WHERE TO BUY

Search

SRTP and config file authentication

RSS FEED
rop

Hi all,I'm wondering what types of key management the GXP-2000 supports for SRTP. All I can find is an 'enable' toggle.Also, what does "authenticate config file" do? The text "cfg file would be authenticated before acceptance if set to Yes" doesn't say all that much. Does this involve cryptographic signatures of some sort? Rop

continuefly...

 I think it means before the phone takes the cfg file it will check the password, if the password is correct it will accept it otherwise it will not. The phone will not accept any cfg file sent to it. 

rop

OK, so that means any evildoer would just need to sniff the password off the unencrypted HTTP or TFTP... I guess provisioning phone over the open internet is out. I hope the key SRTP management makes some kind of sense, otherwise the only option is stick the phone behind a VPN router.

continuefly...

 Grandstream configuration files generator has an option to encrypt the configuration file.