Asterisk 18.16 STIR/SHAKEN

Asterisk Asterisk SIP
1

I currently have Asterisk version 18.16 installed and I am using chan_sip. I want to integrate STIR/SHAKEN.

From my research, STIR/SHAKEN support in Asterisk 18.16 is deprecated, and the new implementation is available starting with Asterisk 18.22.

Should I upgrade to 18.22 to use STIR/SHAKEN? Also, can it work with chan_sip?

Based on my R&D, it seems that STIR/SHAKEN does not work with chan_sip, and upgrading to Asterisk 18.22 is required. Is this correct?

I want to use this setup in production.

I would appreciate your guidance.

2

There is no support for STIR/SHAKEN with chan_sip in any version. What should ultimately be done is upgrading to a current supported version of Asterisk, and 18 is not one of them. There have been (and continue to be at times) fixes/changes to STIR/SHAKEN.

3

If you need it for outbound calls you can do it with an external applicaiton like secsipidx ( GitHub - asipto/secsipidx: Secure SIP Identity Extensions - IETF STIR/SHAKEN - CLI/REST API tool and C library ). We create the header in an AGI and then attach it to the call with SIPAddHeader

4

If I use secsipidx, obtain a certificate from an authorized STI Certificate Authority (CA), generate the SIP Identity header in AGI, and add it using SIPAddHeader, will this work? Will the provider or carrier allow it? @Dovid

5

You need to ask your carrier that. We have been signing our calls this way since the start with no issues.