[opensuse-factory] linphone + zrtp - how to use it?
Hi list, according to /usr/share/doc/packages/linphone/NEWS linphone supports zrtp since version 3.5.2 and there were some corrections for it in 3.6.0. In 13.1B1 3.6.1 is included, but I can't figure out how to activate zrtp. I found there should be an "encryption" option in the settings, but I can't find it. I found also hints that linphone uses libzrtpcpp2 which was not installed on my system. Installing it (and its requirements) also made no difference. The ~/.linphonerc contains a value "media_encryption" - which seems always to be set to none by linphone. Does anybody successfully use zrtp with linphone in openSUSE and can give a hint? Regards, Dieter -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
I´m using openSUSE 12.3 and just wanted to configure Linphone 3.6.1 but I cannot complete the setup wizard. When I put in my username, password and SIP domain name, I cannot push the apply button... I don´t know, what is wrong there. But, I use it successfully with Android. You can enable there SRTP and TLS transport to your SIP server. You need a SIP server / provider that offers TLS encrypted transport! Without such a server you cannot use SRTP/ZRTP! Sipgate for example, does not offer TLS. Dus.net offers TLS for SIP, but my impression is, you need to buy a full service there. No clue, if you can get a SIP server only. Additionally, I suppose, Linphone does not fully comply with the SIP standard. The SIP standard says, a SIP client should be able to act as a server and client to be able to establish a direct client to client connection. I´m not sure, but I think Linphone does not allow direct client to client connections. I have not found yet a SIP provider that offers encryption. And to be honest, I have doubt, if the ones who do are really trustworthy. If in doubt, they will give their keys to the government. Thus I play with the thought to build my own SIP server. Malte
Am Thu, 26 Sep 2013 15:37:46 +0200 schrieb Malte Gell: thanks for the information.
I´m using openSUSE 12.3 and just wanted to configure Linphone 3.6.1 but I cannot complete the setup wizard. When I put in my username, password and SIP domain name, I cannot push the apply button... I don´t know, what is wrong there. I will try this, I have 3.6.1 only in my 13.1B1 machine, with 3.5.2 it worked during creation of a linphone.org account.
But, I use it successfully with Android. You can enable there SRTP and TLS transport to your SIP server. You need a SIP server / provider that offers TLS encrypted transport! Without such a server you cannot use SRTP/ZRTP! according to the zfone homepage "it performs its key agreements and key management in a purely peer-to-peer manner over the RTP packet stream". Therefore I hoped it would be independent from a server.
Additionally, I suppose, Linphone does not fully comply with the SIP standard. The SIP standard says, a SIP client should be able to act as a server and client to be able to establish a direct client to client connection. I´m not sure, but I think Linphone does not allow direct client to client connections. For 3.5.2 I can tell that the direct client to client connections are working, at least when not registered to a server. *)
Because of this, and my understanding that the key negotiation happens in the RTP stream I wanted to use it without a sip account at a provider. *) For me this did not work with a STUN server, I have to enter the own public IP address manually in the network settings of linphone. And the SIP and RTP ports have to be opened in the firewall. Dieter -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Am 26.09.2013 16:31, schrieb dieter:
I will try this, I have 3.6.1 only in my 13.1B1 machine, with 3.5.2 it worked during creation of a linphone.org account.
I have no clue, why I could not complete the setup wizard, my data work fine with Linphone on my Android. I have Linphone 3.6.1 on my openSUSE 12.3 box.
Because of this, and my understanding that the key negotiation happens in the RTP stream I wanted to use it without a sip account at a provider.
Are you sure, Linphone really adapts ZRTP as it is meant to be used? In the Android version of Linphone I can only enable SRTP which - in my understanding - is different from ZRTP. I see no ZRTP options in the Android version of Linphone. Malte
Am Thu, 26 Sep 2013 16:56:49 +0200 schrieb Malte Gell:
Am 26.09.2013 16:31, schrieb dieter:
Because of this, and my understanding that the key negotiation happens in the RTP stream I wanted to use it without a sip account at a provider.
Are you sure, Linphone really adapts ZRTP as it is meant to be used? In the Android version of Linphone I can only enable SRTP which - in my understanding - is different from ZRTP. I see no ZRTP options in the Android version of Linphone.
As I can't make it work I am not sure... zrtp is a key management mechanism which provides the keys for the subsequent srtp encryption of the rtp stream. Currently I don't know whether I got it wrong, if the zrtp implementation in linphone is not correct or if the openSUSE package of linphone has a problem. But strings /usr/bin/linphone |grep -i zrtp finds some occurrences in the openSUSE package, so it seems to be compiled in. I can use linphone at both ends of the communication, for this purpose it would be sufficient if it works between to linphone instances. Dieter -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Am Thu, 26 Sep 2013 16:56:49 +0200 schrieb Malte Gell:
I will try this, I have 3.6.1 only in my 13.1B1 machine, with 3.5.2 it worked during creation of a linphone.org account.
I have no clue, why I could not complete the setup wizard, my data work fine with Linphone on my Android. I have Linphone 3.6.1 on my openSUSE 12.3 box.
I have tested entering the account info with the setup wizard in 3.6.1 (of 13.1B1) and it worked. When the data are completed linphone immediately tries to register. As the default is SIP-TLS and linphone.org does not support it this times out (some seconds), then the wizard can be closed. Dieter -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (2)
-
dieter -
Malte Gell