<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body>
<div dir="auto" style="direction: ltr; margin: 0; padding: 0; font-family: sans-serif; font-size: 11pt; color: black; ">
Hello,<br>
</div>
<div dir="auto" style="direction: ltr; margin: 0; padding: 0; font-family: sans-serif; font-size: 11pt; color: black; ">
<br>
<br>
</div>
<div dir="auto" style="direction: ltr; margin: 0; padding: 0; font-family: sans-serif; font-size: 11pt; color: black; ">
Sorry for the short previous reply, my fault.<br>
<br>
</div>
<div dir="auto" style="direction: ltr; margin: 0; padding: 0; font-family: sans-serif; font-size: 11pt; color: black; ">
Kamailio can act as TLS Server and Client with the TLS Module. So it can of course process and handle encryption and decryption for TLS Transport<br>
<br>
</div>
<div dir="auto" style="direction: ltr; margin: 0; padding: 0; font-family: sans-serif; font-size: 11pt; color: black; ">
Cheers,<br>
<br>
</div>
<div dir="auto" style="direction: ltr; margin: 0; padding: 0; font-family: sans-serif; font-size: 11pt; color: black; ">
Henning<br>
<br>
</div>
<div dir="auto" style="direction: ltr; margin: 0; padding: 0; font-family: sans-serif; font-size: 11pt; color: black; ">
<span id="ms-outlook-mobile-signature">
<div><br>
</div>
<br>
-- <br>
Henning Westerholt - <a href="https://skalatan.de/blog/" target="_blank">https://skalatan.de/blog/</a><br>
Kamailio services - <a href="https://skalatan.de/services" target="_blank">https://skalatan.de/services</a></span><br>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Sudhakar Parasher <sudhakarparasher@gmail.com><br>
<b>Sent:</b> Wednesday, December 18, 2019 6:16:35 PM<br>
<b>To:</b> Henning Westerholt <hw@skalatan.de><br>
<b>Cc:</b> Kamailio (SER) - Users Mailing List <sr-users@lists.kamailio.org><br>
<b>Subject:</b> Re: [SR-Users] Kamailio SIP TLS Troubleshooting</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div>Ok, thanks. But do you mean to say Kamailio doesn't provide any module to decrypt the Encrypted SIP packets? </div>
</div>
<br>
<div class="x_gmail_quote">
<div class="x_gmail_attr" dir="ltr">On Wed, Dec 18, 2019 at 10:22 PM Henning Westerholt <<a href="mailto:hw@skalatan.de">hw@skalatan.de</a>> wrote:<br>
</div>
<blockquote class="x_gmail_quote" style="margin:0px 0px 0px 0.8ex; padding-left:1ex; border-left-color:rgb(204,204,204); border-left-width:1px; border-left-style:solid">
<div lang="DE">
<div class="x_gmail-m_-1066662276138693395WordSection1">
<p class="x_MsoNormal"><span>Hello,<u></u><u></u></span></p>
<p class="x_MsoNormal"><span><u></u> <u></u></span></p>
<p class="x_MsoNormal"><span lang="EN-GB">if the requirement is to send this from android – then maybe ask at the android client project or vendor. I can’t help you here, sorry.<u></u><u></u></span></p>
<p class="x_MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="x_MsoNormal"><span lang="EN-GB">If the requirement is to send this from Kamailio, there were already some suggestions done in this e-mail thread.<u></u><u></u></span></p>
<p class="x_MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="x_MsoNormal"><span lang="EN-GB">Cheers,<u></u><u></u></span></p>
<p class="x_MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="x_MsoNormal"><span lang="EN-GB">Henning<u></u><u></u></span></p>
<p class="x_MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="x_MsoNormal"><span lang="EN-GB">-- <u></u><u></u></span></p>
<p class="x_MsoNormal"><span lang="EN-GB">Henning Westerholt – </span><span><a href="https://skalatan.de/blog/" target="_blank"><span lang="EN-GB" style="color:rgb(5,99,193)">https://skalatan.de/blog/</span></a></span><span lang="EN-GB"><u></u><u></u></span></p>
<p class="x_MsoNormal"><span lang="EN-GB">Kamailio services – </span><span><a href="https://gilawa.com/" target="_blank"><span lang="EN-GB" style="color:rgb(5,99,193)">https://gilawa.com</span></a></span><span>
<span lang="EN-GB"><u></u><u></u></span></span></p>
<p class="x_MsoNormal"><span><u></u> <u></u></span></p>
<p class="x_MsoNormal" style="margin-left:35.4pt"><b>From:</b> Sudhakar Parasher <<a href="mailto:sudhakarparasher@gmail.com" target="_blank">sudhakarparasher@gmail.com</a>>
<br>
<b>Sent:</b> Wednesday, December 18, 2019 5:49 PM<br>
<b>To:</b> Henning Westerholt <<a href="mailto:hw@skalatan.de" target="_blank">hw@skalatan.de</a>><br>
<b>Cc:</b> Kamailio (SER) - Users Mailing List <<a href="mailto:sr-users@lists.kamailio.org" target="_blank">sr-users@lists.kamailio.org</a>><br>
<b>Subject:</b> Re: [SR-Users] Kamailio SIP TLS Troubleshooting<u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:35.4pt"><u></u> <u></u></p>
<div>
<div>
<p class="x_MsoNormal" style="margin-left:35.4pt">Hi Henning<u></u><u></u></p>
</div>
<div>
<p class="x_MsoNormal" style="margin-left:35.4pt"><u></u> <u></u></p>
</div>
<div>
<p class="x_MsoNormal" style="margin-left:35.4pt">My SIP message which are received by my kamailio is already TLS Encrypted from my android Client ( Handset) but I have requirement to forward<u></u><u></u></p>
</div>
<div>
<p class="x_MsoNormal" style="margin-left:35.4pt">these SIP messages from android client to a port mirrored destination ( say a Probe).<u></u><u></u></p>
</div>
<div>
<p class="x_MsoNormal" style="margin-left:35.4pt"><u></u> <u></u></p>
</div>
<div>
<p class="x_MsoNormal" style="margin-left:35.4pt">Cheers<u></u><u></u></p>
</div>
<div>
<p class="x_MsoNormal" style="margin-left:35.4pt">Sudhakar Parasher<u></u><u></u></p>
</div>
</div>
<p class="x_MsoNormal" style="margin-left:35.4pt"><u></u> <u></u></p>
<div>
<div>
<p class="x_MsoNormal" style="margin-left:35.4pt">On Wed, Dec 18, 2019 at 9:39 PM Henning Westerholt <<a href="mailto:hw@skalatan.de" target="_blank">hw@skalatan.de</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-width:medium medium medium 1pt; border-style:none none none solid; border-color:currentColor currentColor currentColor rgb(204,204,204); padding:0cm 0cm 0cm 6pt; margin-right:0cm; margin-left:4.8pt">
<div>
<div>
<p class="x_MsoNormal" style="margin-left:35.4pt">Hello,<u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:35.4pt"> <u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB">Not sure if I understood you correctly. The SIP message data is not encrypted inside Kamailio, otherwise it would not work to parse the packet etc.. So you can access it and also forward it
unencrypted to another destination.</span><u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> </span><u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB">Cheers,</span><u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> </span><u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB">Henning</span><u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> </span><u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB">-- </span><u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB">Henning Westerholt –
</span><a href="https://skalatan.de/blog/" target="_blank"><span lang="EN-GB" style="color:rgb(5,99,193)">https://skalatan.de/blog/</span></a><u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB">Kamailio services –
</span><a href="https://gilawa.com/" target="_blank"><span lang="EN-GB" style="color:rgb(5,99,193)">https://gilawa.com</span></a>
<u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:35.4pt"> <u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:70.8pt"><b>From:</b> Sudhakar Parasher <<a href="mailto:sudhakarparasher@gmail.com" target="_blank">sudhakarparasher@gmail.com</a>>
<br>
<b>Sent:</b> Wednesday, December 18, 2019 5:06 PM<br>
<b>To:</b> Henning Westerholt <<a href="mailto:hw@skalatan.de" target="_blank">hw@skalatan.de</a>><br>
<b>Cc:</b> Kamailio (SER) - Users Mailing List <<a href="mailto:sr-users@lists.kamailio.org" target="_blank">sr-users@lists.kamailio.org</a>><br>
<b>Subject:</b> Re: [SR-Users] Kamailio SIP TLS Troubleshooting<u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:70.8pt"> <u></u><u></u></p>
<div>
<p class="x_MsoNormal" style="margin-left:70.8pt">Thanks Henning<u></u><u></u></p>
<div>
<p class="x_MsoNormal" style="margin-left:70.8pt">But i need to send unencrypted TLS packets to mirrored destination<u></u><u></u></p>
</div>
<div>
<p class="x_MsoNormal" style="margin-left:70.8pt">Any ideas??<u></u><u></u></p>
</div>
</div>
<p class="x_MsoNormal" style="margin-left:70.8pt"> <u></u><u></u></p>
