Hi All,
I have a ims client endpoint supporting rfc 3329(IPSec).Now I am sending register message to kamailio server with Security-Client header and not getting any Security-Server header in response. Could you please tell me below queries
- Whether kamailio server supporting rfc 3329 (IPSec) or not ? - If yes,how can we setup kamailio server to support Security-Client,Security-Server and Security-varify(as per rfc 3329) header ?
Thanks Priyaranjan
Hello,
kamailio is agnostic of the ipsec layer, it doesn't do anything to manage ipsec, but it can get the traffic from any ipsec channel as any application on the OS does. ipsec encryption/decryption is done by the kernel.
Adding/removing headers in kamailio is easy and straightforward using textops module. If you know that you have to add any Security-* header, then you can do it from kamailio.cfg with the functions from textops module.
Cheers, Daniel
On 04/06/15 13:35, Priyaranjan Nayak wrote:
Hi All,
I have a ims client endpoint supporting rfc 3329(IPSec).Now I am sending register message to kamailio server with Security-Client header and not getting any Security-Server header in response. Could you please tell me below queries
- Whether kamailio server supporting rfc 3329 (IPSec) or not ?
- If yes,how can we setup kamailio server to support Security-Client,Security-Server and Security-varify(as per rfc 3329) header ?
Thanks Priyaranjan
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
Hi Daniel,
I am sending Security-Client header in register message to kamailio server. I need one Security-Server header in 200 OK message as given below.
*Security-Server:* ipsec-3gpp; q=0.1; alg=hmac-md5-96; ealg=des-ede3-cbc; prot=ah; mod=trans; spi-c=3333; spi-s=4444; port-c=5066; port-s=5068
Could you please give me idea how can we add this header in 200 OK response by using textop module ?
On Thu, Jun 4, 2015 at 7:06 PM, Daniel-Constantin Mierla miconda@gmail.com wrote:
Hello,
kamailio is agnostic of the ipsec layer, it doesn't do anything to manage ipsec, but it can get the traffic from any ipsec channel as any application on the OS does. ipsec encryption/decryption is done by the kernel.
Adding/removing headers in kamailio is easy and straightforward using textops module. If you know that you have to add any Security-* header, then you can do it from kamailio.cfg with the functions from textops module.
Cheers, Daniel
On 04/06/15 13:35, Priyaranjan Nayak wrote:
Hi All,
I have a ims client endpoint supporting rfc 3329(IPSec).Now I am sending register message to kamailio server with Security-Client header and not getting any Security-Server header in response. Could you please tell me below queries
- Whether kamailio server supporting rfc 3329 (IPSec) or not ?
- If yes,how can we setup kamailio server to support
Security-Client,Security-Server and Security-varify(as per rfc 3329) header ?
Thanks Priyaranjan
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing listsr-users@lists.sip-router.orghttp://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
-- Daniel-Constantin Mierlahttp://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda Book: SIP Routing With Kamailio - http://www.asipto.com
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
Hi! I think you can use append_hf_value(hf, hvalue) function in config. Use it in onreply_route that your 200OK is passing.
Or what is the question? In the string with parameters everything is constant? or some values are variable?
Priyaranjan Nayak wrote
Hi Daniel,
I am sending Security-Client header in register message to kamailio server. I need one Security-Server header in 200 OK message as given below.
*Security-Server:* ipsec-3gpp; q=0.1; alg=hmac-md5-96; ealg=des-ede3-cbc; prot=ah; mod=trans; spi-c=3333; spi-s=4444; port-c=5066; port-s=5068
Could you please give me idea how can we add this header in 200 OK response by using textop module ?
On Thu, Jun 4, 2015 at 7:06 PM, Daniel-Constantin Mierla <
miconda@
> wrote:
Hello,
kamailio is agnostic of the ipsec layer, it doesn't do anything to manage ipsec, but it can get the traffic from any ipsec channel as any application on the OS does. ipsec encryption/decryption is done by the kernel.
Adding/removing headers in kamailio is easy and straightforward using textops module. If you know that you have to add any Security-* header, then you can do it from kamailio.cfg with the functions from textops module.
Cheers, Daniel
On 04/06/15 13:35, Priyaranjan Nayak wrote:
Hi All,
I have a ims client endpoint supporting rfc 3329(IPSec).Now I am sending register message to kamailio server with Security-Client header and not getting any Security-Server header in response. Could you please tell me below queries
- Whether kamailio server supporting rfc 3329 (IPSec) or not ?
- If yes,how can we setup kamailio server to support
Security-Client,Security-Server and Security-varify(as per rfc 3329) header ?
Thanks Priyaranjan
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing
listsr-users@.sip-router
://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
-- Daniel-Constantin Mierlahttp://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda Book: SIP Routing With Kamailio - http://www.asipto.com
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@.sip-router
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
-- Thanks Priyaranjan
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@.sip-router
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
-- View this message in context: http://sip-router.1086192.n5.nabble.com/Need-information-regarding-kamilio-s... Sent from the Users mailing list archive at Nabble.com.
-
Daniel-Constantin Mierla -
Priyaranjan Nayak -
Vasiliy Ganchev