[OpenSIPS-Users] UpenSIPS and sips

[Bogdan-Andrei Iancu]

Hi Iñaki,

This behaviour  will be no longer valid - SIPS will force secure 
transport on all segments (see the email to Klaus on the topic).

Regards,
Bogdan

Iñaki Baz Castillo wrote:
> El Lunes, 6 de Octubre de 2008, Olle Frimanson escribió:
>   
>> It works fine which is expected, but when I use
>>
>> sips:a at domain.com;transport=tls
>>
>> It also works, but my understanding was that this call should fail.
>>
>> What are we doing wrong in this case?
>>     
>
> It's correct per RFC 3261.
>
> When B sends the INVITE to sips:a at domain.com;transport=tls it means:
> - B uses TLS **until** the proxy responsible of the destination domain 
> (domain.com).
> - The proxy responsible for domain.com receives the request for the AoR 
> a at domain.com and finds it in the location service, getting the Contact 
> location where a at domain.com is registered.
> - This Contact can be sip, sips or whatever.
>
> Of course, the proxy could have a *local* policy to disallow routing calls 
> insecurely (sip) to local users if the original request asked for a SIPS 
> RURI.
>
>
>