<div>
<div>
<p class="x_MsoNormal" style="margin-left:70.8pt">On Wed, 18 Dec 2019, 19:15 Henning Westerholt, <<a href="mailto:hw@skalatan.de" target="_blank">hw@skalatan.de</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-width:medium medium medium 1pt; border-style:none none none solid; border-color:currentColor currentColor currentColor rgb(204,204,204); margin:5pt 0cm 5pt 4.8pt; padding:0cm 0cm 0cm 6pt">
<div>
<div>
<p class="x_MsoNormal" style="margin-left:70.8pt">Hello,<u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:70.8pt"> <u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:70.8pt"><span lang="EN-GB">you could mirror the SIP traffic also with t_replicate function from the TM module in the cfg.</span><u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:70.8pt"><span lang="EN-GB"> </span><u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:70.8pt"><span lang="EN-GB">Cheers,</span><u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:70.8pt"><span lang="EN-GB"> </span><u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:70.8pt"><span lang="EN-GB">Henning</span><u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:70.8pt"><span lang="EN-GB"> </span><u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:70.8pt"><span lang="EN-GB">-- </span><u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:70.8pt"><span lang="EN-GB">Henning Westerholt –
</span><a href="https://skalatan.de/blog/" target="_blank"><span lang="EN-GB" style="color:rgb(5,99,193)">https://skalatan.de/blog/</span></a><u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:70.8pt"><span lang="EN-GB">Kamailio services –
</span><a href="https://gilawa.com/" target="_blank"><span lang="EN-GB" style="color:rgb(5,99,193)">https://gilawa.com</span></a>
<u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:70.8pt"> <u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:106.2pt"><b>From:</b> sr-users <<a href="mailto:sr-users-bounces@lists.kamailio.org" target="_blank">sr-users-bounces@lists.kamailio.org</a>>
<b>On Behalf Of </b>Sudhakar Parasher<br>
<b>Sent:</b> Tuesday, December 17, 2019 9:01 AM<br>
<b>To:</b> <a href="mailto:sr-users@lists.kamailio.org" target="_blank">sr-users@lists.kamailio.org</a><br>
<b>Subject:</b> [SR-Users] Kamailio SIP TLS Troubleshooting<u></u><u></u></p>
<p class="x_MsoNormal" style="margin-left:106.2pt"> <u></u><u></u></p>
<div>
<div>
<div>
<p class="x_MsoNormal" style="margin-left:106.2pt">Hi Experts.<u></u><u></u></p>
</div>
<div>
<p class="x_MsoNormal" style="margin-left:106.2pt"> <u></u><u></u></p>
</div>
<div>
<p class="x_MsoNormal" style="margin-left:106.2pt">Need your opinion on below part related to kamailio<u></u><u></u></p>
</div>
<div>
<p class="x_MsoNormal" style="margin-left:106.2pt"> <u></u><u></u></p>
</div>
<div>
<p class="x_MsoNormal" style="margin-left:106.2pt">I am using SIP Kamailio module Version for the SIP Registrations from the Client mobile phones using Android and IOS which is Over TLSv1.2 , So in nutshell the SIP Signaling is TLS version 1.2 encrypted and
Customer is requesting for the forward of the unencrypted SIP signaling messages especially the SIP Registration messages to their probe solutions without storing the SIP messages locally in the Kamailio Database<u></u><u></u></p>
</div>
<div>
<p class="x_MsoNormal" style="margin-left:106.2pt"> <u></u><u></u></p>
</div>
<div>
<p class="x_MsoNormal" style="margin-left:106.2pt">Question :Would it not be possible for Kamailio imply “mirror” all the SIP messages related to all SIP REGISTER dialogs (after removing TLS for inbound messages and prior to adding TLS for outbound message)
to a designated IP Address and Port? No need for local database storage. No need for encapsulation. No mirroring of other messages/dialogs.<u></u><u></u></p>
</div>
<div>
<p class="x_MsoNormal" style="margin-left:106.2pt"> <u></u><u></u></p>
</div>
<div>
<p class="x_MsoNormal" style="margin-left:106.2pt">Cheers<u></u><u></u></p>
</div>
<div>
<p class="x_MsoNormal" style="margin-left:106.2pt">Sudhakar<u></u><u></u></p>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</body>
</html>