Boghe IMS client - IPSEC ESP support

[Frederic Gilloteau]

Hello,

I am currently testing in a LAB Boghe IMS client (on Win 7) with OpenIMScore VM.

I would like to enable IPSEC with 'ESP' protocol (Null encryption).

But I noticed that whatever I change in the 'Protocol' setting of the GUI, the Boghe client uses IPSEC protocol 'AH' when looking at Wireshark trace (REGISTER sent by the client contains 'Security-Client: ipsec-3gpp .... prot=ah). I would expect to see ESP.

In the XML config file, the  settings look correctly configured

<XmlSection name="SECURITY">
    <entry key="TLS_PRIV_KEY_FILE" value="" />
    <entry key="TLS_PUB_KEY_FILE" value="" />
    <entry key="TLS_CA_FILE" value="" />
    <entry key="IPSEC_SEC_AGREE" value="True" />
    <entry key="IPSEC_ALGO" value="hmac-md5-96" />
    <entry key="IPSEC_EALGO" value="null" />
    <entry key="IPSEC_MODE" value="trans" />
    <entry key="IPSEC_PROTO" value="esp" />
    <entry key="SRTP_MODE" value="tmedia_srtp_mode_none" />
    <entry key="SRTP_TYPE" value="tmedia_srtp_type_sdes" />
  </XmlSection>

Any chance you can help me with this issue?

Thank you

Fred

[Mamadou DIOP]

This issue was fixed months ago. Are you building your binaries by yourself?

--
You received this message because you are subscribed to the Google Groups "discuss-doubango" group.
To unsubscribe from this group and stop receiving emails from it, send an email to doubango+u...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Frederic Gilloteau]

Hello Mamadou,

Thank you for your reply.
I am using the binary downloaded from Google download link (https://code.google.com/p/boghe/):

Boghe-IPSec.sfx.exe V2.0.186.1013

Is there any more recent binary that can be downloaded?

Thank you
Fred

[Mamadou DIOP]

Le 1/4/2016 3:20 PM, Frederic Gilloteau a écrit :

Hello Mamadou,

Thank you for your reply.
I am using the binary downloaded from Google download link (https://code.google.com/p/boghe/):

Boghe-IPSec.sfx.exe V2.0.186.1013

This is very old, you've to build new one.

[Gius Mont]

Hi Frederic,

I would like to know if you were able to use IPsec ESP after rebuilding Boghe.

Thanks

Giuseppe

[Gius Mont]

Hi,

after rebuilding did you succeed in using Boghe with IPsec ESP?

thanks

Gius

[Su James]

Hi, @Mamdou, 

I tried to build the latest boghe v2.0, but find there are 2 errors in pluginCUDA. Saying, 

plugin_cuda_codec_h264.cxx(36) : fatal error C1083: can't open files:“nvcuvid.h”: No such file or directory

fatal error C1083: can't open files:“NVEncoderAPI.h”: No such file or directory

Any thoughts

James

在 2016年1月5日星期二 UTC+11上午11:43:49，Mamadou写道：

To unsubscribe from this group and stop receiving emails from it, send an email to doubango+unsubscribe@googlegroups.com.

[Mamadou DIOP]

On 10 Apr 2016, at 11:47, Su James <james.s...@gmail.com> wrote:

Hi, @Mamdou, 

I tried to build the latest boghe v2.0, but find there are 2 errors in pluginCUDA. Saying, 

plugin_cuda_codec_h264.cxx(36) : fatal error C1083: can't open files:“nvcuvid.h”: No such file or directory

fatal error C1083: can't open files:“NVEncoderAPI.h”: No such file or directory

Install CUDA SDK or remove pluginCUDA project from the solution. It’s optional.

[james.s...@gmail.com]

 Thanks, Mamdou, 

 

  I got a version from the svn in the directory "prerelease", and found it dit work.

 However, there is no authentication algorithm in register as below. Is it AKAv1-MD5? Thanks

 

   

---

Regards

Yours sincerely

James Su

You received this message because you are subscribed to a topic in the Google Groups "discuss-doubango" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/doubango/j8ghbu-RqFc/unsubscribe.
To unsubscribe from this group and all its topics, send an email to doubango+u...@googlegroups.com.

[Mamadou DIOP]

This is correct (check 3GPP TS documents about initial registration): The initial registration must contain an empty "nonce" and "response" unless earlyIMS is enabled.