Thank you very much for your answer, Cesc.
Now I have an idea about this issue.
Regards
Victor
From: "Cesc Santasusana"
<cesc.santasusana(a)nl.thalesgroup.com>
To: <vhuertas(a)hotmail.com>om>, <serusers(a)lists.iptel.org>
Subject: Re: [Serusers] Proxy-to-Proxy authentication
Date: Tue, 03 May 2005 10:53:06 +0200
Hi,
TLS was meant exactly for that. The RFC specifies it as a hop by hop
security (auth + crypto) mechanism
I think SER has a module that allows it to authenticate via Digest (UAC
module). I have not tried it, because with the availability of a free TLS
implementation for SER, and TLS being a mandatory feature for proxies ...
why go along with such an simple mechanism as digest?
The only poblem many people see with using tls is that it requires a tcp
connection, thus for high traffic servers it may be a problem (though u can
use force_tcp_alias, and reuse the same socket for same P2P connections,
thus reducing the connection setup delay associated with tcp and specially
with tls).
If tcp/tls is not an option in your network, then probably you could think
of IPSec (works for both tcp and udp) ... or maybe you want to implement
something fancier ... say ... tunnel SIP messages withing S/MIME protected
sip messages :D
Regards,
Cesc
>> "Victor Huertas Garcia"
<vhuertas(a)hotmail.com> 05/02/05 06:01PM >>>
Hi all!
I'm newie in this mailing list and I am working with SER at this momen in a
project.
However I have a doubt I would like to clarify.
Does anyone know if there is a way to perform SIP Proxy to SIP Proxy
authentication (I mean in SIP protocol in general)?
If a SIP proxy receives an INVITE from another SIP Proxy, how does the
proxy
which receives the INVITE that the originating proxy can be trusted?
I have read something about TLS but I took it from an article of 2003...
Which is the most used method nowadays?
Thank you very much for your attentio
Regards
Victor
Unclassified
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers