Re: [Asterisk-java-users] FastAgi security authentication

[Brett S. <bs...@no...>]

You could consider writing a fastagi 'proxy' which sits on the Asterisk 
server so that the clear unauthenticated text is only transmitted 
locally. The proxy could then demand authentication/encryption using 
something like SOAP to the actual end point.
You would probably want the remote end point to register for 'events' by 
providing a soap end point for your proxy to call into.
Your fastagi proxy could then pass events to the external/remote process 
over soap as required.
When using soap you can use both a client and server SSL cert.
Have a look at the Axis libraries from apache. Be careful, the client 
certs seem to really slow the system down which can be a problem if you 
are in the middle of handling a telephone call.

Regards,
Brett

Stefan Reuter wrote:
> Hi,
>
> the FastAGI protocol itself has no support for authentication and
> encryption. You can add authentication at the application level using a
> username and password parameter and checking for that. For encryption
> you have to revert to VPN or similar.
>
> =Stefan
>
>   
> ------------------------------------------------------------------------
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> ------------------------------------------------------------------------
>
> _______________________________________________
> Asterisk-java-users mailing list
> Ast...@li...
> https://lists.sourceforge.net/lists/listinfo/asterisk-java-users
>