[VoiceOps] STIR/SHAKEN implementation - CLI tool, HTTP API server and C library

[Alex Balashov]

Indeed, this is great news for the many successful operators of open-source platforms on this list. 

Thank you very much for your generous contribution of time to make a foray into this challenging area, Daniel. I know the large installed base of Kamailio in North America will deeply appreciate it!

— Alex

—
Sent from my iPad

> On Jan 27, 2020, at 11:11 AM, Peter Beckman <beckman at angryox.com> wrote:
> 
> Thank you!!! This is great. We haven't yet had to implement, and I'm now
> less worried about it as a result of your code. I really appreciate you
> writing the code and putting it out there for those of us who will soon and
> likely on a short timeline.
> 
> Kudos Daniel!
> 
> Beckman
> 
>> On Mon, 27 Jan 2020, Daniel-Constantin Mierla wrote:
>> 
>> Hello,
>> 
>> I noticed the discussion about STIR/SHAKEN that happened on this forum a
>> few weeks ago and for quite some time I had in my todo list the task to
>> add support for those extensions to Kamailio SIP server, but with no
>> real pressure to deploy them here in Europe, I kept postponing for a
>> while (also, some people did it already for Kamailio using embedded
>> scripting languages Lua or Python).
>> 
>> Anyhow, as I saw the discussion here, it became fresh again and I
>> searched the web, but I could not find any free/open tools to
>> test/validate implementations, so it looked a bit like chicken-egg
>> problem, therefore I created recently such a project, written in Go
>> language, with option to build a C static or shared library.
>> 
>> It is still very fresh code, not much tested, now with ES256 signing
>> algorithm based on golang native support, no interoperability done with
>> other applications. The project is available at:
>> 
>>   * https://github.com/asipto/secsipidx
>> 
>> To be able to enable older versions of PBX/SIP servers to support
>> STIR/SHAKEN extensions, besides the C library exports, there is an
>> application that can run as CLI tool or HTTP API server to check or
>> generate Identity headers. I haven't tested at all on Windows, but I
>> expect that golang ensures good portability, not using anything OS
>> specific in the code.
>> 
>> I thought it worth announcing it here, in case someone wants to play
>> with, suggest improvements or even contribute to make it easier to use
>> on their specific deployments.
>> 
>> Cheers,
>> Daniel
>> 
>> -- 
>> Daniel-Constantin Mierla -- www.asipto.com
>> www.twitter.com/miconda -- www.linkedin.com/in/miconda
>> Kamailio Advanced Training - March 9-11, 2020, Berlin - www.asipto.com
>> Kamailio World Conference - April 27-29, 2020, in Berlin -- www.kamailioworld.com
>> 
>> _______________________________________________
>> VoiceOps mailing list
>> VoiceOps at voiceops.org
>> https://puck.nether.net/mailman/listinfo/voiceops
> 
> ---------------------------------------------------------------------------
> Peter Beckman                                                  Internet Guy
> beckman at angryox.com                                 http://www.angryox.com/
> ---------------------------------------------------------------------------_______________________________________________
> VoiceOps mailing list
> VoiceOps at voiceops.org
> https://puck.nether.net/mailman/listinfo/voiceops