[VoiceOps] STIR/SHAKEN implementation - CLI tool, HTTP API server and C library

[Daniel-Constantin Mierla]

Glad to hear it looks useful for you!

The implementation so far was purely based on my understanding for the
specs, no interop testing being done as I don't have access to a service
using it already.

Anyhow, golang has native support for json and many embedded encryption
algorithms, so if some parameters need to be tuned there, should be
straightforward. Just report any issue on github project and it will be
taken care.

Cheers,
Daniel

On 27.01.20 17:11, Peter Beckman wrote:
> Thank you!!! This is great. We haven't yet had to implement, and I'm now
> less worried about it as a result of your code. I really appreciate you
> writing the code and putting it out there for those of us who will
> soon and
> likely on a short timeline.
>
> Kudos Daniel!
>
> Beckman
>
> On Mon, 27 Jan 2020, Daniel-Constantin Mierla wrote:
>
>> Hello,
>>
>> I noticed the discussion about STIR/SHAKEN that happened on this forum a
>> few weeks ago and for quite some time I had in my todo list the task to
>> add support for those extensions to Kamailio SIP server, but with no
>> real pressure to deploy them here in Europe, I kept postponing for a
>> while (also, some people did it already for Kamailio using embedded
>> scripting languages Lua or Python).
>>
>> Anyhow, as I saw the discussion here, it became fresh again and I
>> searched the web, but I could not find any free/open tools to
>> test/validate implementations, so it looked a bit like chicken-egg
>> problem, therefore I created recently such a project, written in Go
>> language, with option to build a C static or shared library.
>>
>> It is still very fresh code, not much tested, now with ES256 signing
>> algorithm based on golang native support, no interoperability done with
>> other applications. The project is available at:
>>
>>   * https://github.com/asipto/secsipidx
>>
>> To be able to enable older versions of PBX/SIP servers to support
>> STIR/SHAKEN extensions, besides the C library exports, there is an
>> application that can run as CLI tool or HTTP API server to check or
>> generate Identity headers. I haven't tested at all on Windows, but I
>> expect that golang ensures good portability, not using anything OS
>> specific in the code.
>>
>> I thought it worth announcing it here, in case someone wants to play
>> with, suggest improvements or even contribute to make it easier to use
>> on their specific deployments.
>>
>> Cheers,
>> Daniel
>>
>> -- 
>> Daniel-Constantin Mierla -- www.asipto.com
>> www.twitter.com/miconda -- www.linkedin.com/in/miconda
>> Kamailio Advanced Training - March 9-11, 2020, Berlin - www.asipto.com
>> Kamailio World Conference - April 27-29, 2020, in Berlin --
>> www.kamailioworld.com
>>
>> _______________________________________________
>> VoiceOps mailing list
>> VoiceOps at voiceops.org
>> https://puck.nether.net/mailman/listinfo/voiceops
>
> ---------------------------------------------------------------------------
>
> Peter Beckman                                                 
> Internet Guy
> beckman at angryox.com                                
> http://www.angryox.com/
> ---------------------------------------------------------------------------

-- 
Daniel-Constantin Mierla -- www.asipto.com
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Kamailio Advanced Training - March 9-11, 2020, Berlin - www.asipto.com
Kamailio World Conference - April 27-29, 2020, in Berlin -- www.kamailioworld.com