[OpenSIPS-Users] UpenSIPS and sips

Klaus Darilion klaus.mailinglists at pernau.at
Wed Oct 15 17:14:29 CEST 2008


Hi Bogdan!

Bogdan-Andrei Iancu schrieb:
> Hi Iñaki,
> 
> This behaviour  will be no longer valid - SIPS will force secure 
> transport on all segments (see the email to Klaus on the topic).

Why is this no longer valid?

In my previous mail I said that it is valid.

regards
klaus

> 
> Regards,
> Bogdan
> 
> Iñaki Baz Castillo wrote:
>> El Lunes, 6 de Octubre de 2008, Olle Frimanson escribió:
>>   
>>> It works fine which is expected, but when I use
>>>
>>> sips:a at domain.com;transport=tls
>>>
>>> It also works, but my understanding was that this call should fail.
>>>
>>> What are we doing wrong in this case?
>>>     
>> It's correct per RFC 3261.
>>
>> When B sends the INVITE to sips:a at domain.com;transport=tls it means:
>> - B uses TLS **until** the proxy responsible of the destination domain 
>> (domain.com).
>> - The proxy responsible for domain.com receives the request for the AoR 
>> a at domain.com and finds it in the location service, getting the Contact 
>> location where a at domain.com is registered.
>> - This Contact can be sip, sips or whatever.
>>
>> Of course, the proxy could have a *local* policy to disallow routing calls 
>> insecurely (sip) to local users if the original request asked for a SIPS 
>> RURI.
>>
>>
>>   
> 
> 
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users



More information about the Users mailing list