SIP Security in Yate - Revision history

Monica: /* Advantages */

2013-11-04T08:45:00Z

‎Advantages

Monica: /* Advantages */

2013-11-04T08:44:45Z

‎Advantages

Monica: /* Advantages */

2013-11-04T08:44:10Z

‎Advantages

Dana at 07:47, 3 June 2013

2013-06-03T07:47:00Z

Dana at 11:37, 30 May 2013

2013-05-30T11:37:19Z

Dana: /* Advantages */

2013-05-30T08:41:56Z

‎Advantages

Dana: /* How to configure SIP secure */

2012-11-16T15:44:04Z

‎How to configure SIP secure

Dana: /* How to configure SIP secure */

2012-11-16T15:43:47Z

‎How to configure SIP secure

Dana at 15:38, 16 November 2012

2012-11-16T15:38:00Z

Dana at 15:37, 16 November 2012

2012-11-16T15:37:25Z

← Older revision		Revision as of 08:45, 4 November 2013
Line 59:		Line 59:
	* [[Telephony]]		* [[Telephony]]

−	[[Category:SIP]] [[Category:SRTP]] [[Category:TLS]] [[~~Categiry~~:Security]]	+	[[Category:SIP]] [[Category:SRTP]] [[Category:TLS]] [[Category:Security]]

← Older revision		Revision as of 08:44, 4 November 2013
Line 59:		Line 59:
	* [[Telephony]]		* [[Telephony]]

−	[[Category:SIP]] [[Category:SRTP]] [[Category:TLS]]	+	[[Category:SIP]] [[Category:SRTP]] [[Category:TLS]] [[Categiry:Security]]

← Older revision		Revision as of 08:44, 4 November 2013
Line 58:		Line 58:
	* [[SIP Configuration File]]		* [[SIP Configuration File]]
	* [[Telephony]]		* [[Telephony]]
		+
		+	[[Category:SIP]] [[Category:SRTP]] [[Category:TLS]]

@@ Line 2: / Line 2: @@
 SIP secure uses [http://en.wikipedia.org/wiki/Transport_Layer_Security TLS protocol] for securing the signalling. This will stop man in the middle attacks and hide the called identity.
-In order to secure the media [http://en.wikipedia.org/wiki/Secure_Real-time_Transport_Protocol SRTP protocol] is used.
+In order to secure the media [http://en.wikipedia.org/wiki/Secure_Real-time_Transport_Protocol SRTP protocol] is used. This will add confidentiality, message authentication, and replay protection to the RTP data.
 <!--To protect the signaling messages against snooping or alteration use TLS.
 The protocol allows client/server applications to communicate in a way that is designed to prevent eavesdropping, tampering, or message forgery.

@@ Line 2: / Line 2: @@
 SIP secure uses [http://en.wikipedia.org/wiki/Transport_Layer_Security TLS protocol] for securing the signalling. This will stop man in the middle attacks and hide the called identity.
-In order to secure the media use [http://en.wikipedia.org/wiki/Secure_Real-time_Transport_Protocol SRTP protocol].
+In order to secure the media [http://en.wikipedia.org/wiki/Secure_Real-time_Transport_Protocol SRTP protocol] is used.
 <!--To protect the signaling messages against snooping or alteration use TLS.
 The protocol allows client/server applications to communicate in a way that is designed to prevent eavesdropping, tampering, or message forgery.
 Using SRTP, which is a security profile for RTP will add confidentiality, message authentication, and replay protection to the protocol.-->
-===How to configure SIP secure===
+==How to configure SIP secure==
 Yate can bind on TLS. This is done using a '''listener''', that it is a specific section in [[SIP Configuration File#Configuration File|ysipchan.conf]], that will specify to which network interface Yate will listen.
@@ Line 15: / Line 13: @@
 In the next steps will configure Yate to bind on [http://en.wikipedia.org/wiki/Transport_Layer_Security TLS] and to use [http://en.wikipedia.org/wiki/Secure_Real-time_Transport_Protocol SRTP] packets for voice.
-==== How to set a TLS listener ====
+=== How to set a TLS listener ===
 In [[SIP Configuration File#Configuration File|ysipchan.conf]]:
@@ Line 25: / Line 23: @@
   sslcontext=server_context
-==== Configure a SSL server context====
+=== Configure a SSL server context===
 In [[OpenSSL#Configuration|openssl.conf]]
@@ Line 36: / Line 34: @@
 The files name.crt and name.key have to be in the same place as the configuration file in this example.
-====Enable SRTP====
+===Enable SRTP===
 Data security protocols such as SRTP rely upon a separate key management system to securely establish encryption and/or authentication keys. TLS will protect the SDP message.
@@ Line 46: / Line 44: @@
   secure=enable
-===Advantages===
+==Advantages==
 * SRTP is ideal for protecting Voice over IP traffic because it can be used in conjunction with header compression and has no effect on IP Quality of Service.

← Older revision		Revision as of 08:41, 30 May 2013
Line 59:		Line 59:
	* [http://en.wikipedia.org/wiki/Transport_Layer_Security Transport Layer Security]		* [http://en.wikipedia.org/wiki/Transport_Layer_Security Transport Layer Security]
	* [[SIP Configuration File]]		* [[SIP Configuration File]]
		+	* [[Telephony]]

@@ Line 11: / Line 11: @@
 ===How to configure SIP secure===
-Yate can bind on TLS. This is done using a '''listener''' that it is a specific section in [[SIP Configuration File#Configuration File|ysipchan.conf]].
+Yate can bind on TLS. This is done using a '''listener''', that it is a specific section in [[SIP Configuration File#Configuration File|ysipchan.conf]], that will specify to which network interfaces Yate will listen.
 In the next steps will configure Yate to bind on [http://en.wikipedia.org/wiki/Transport_Layer_Security TLS] and to use [http://en.wikipedia.org/wiki/Secure_Real-time_Transport_Protocol SRTP] packets for voice.

← Older revision		Revision as of 15:38, 16 November 2012
Line 1:		Line 1:

−	SIP secure uses [http://en.wikipedia.org/wiki/Transport_Layer_Security TLS protocol] for securing the signalling. This will stop man in the middle attacks and hide the called identity. In order to secure the media use [http://en.wikipedia.org/wiki/Secure_Real-time_Transport_Protocol SRTP protocol].	+	SIP secure uses [http://en.wikipedia.org/wiki/Transport_Layer_Security TLS protocol] for securing the signalling. This will stop man in the middle attacks and hide the called identity.
		+
		+	In order to secure the media use [http://en.wikipedia.org/wiki/Secure_Real-time_Transport_Protocol SRTP protocol].
	<!--To protect the signaling messages against snooping or alteration use TLS.		<!--To protect the signaling messages against snooping or alteration use TLS.

← Older revision		Revision as of 15:37, 16 November 2012
Line 1:		Line 1:

−	SIP secure uses [http://en.wikipedia.org/wiki/Transport_Layer_Security TLS protocol] for securing the signalling. This will stop man in the middle attacks and hide the called identity. ~~For securing~~ the media ~~it is used~~ [http://en.wikipedia.org/wiki/Secure_Real-time_Transport_Protocol SRTP protocol].	+	SIP secure uses [http://en.wikipedia.org/wiki/Transport_Layer_Security TLS protocol] for securing the signalling. This will stop man in the middle attacks and hide the called identity. In order to secure the media use [http://en.wikipedia.org/wiki/Secure_Real-time_Transport_Protocol SRTP protocol].
	<!--To protect the signaling messages against snooping or alteration use TLS.		<!--To protect the signaling messages against snooping or alteration use TLS.