Re: [reSIProcate-users] OpenSSL support
Yup that's it. I imagine it's not too bad, but I haven't looked closely at it yet. Here is an except of a conversation I had with Eric Rescorla (RFC author):
"there is no specific support for getting the SRTP keys. Rather, there is a function to do generic key exporting (SSL_export_keying_material). And you call it with parameters specified in RFC 5764"
It would be great if you had some time to work on this and contribute the fix back. : )
Regards,
Scott
On Tue, Oct 9, 2012 at 1:20 PM, Nauman Sulaiman
<nauman762-home@xxxxxxxxxxx> wrote:
Hi Scott
Thanks, I noticed that the below function is missing in 1.01. Is this the porting task you are referring to?
SSL_get_srtp_key_info from the srtp.h file in the openssl tree
Is there a quick fix for this?
Thanks
This patched version of openssl was removed since official DTLS-SRTP support was added to OpenSSL 1.0.1. It should be noted that RFC 5764 - the final IETF spec for DTLS-SRTP - is not backwards compatible with earlier draft versions that are implemented in the resip openssl branch you have sighted below.
However I will point out that there is 1 porting task remaining for using Open SSL 1.0.1 in the recon/reflow project. If you still need to use DTLS-SRTP in the meantime you could go back to an older revision in SVN, before the contrib/dtls-srtp/openssl branch was deleted.
Scott
On Tue, Oct 9, 2012 at 4:37 AM, Nauman Sulaiman <
nauman762-home@xxxxxxxxxxx> wrote:
Hi
>
>
>The link below
>
>
>svn checkout
https://svn.resiprocate.org/rep/resiprocate/contrib/dtls-srtp/openssl
>
>
>to build the patched openssl is not available. Any ideas why this is?
>
>
>Thanks
>_______________________________________________
>resiprocate-users mailing list
>
resiprocate-users@xxxxxxxxxxxxxxx
>List Archive:
http://list.resiprocate.org/archive/resiprocate-users/
>