Re: how to call with the security of h.235? (Simon Horne)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



 
yes,i know H.235 is a security framework.
       i don't want to do experiment about media encryption,but only want
to put up an experiment enviroment  successfully on H.235 security ,so as
to  know what it has done by Ethereal.
 
 
 


 
2006/12/26, openh323gk-users-request@xxxxxxxxxxxxxxxxxxxxx < openh323gk-users-request@xxxxxxxxxxxxxxxxxxxxx>:
Send Openh323gk-users mailing list submissions to
       openh323gk-users@xxxxxxxxxxxxxxxxxxxxx

To subscribe or unsubscribe via the World Wide Web, visit
       https://lists.sourceforge.net/lists/listinfo/openh323gk-users
or, via email, send a message with subject or body 'help' to
       openh323gk-users-request@xxxxxxxxxxxxxxxxxxxxx

You can reach the person managing the list at
       openh323gk-users-owner@xxxxxxxxxxxxxxxxxxxxx

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Openh323gk-users digest..."


Today's Topics:

  1. Re: how to call with the security of h.235? (Simon Horne)


----------------------------------------------------------------------

Message: 1
Date: Mon, 25 Dec 2006 19:39:46 +0800
From: Simon Horne <s.horne@xxxxxxxx>
Subject: Re: how to call with the security of
       h.235?
To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Message-ID: <6.0.0.22.2.20061225193020.04364190@xxxxxxxxxxxxx>
Content-Type: text/plain; charset="us-ascii"


H.235 is a security framework, it contains a large number of standards. You
need to be more specific on what part of H.235 you are after. The only
H.235 support in OpenH323 is H.235.1 gatekeeper logon. There is no media
encryption. GnuGk v2.2.4 does not support H.235.1. (only MD5 & CAT)

You may use PacPhone www.pacphone.com (freeware) with GnuGk to do media
encryption. It utilises H.235 media encyption.

Simon


----- Original Message -----
From: <mailto:guang0975@xxxxxxxxx>bright
To:
<mailto: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx>openh323gk-users@xxxxxxxxxxxxxxxxxxxxx

Sent: Saturday, December 23, 2006 8:03 PM
Subject: how to call with the security of h.235?

.

hello,everyone!
   i just have a question to ask you.please give a replay.
   i'm making experiment about OPENH323,only use two terminals(openphone
1.9.1),and a gatekeeper(openh323 gatekeeper--the GnuGK 2.2.4 ) to connect
as a phone call with the security of h.235.
   (1)i install GnuGK on windows XP operation system,and config the
gatekeeper.ini,then strart it.my configture is as following.
    Do i config it right?

[Gatekeeper::Main]
FortyTwo=42
Name=OpenH323GK
EndpointSuffix=_gnugk
Home=<http://10.10.139.88>10.10.139.88     ;it is my gnugk ip address.
NetworkInterfaces=
TotalBandwidth=100000
StatusPort=7000
TimeToLive=300
StatusTraceLevel=0
UseBroadcastListener=0
UseMulticastListener=0

[GkStatus::Auth]
rule=allow

[RoutedMode]
GKRouted=1
H245Routed=0
CallSignalPort=1721
AcceptNeighborCalls=1
AcceptUnregisteredCalls=0
RemoveH245AddressOnTunneling=1
RemoveCallOnDRQ=0
DropCallsByReleaseComplete=1
SendReleaseCompleteOnDRQ=0
SupportNATedEndpoints=1
TranslateFacility=1

[Gatekeeper::Auth]    ;this section is set by myself
SimplePasswordAuth=required;GRQ,RRQ,ARQ    ;i hope to use password to make
openphones to registrate on gnugk then make secure

call.
AliasAuth=sufficient;RRQ
default=allow

[Password]    ;this section is set by myself
CheckID=1
PasswordTimeout= 1

[RasSrv::RRQAuth]   ;this section is set by myself
liu=sigip:< http://10.10.139.87:1720>10.10.139.87:1720   ;alias and ip
address of one openphones
z89=sigip:<http://10.10.139.89:1720> 10.10.139.89:1720    ;alias and ip
address of the other  openphone

[Proxy]
Enable=0
ProxyForNAT=1
ProxyForSameNAT=0

[RasSrv::RRQFeatures]
AcceptEndpointIdentifier=1
AcceptGatewayPrefixes=1

[RasSrv::ARQFeatures]
CallUnregisteredEndpoints=1

[CallTable]
GenerateNBCDR=0
GenerateUCCDR=1

(2)in the OpenH323 Gatekeeper - The GNU Gatekeeper manual,it say that (must
insatall "libssl")
    could i install openssl-0.9.6i instead of libssl? after i installing
openssl and compiling it,then generate some DLL and

lib files,but i cannot know how to use them.what are they used for ? what
can i do ?


(3)on openphone,i enter into "gatekeeper options",and select "use
gatekeeper"and "require gatekeeper".in "static host"

editbox,i fill in opengk ip address.then ,in "h.235 password ",i fill in the
password i have set in opengk configration

page,fox example,for alias "liu" openphone,i fill "123123" in that "h.235
password" box.then set "time to live " as "300"

seconds.and fill in "access token OID" as:"1.2.840.113549.2.5"(for MD5
encryption algorithm),or other ,as "0.0.8.235.0.2.6"

for HMAC-SHA1-96.Do i fill in it correctly?
the last box name is "local interface ", do i fill in it with the openphone
alias name "liu" or the computer usename,i

confuse about it. i try it with alias name and the computer name,but i can
not register the openphone on the opengk.the

warning information as "gatekeeper security denial,check password and the
pc time and date".
   why? which step on above i mistake?

help me,please.
thank you very much.




----------
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV


----------
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://sourceforge.net/mailarchive/forum.php?forum=openh323gk-users/attachments/20061225/bc3d1f1b/attachment.html

------------------------------

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV

------------------------------

_______________________________________________
Openh323gk-users mailing list
Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openh323gk-users


End of Openh323gk-users Digest, Vol 7, Issue 21
***********************************************

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux