[SR-Users] Topoh module configuration for SIP proxy and SIP registrar

Christian Conus christian.conus at nagra.com
Thu Nov 2 14:02:26 CET 2017


Hello Daniel, 

The headers in the callee logs contains encrypted data which is exactly what
I expect but when I look at the caller logs I can see that the headers are
partially encrypted and they contain the ip address of the registrar that I
want to hide in clear.

In the following message from the caller log, the Record-Route contains the
ip 10.3.3.26 which is the registrar. I would expect at least this ip address
to be encrypted. 

SIP/2.0 200 OK 
Via: SIP/2.0/TLS 
10.3.3.18:44775;received=10.3.3.28;rport=44775;branch=z9hG4bK-3855-1-5 
From: testuser.2 <sip:[hidden email]>;tag=3855SIPpTag071 
To: <sip:[hidden email]>;tag=3843SIPpTag08b2 
Call-ID: 1-3855 at 10.3.3.18 
CSeq: 50 INVITE 
Contact: 
<sip:255.255.255.255;uph=uth-aFNMK9nOiZhDisdr-9dOx9nOislOawQeRIHGxcCwsmOxRdjKv50nsFCwidHhKdifxIifaSOkU7JhKclGZ2NmscmfYsEZakBz5p5Bs5H4Z9iuidQlE7JqUNHPsWBj-9-1xd1G-uQfxInlKcBvxsJmscmPsNQlsZGz> 
Record-Route: 
<sip:255.255.255.255;uph=uth-aFNMK9kMx9-r-DhDK7GO-7vDKPHDvcf2aweDR7O3Tp-6a9neTFh6TpneTFh*>, 
<sip:10.3.3.28;r2=on;lr=on>, <sip:10.3.3.26:4060;lr;rps=0>, 
<sip:10.3.3.28;r2=on;lr=on>, <sip:10.3.3.28:5062;transport=tls;r2=on;lr=on> 
Content-Type: application/sdp 
Content-Length:   212 

v=0 
o=testuser.1 53655765 2353687637 IN IP4 10.3.3.27 
s=- 
c=IN IP4 10.3.3.27 
t=0 0 
m=audio 50920 RTP/AVP 8 101 
a=rtpmap:8 PCMA/8000 
a=rtpmap:101 telephone-event/8000 
a=fmtp:101 0-11,16 
a=nortpproxy:yes 


The behavior that I expected from the topoh module (enabled on the proxy)
was to encrypt headers for all SIP messages for both caller and callee so
that the ip address of the registrar never appear in clear in any SIP
message going from the SIP proxy to a SIP client.

Thanks, 
Christian 





--
Sent from: http://sip-router.1086192.n5.nabble.com/Users-f3.html



More information about the sr-users mailing list