← Volver al índice de módulos

crypto

This module provides various cryptography tools for use in Kamailio configuration file. For compatibility with existing crypto libraries its internal operation mode can be configured as well.
🔒 Autenticación y Seguridad Kamailio 6.1 14 parámetros 12 funciones

Descripción general

This module provides various cryptography tools for use in Kamailio configuration file. For compatibility with existing crypto libraries its internal operation mode can be configured as well. This allows the module to be used e.g. with existing Java applications or PostgreSQL DB functions. It relies on OpenSSL libraries for cryptographic operations (libssl, libcrypto).

Documentación oficial: https://www.kamailio.org/docs/modules/stable/modules/crypto.html
Código fuente: https://github.com/kamailio/kamailio/tree/master/src/modules/crypto

Parámetros de configuración

ParámetroTipoDescripción
salt str 3.2. register_callid (int) 3.3. register_evcb (int) 3.4. kevcb_netio (str) 3.5. netio_key (str) 3.6. key_derivation (str) 3.7. init_vector (str)
register_callid int 3.3. register_evcb (int) 3.4. kevcb_netio (str) 3.5. netio_key (str) 3.6. key_derivation (str) 3.7. init_vector (str)
register_evcb int 3.4. kevcb_netio (str) 3.5. netio_key (str) 3.6. key_derivation (str) 3.7. init_vector (str)
kevcb_netio str 3.5. netio_key (str) 3.6. key_derivation (str) 3.7. init_vector (str)
netio_key str 3.6. key_derivation (str) 3.7. init_vector (str)
key_derivation str 3.7. init_vector (str)
init_vector str 3.1. salt (str)
salt str A keyword to generate salt for encryption. It must be at least 8 chars long. If set to empty, no salt is used for encryption.
register_callid int Set it to 1 in order to register a callback to core for generation of callid values for requests generated by Kamailio tm module.
register_evcb int Set it to 1 in order to register the event route callbacks, in case AES encryption/decryption of SIP traffic is wanted. The event_route[crypto:netio] or corresponding KEMI callback are executed.
kevcb_netio str Name of the KEMI callback function for netio events. It receives a string parameter with event route name.
netio_key str The shared secret used to encrypt/decrypt network traffic.
key_derivation str Specify if the module should use an internal derivation function to generate the initialization vector for encryption operations. This is the default mode. If set to 0 the initialization vector will b
init_vector str The initialization vector used for the cryptographic operations. This needs to be a Base64 encoded value with 16 bytes lengths.

Funciones exportadas

crypto_aes_encrypt(text, key, res)

4.2. crypto_aes_decrypt(text, key, res) 4.3. crypto_hmac_sha256(text, key, res) 4.4. crypto_netio_in) 4.5. crypto_netio_out() 4.6. crypto_netio_encrypt() 4.7. crypto_netio_decrypt()

crypto_aes_decrypt(text, key, res)

4.3. crypto_hmac_sha256(text, key, res) 4.4. crypto_netio_in) 4.5. crypto_netio_out() 4.6. crypto_netio_encrypt() 4.7. crypto_netio_decrypt()

crypto_hmac_sha256(text, key, res)

4.4. crypto_netio_in) 4.5. crypto_netio_out() 4.6. crypto_netio_encrypt() 4.7. crypto_netio_decrypt()

crypto_netio_out()

4.6. crypto_netio_encrypt() 4.7. crypto_netio_decrypt()

crypto_netio_encrypt()

4.7. crypto_netio_decrypt()

crypto_netio_decrypt()

4.1. crypto_aes_encrypt(text, key, res)

crypto_aes_encrypt(text, key, res)

Encrypts the text with the key using AES encryption algorithm. The result is encoded in base64 format and stored in res. The parameter res must be a read-write variables. The parameters text and key can be static strings or strings with variables (dy

crypto_aes_decrypt(text, key, res)

Decrypts the text with the key using AES encryption algorithm. The text has to be encoded in base64 format. The parameter res must be a read-write variables. The parameters text and key can be static strings or strings with variables (dynamic strings

crypto_hmac_sha256(text, key, res)

Calculates HMAC (keyed-hash message authentication code) with SHA256 as a cryptographic hash function. The result is encoded in base64 url encoded format and stored in res. The parameter res must be a read-write variable. The parameters text and key

crypto_netio_out()

Return 1 (true) if it is an outgoing net message, or -1 (false) otherwise.

crypto_netio_encrypt()

Mark the network message for encryption.

crypto_netio_decrypt()

Mark the network message for decryption.

Autores y contribuidores

Daniel-Constantin Mierla <miconda@gmail.com>

Copyright © 2016 asipto.com

Módulos relacionados

auth auth_arnacon auth_db auth_diameter auth_ephemeral auth_radius htable ipops