dbxe
/
fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Deprecate ZRTP and inbound-late-negotiation disable by default

This commit is contained in:
FusionPBX 2024-09-07 17:38:48 -06:00 committed by GitHub
parent 76d76c8c56
commit 04125ef651
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 3 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
app/switch/resources/conf/sip_profiles/external-ipv6.xml.noload
View File

@ -60,8 +60,7 @@
<param name="apply-register-acl" value="providers" enabled="false"/>
<param name="dtmf-type" value="rfc2833"/>
<param name="auth-subscriptions" value="true"/>
<param name="inbound-late-negotiation" value="true"/>
<param name="inbound-zrtp-passthru" value="true"/> <!-- (also enables late negotiation) -->
<param name="inbound-late-negotiation" value="true" enabled="false"/>
<!--
DO NOT USE HOSTNAMES, ONLY IP ADDRESSES IN THESE SETTINGS!
-->

3
app/switch/resources/conf/sip_profiles/external.xml.noload
View File

@ -59,8 +59,7 @@
<param name="nonce-ttl" value="60"/>
<param name="auth-calls" value="true"/>
<param name="auth-subscriptions" value="true"/>
<param name="inbound-late-negotiation" value="true"/>
<param name="inbound-zrtp-passthru" value="true"/> <!-- (also enables late negotiation) -->
<param name="inbound-late-negotiation" value="true" enabled="false"/>
<!--
DO NOT USE HOSTNAMES, ONLY IP ADDRESSES IN THESE SETTINGS!
-->

5
app/switch/resources/conf/sip_profiles/internal.xml.noload
View File

@ -238,10 +238,7 @@
<param name="inbound-proxy-media" value="true" enabled="false"/>
<!-- Let calls hit the dialplan before selecting codec for the a-leg -->
<param name="inbound-late-negotiation" value="true"/>
<!-- Allow ZRTP clients to negotiate end-to-end security associations (also enables late negotiation) -->
<param name="inbound-zrtp-passthru" value="true"/>
<param name="inbound-late-negotiation" value="true" enabled="false"/>
<!-- this lets anything register -->
<!-- comment the next line and uncomment one or both of the other 2 lines for call authentication -->