Re: how to call with the security of h.235?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




H.235 is a security framework, it contains a large number of standards. You need to be more specific on what part of H.235 you are after. The only H.235 support in OpenH323 is H.235.1 gatekeeper logon. There is no media encryption. GnuGk v2.2.4 does not support H.235.1. (only MD5 & CAT)

You may use PacPhone www.pacphone.com (freeware) with GnuGk to do media encryption. It utilises H.235 media encyption.

Simon


----- Original Message -----
From: bright
To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Sent: Saturday, December 23, 2006 8:03 PM
Subject: how to call with the security of h.235?

.

hello,everyone!
   i just have a question to ask you.please give a replay.
   i'm making experiment about OPENH323,only use two terminals(openphone 1.9.1),and a gatekeeper(openh323 gatekeeper--the GnuGK 2.2.4 ) to connect as a phone call with the security of h.235.
   (1)i install GnuGK on windows XP operation system,and config the gatekeeper.ini,then strart it.my configture is as following.
    Do i config it right?

[Gatekeeper::Main]
FortyTwo=42
Name=OpenH323GK
EndpointSuffix=_gnugk
Home=10.10.139.88     ;it is my gnugk ip address.
NetworkInterfaces=
TotalBandwidth=100000
StatusPort=7000
TimeToLive=300
StatusTraceLevel=0
UseBroadcastListener=0
UseMulticastListener=0

[GkStatus::Auth]
rule=allow

[RoutedMode]
GKRouted=1
H245Routed=0
CallSignalPort=1721
AcceptNeighborCalls=1
AcceptUnregisteredCalls=0
RemoveH245AddressOnTunneling=1
RemoveCallOnDRQ=0
DropCallsByReleaseComplete=1
SendReleaseCompleteOnDRQ=0
SupportNATedEndpoints=1
TranslateFacility=1

[Gatekeeper::Auth]    ;this section is set by myself
SimplePasswordAuth=required;GRQ,RRQ,ARQ    ;i hope to use password to make openphones to registrate on gnugk then make secure

call.
AliasAuth=sufficient;RRQ
default=allow

[Password]    ;this section is set by myself
CheckID=1
PasswordTimeout= 1  

[RasSrv::RRQAuth]   ;this section is set by myself
liu=sigip:10.10.139.87:1720   ;alias and ip address of one openphones
z89=sigip:10.10.139.89:1720    ;alias and ip address of the other  openphone

[Proxy]
Enable=0
ProxyForNAT=1
ProxyForSameNAT=0

[RasSrv::RRQFeatures]
AcceptEndpointIdentifier=1
AcceptGatewayPrefixes=1

[RasSrv::ARQFeatures]
CallUnregisteredEndpoints=1

[CallTable]
GenerateNBCDR=0
GenerateUCCDR=1

(2)in the OpenH323 Gatekeeper - The GNU Gatekeeper manual,it say that (must insatall "libssl")
    could i install openssl-0.9.6i instead of libssl? after i installing openssl and compiling it,then generate some DLL and

lib files,but i cannot know how to use them.what are they used for ? what can i do ?


(3)on openphone,i enter into "gatekeeper options",and select "use gatekeeper"and "require gatekeeper".in "static host"

editbox,i fill in opengk ip address.then,in "h.235 password ",i fill in the password i have set in opengk configration

page,fox example,for alias "liu" openphone,i fill "123123" in that "h.235 password" box.then set "time to live " as "300"

seconds.and fill in "access token OID" as:"1.2.840.113549.2.5"(for MD5 encryption algorithm),or other ,as "0.0.8.235.0.2.6"

for HMAC-SHA1-96.Do i fill in it correctly?
the last box name is "local interface ", do i fill in it with the openphone alias name "liu" or the computer usename,i

confuse about it. i try it with alias name and the computer name,but i can not register the openphone on the opengk.the

warning information as "gatekeeper security denial,check password and the pc time and date".
   why? which step on above i mistake?

help me,please.
 thank you very much.

 


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV


_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux