Hi All,
I have a quick question regarding verification on incoming calls regarding the stir/shaken policy. I'm using the secsipid library to check the identity header, but the problem I'm running into is that there is no identity header in the invite from the incoming call (It's showing up as null). Have most carriers enabled passing along an identity header, or is this something that is still in the works for some of them.
Would I need to request and get the certificate from the terminating carrier? I've tried using the auth_identity module to see if i need to use the verification functions to get/request the certificate, but I have had no luck so far.
Would anyone be able to provide direction on how to request/get/pass along the identity header from an incoming call with stir/shaken.
(I am using kamailio v5.6 and debian 12)
Thanks in advance, Temi
Have you done a packet capture to try to ascertain whether the Identity header is objectively present in incoming requests, on the wire?
Yes, I have done an sngrep and the Identity header isn't shown at all on any incoming requests. That's partially why I was wondering if I need to request the identity header from the terminating carrier or if they need to provide it.
On May 30, 2024, at 4:24 PM, tfayomi--- via sr-users sr-users@lists.kamailio.org wrote:
Yes, I have done an sngrep and the Identity header isn't shown at all on any incoming requests.
Well, you've answered your own question, as far as the technical side of it goes.
On the business/policy side: carriers are in various stages of implementation of STIR/SHAKEN, and may or may not offer it, and you may or may not need to ask them.
-- Alex
Hello,
For outgoing calls _from your DIDs_ to your providers, you need to sign the identify header. For incoming calls from your providers, IF THEY SIGN them, then you verify them, Otherwise they just have no attestation. If they do provide it, it possible you need to let them know you want it, but i'd assume they'd send it automatically -if they receive it from upstream-.
Regards,
David Villasmil email: david.villasmil.work@gmail.com phone: +34669448337
On Thu, May 30, 2024 at 10:45 PM tfayomi--- via sr-users < sr-users@lists.kamailio.org> wrote:
Hello,
not everyone has implemented this. You need to check whether it's there and validate if present.
Regards,
David Villasmil email: david.villasmil.work@gmail.com phone: +34669448337
On Thu, May 30, 2024 at 9:11 PM tfayomi--- via sr-users < sr-users@lists.kamailio.org> wrote:
-
Alex Balashov -
David Villasmil -
Joel Serrano -
tfayomi＠untangledtechnology.com