Hi Thomas Have been able to get the ip200 working with H.235 in the meantime? Greetings Frank -----Ursprüngliche Nachricht----- Von: openh323gk-users-admin@xxxxxxxxxxxxxxxxxxxxx [mailto:openh323gk-users-admin@xxxxxxxxxxxxxxxxxxxxx] Im Auftrag von Zygmuntowicz Michal Gesendet: Montag, 15. November 2004 23:19 An: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Betreff: Re: innovaphone ip200 cant register Can you post a link to RRQ/RCF trace that you sent and they said it is unsecured? ----- Original Message ----- From: "Thomas Balsfulland" <tbals@xxxxxxxxx> Sent: Monday, November 15, 2004 5:10 PM > On Thu, Nov 11, 2004 at 03:05:22PM +0100, Frank Fischer wrote: >> >> One more line on H.235 ... There is no such thing as ONE H.235 >> implementation method but some different methods to do H.235 >> authentication. >> In 2.0.9 there is a H.235 method called "Baseline Sercurity Profil" (see >> Annex D) implemented. >> But: Don't believe Recommendations are Standard - some of them, >> especially >> in H.323 are formulated that open (could, should instead of need, must) >> that >> there are possibly as much different implementations as developers >> working >> on it ... sounds funny, but might get very close to the reality :-( > > hi there, > > now i got an answer from innovaphone. i sent my gatekeeper logs and the > traces from the ip200 (from gnugk v2.0.9-cvs, pwlib v1.8.1, openh323 > v1.15.1). > the answer was german, sorry for bad translation: > > we have analyse your traces. we send a correct h.235 authentification and > the gatekeeper send no correct authentification back. the authentification > mechanism from h.235 is symetric, so the gatekeeper must register also at > the ip200 - but it dont do that. thats the reason why we ignore the > registrationconfirm. and we must ignore it to avoid > man-in-the-middle-attack. > the method of authentification is given with rrq, so the gatekeeper cant > do anything else. greetings from innovaphone. christoph kuenkel. > > is this correct? is this a bug of the gatekeeper? > > > regards > > thomas ------------------------------------------------------- This SF.Net email is sponsored by: InterSystems CACHE FREE OODBMS DOWNLOAD - A multidimensional database that combines robust object and relational technologies, making it a perfect match for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8 _______________________________________________________ List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 Homepage: http://www.gnugk.org/ ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/ _______________________________________________________ List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id?49 Homepage: http://www.gnugk.org/