VoIP: SIP-over-TLS and sRTP: innovaphone

innovaphone started with H.323 but added Open-SIP with V6 in the year 2007. Therefore, you can use VoIP/SIP servers like Digium Asterisk or public VoIP/SIP providers.

Last tested firmware

12r2 sr23 [5560]
13r1 final [1879]
retested in Oct. 2019 with 13r1 sr6 [2105]
retested in May 2020 with 13r2 dvl [4742], that is an alpha

Configuration

Password: admin/ip222 (phone model in lower case)
Web → General → Admin
HTTPS: enabled out of the box
Update: A) Web → Maintenance → Upload → Firmware, or
B) Web → Maintenance → Update: store.innovaphone.com/release/download/
C) Web → Maintenance → Update: store.innovaphone.com/beta/download/ (might be older than the current release version)
D) Web → Maintenance → Update: store.innovaphone.com/alpha/download/
Trust Anchors: Web → General → Certificates → Trust list
SIP-URI User: Web → Phone (→ User-1 → General) → User ID
SIP-URI Host: Web → Phone (→ User-1 → General) → Domain
SIP-over-TLS: Web → Phone (→ User-1 → General) → Protocol: SIP/TLS
SDES-sRTP: Web → Phone (→ User-1 → General) → SRTP Key Exchange: SDES
which is RTP/SAVP + RTP/AVP

Software Bugs

SHA-2 Digest: does not pick MD5, continues without header Authorization, therefore is not able to register; therefore incompatible with Linphone
AES-GCM sRTP: accepted although not supported; therefore no audio
actually, the SDP parser crashes and answers silly
DNS-NAPTR: missing
Cipher Suites: missing TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384; questions its AES-256 sRTP support
Named Curves: just P-256, no P-384, or X448; questions its AES-256 sRTP support
IP Port Source: not the actual port but 5061 in the SIP header Contact
Mitigation: unknown; service has to ignore it and re-use the TCP based connection instead

Security

Bugs: DNS-SRV redirection disables Hostname Validation,
padlock icon even without SIP-over-TLS, and
missing TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 fixed with firmware 13r2
Responsible Disclosure: via postal mail
Firmware Update: missing Automation
missing Newsletter

Miscellaneous

Model Range

Power Supply

12 V 0.45 A, Modular: 4P4C

back to the other phones.