>Cheers,<br>
      Daniel<br>
    </p>
    <br>
    <div class="moz-cite-prefix">On 26.07.17 06:40, David Cunningham
      wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CAHGbP-_p6pcSLcUK2RcX=Te0RHw5wgAf-1V7BY7v9e6RBLg_vQ@mail.gmail.com">
      <div dir="ltr">
        <div>
          <div>Hello,<br>
            <br>
          </div>
          We're configuring Kamailio 4.2 with rtpengine to act as a
          midpoint between a telephone using TLS/SRTP and Asterisk.
          There are examples out there for TLS/SRTP with WebRTC, but
          we're using a plain hard phone, not WebRTC.<br>
          <br>
        </div>
        <div>Would anyone be able to point us towards a Kamaiio
          configuration which:<br>
          <br>
        </div>
        <div>a) Tests if the destination phone (stored using usrloc)
          uses TLS.<br>
          <br>
        </div>
        <div>b) Sends RTP for calls to a TLS phone to rtpengine to be
          encrypted. We can assume all phones using TLS want to use
          SRTP.<br>
          <br>
        </div>
        <div>Thanks very much in advance.<br>
        </div>
        <div>
          <div>
            <div><br>
              -- <br>
              <div class="gmail_signature"
                data-smartmail="gmail_signature">
                <div dir="ltr">
                  <div>
                    <div dir="ltr">
                      <div>David Cunningham, Voisonics Limited<br>
                        <a href="http://voisonics.com/" target="_blank"
                          moz-do-not-send="true">http://voisonics.com/</a><br>
                        USA: +1 213 221 1092<br>
                        Australia: +61 (0) 2 8063 9019<br>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </div>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Kamailio (SER) - Users Mailing List
<a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.kamailio.org">sr-users@lists.kamailio.org</a>
<a class="moz-txt-link-freetext" href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
    </blockquote>
    <br>
    <pre class="moz-signature" cols="72">-- 
Daniel-Constantin Mierla
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda">www.linkedin.com/in/miconda</a>
Kamailio Advanced Training - <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a>
Kamailio World Conference - <a class="moz-txt-link-abbreviated" href="http://www.kamailioworld.com">www.kamailioworld.com</a></pre>
  </body>
</html>