[SR-Users] Topoh module configuration for SIP proxy and SIP registrar

Daniel-Constantin Mierla miconda at gmail.com
Wed Nov 8 09:19:44 CET 2017


Hello,


On 07.11.17 10:50, Christian Conus wrote:
> Hello Daniel, 
>
> Do you have an idea why the SIP messages header are only partially encrypted
> for the caller ?
>
> Since both SIP clients connects to the same SIP proxy it means that SIP
> messages go two times through the same proxy (client -> proxy -> registrar
> -> proxy -> client), is it possible to configure topoh to encrypt headers
> only for outgoing messages on a particular network interface ? 
this is possible only in current development version, you need to add an
event_route and based on the target ip or local socket ip you can decide
to apply topoh or not:

https://kamailio.org/docs/modules/devel/modules/topos.html#idp44483268

Current development branch will be released as v5.1 in few weeks.

> It is not clear if partially encrypted messages means that the proxy has
> decryted the already encrypted header parts and encrypted the parts in clear
> ?
>
I will have to look at the code, not remembering by heart what can
happen in case of a spiral... The overall goal was to hide the detailsĀ 
of caller and callee from each other...

Cheers,
Daniel

-- 
Daniel-Constantin Mierla
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Kamailio Advanced Training, Nov 13-15, 2017, in Berlin - www.asipto.com
Kamailio World Conference - www.kamailioworld.com




More information about the sr-users mailing list