asterisk电话录音后wav转mp3以及加密录音文件问题
本文旨在解决asterisk电话录音后wav转mp3以及加密录音文件问题
?
?
首先上拨号规则（/etc/asterisk/extensions.conf）：
[macro-Monitor]
exten => s,1,Set(PATH=/var/spool/asterisk/monitor/${STRFTIME(${EPOCH},,%Y-%m-%d)})
exten => s,n,Set(FILENAME=${STRFTIME(${EPOCH},,%Y-%m-%d-@-%H:%M:%S)}--${CALLERID(num)}-${DIALEDPEERNUMBER:2})
exten => s,n,Set(MONITOR_EXEC=/etc/asterisk/scripts/mce ${PATH} ${FILENAME})
exten => s,n,Monitor(wav,${PATH}/${FILENAME},mb)
?
然后你需要在/etc/asterisk/features.conf添加几条新规则：
Monitor => #1,caller,Macro,Monitor ? ? ? ? ? ? ?;Allow the caller to initialize a calling monitor
pauseMonitor => #2,self/caller,PauseMonitor ? ? ;Allow the caller to pause monitoring on their channel
unpauseMonitor => #3,self/caller,UnPauseMonitor ;Allow the caller to unpause monitoring on their channel
?
这样你就可以在通话时按电话机的#1,#2,#3组合键来实现：录音，暂停录音，继续录音功能了
怎么调用这些功能呢，去你想要这些功能生效的context，在context的第一行插入如下命令：
exten => s,1,Set(DYNAMIC_FEATURES=Monitor#pauseMonitor#unpauseMonitor)
?
如果想对每个通话都录音，那么你需要这么一个宏：
[macro-outbound]
exten => s,1,Set(PATH=/var/spool/asterisk/monitor/${STRFTIME(${EPOCH},,%Y-%m-%d)})
exten => s,n,Set(FILENAME=${STRFTIME(${EPOCH},,%Y-%m-%d-%H%M%S)}--${CALLERID(num)}-${ARG2})
exten => s,n,Set(MONITOR_EXEC=/etc/asterisk/scripts/mce ${PATH} ${FILENAME})
exten => s,n,Monitor(wav,${PATH}/${FILENAME},mb)
exten => s,n,Dial(${ARG1}/${ARG2},,tTm)
?
调用这个宏：
exten => _NXXXXXXX,1,Macro(outbound,DAHDI/1,${EXTEN})
exten => _NXXXXXXX,n,Macro(outbound,DAHDI/2,${EXTEN})
exten => _NXXXXXXX,n,Macro(outbound,DAHDI/3,${EXTEN})
exten => _NXXXXXXX,n,Macro(outbound,SIP/T,008621${EXTEN})
exten => _NXXXXXXX,n,Macro(outbound,SIP/S,008621${EXTEN})
exten => _NXXXXXXX,n,Congestion()
?
下面给出monitor_exec执行的脚本，在/etc/asterisk 目录下建个新目录用于存放脚本，此脚本名为mce(意为mix convert encrypt)
继续之前请确认你安装了以下软件包及其依赖关系包，它们是：gnupg、lame、sox
?
脚本正文：
?
# /bin/bash
?
KEY='Asterisk Server'
?
＃you should never change the variables below
GPG=/usr/bin/gpg
LAME=/usr/bin/lame
RM=/bin/rm
SOX=/usr/bin/sox
?
PATH=$1
FILENAME=$2
?
mix() {
$SOX -m "$PATH/$FILENAME-in.wav" "$PATH/$FILENAME-out.wav" "$PATH/$FILENAME.wav"
$RM $PATH/$FILENAME-*.wav
}
?
convert() {
$LAME -b16 --noshort -S $PATH/$FILENAME.wav $PATH/$FILENAME.mp3
$RM $PATH/$FILENAME.wav
}
?
encrypt() {
$GPG --homedir /var/lib/asterisk/\.gnupg -r "$KEY" --yes -o $PATH/$FILENAME.mp3.asc -e $PATH/$FILENAME.mp3
$RM $PATH/$FILENAME.mp3
}
?
＃this function seems doesn't run properly, so we don't use it now, but kept it and debug later.
mce() {
$SOX -m "$PATH/$FILENAME-in.wav" "$PATH/$FILENAME-out.wav" -t wav -q - | $LAME -S - - | $GPG -r $KEY --yes -o $PATH/$FILENAME.mp3.asc -e -
$RM $FILENAME-*.wav
}
?
mix
convert
encrypt
?
下说说如何配置加密，当然如果你感觉加密没有必要或者太麻烦不想弄，直接将上面脚本最后一行用#注释掉即可。
?
先面说说gpg的用法：
创建一对密匙对：
gpg --gen-key
你将会交互式的回答一些问题，然后gpg将会在你的匙扣上生成它们
?
导出公匙到纯ASCII码文件：
gpg -a --export KEYNAME > KEYFILE
?
导入公匙：
gpg --import KEYFILE
?
修改公私匙的信任度：
gpg --edit-key KEYNAME
你将会进入交互式修改模式
?
导出私匙到纯ASCII码文件：
gpg -a --export-secret-keys KEYNAME > yourprivatekey.asc
?
从你的匙扣上删除一个公匙：
gpg --delete-keys KEYNAME
?
从你的匙扣上删除一个私匙：
gpg --delete-secret-key KEYNAME
?
加密一个文件：
gpg -r KEYNAME --output OUTFILE.asc --encrypt INFILE
?
解密一个文件：
gpg -r KEYNAME --output OUTFILE --decrypt INFILE.asc
?
现在先让我们去你的工作机上创建一对gpg密匙对：
ubuntu@Simon:~$ gpg --gen-key
gpg (GnuPG) 1.4.9; Copyright (C) 2008 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it. ?
There is NO WARRANTY, to the extent permitted by law. ? ? ? ? ? ? ??
?
Please select what kind of key you want:
(1) DSA and Elgamal (default) ? ? ? ?
(2) DSA (sign only) ? ? ? ? ? ? ? ? ?
(5) RSA (sign only) ? ? ? ? ? ? ? ? ?
Your selection? 1 ? ? ? ? ? ? ? ? ? ? ??
DSA keypair will have 1024 bits. ? ? ? ?
ELG-E keys may be between 1024 and 4096 bits long.
What keysize do you want? (2048) 4096 ? ? ? ? ? ??
Requested keysize is 4096 bits ? ? ? ? ? ? ? ? ? ?
Please specify how long the key should be valid. ?
0 = key does not expire ? ? ? ? ? ? ? ? ?
<n> ?= key expires in n days ? ? ? ? ? ? ? ?
<n>w = key expires in n weeks ? ? ? ? ? ? ??
<n>m = key expires in n months ? ? ? ? ? ? ?
<n>y = key expires in n years ? ? ? ? ? ? ??
Key is valid for? (0) 0 ? ? ? ? ? ? ? ? ? ? ? ? ??
Key does not expire at all ? ? ? ? ? ? ? ? ? ? ? ?
Is this correct? (y/N) y ? ? ? ? ? ? ? ? ? ? ? ? ?
?
You need a user ID to identify your key; the software constructs the user ID
from the Real Name, Comment and Email Address in this form: ? ? ? ? ? ? ? ??
"Heinrich Heine (Der Dichter) <heinrichh@duesseldorf.de>" ? ? ? ? ? ? ??
?
Real name: Simon Zhang
Email address: simon.zhang@domain
Comment:
You selected this USER-ID:
"Simon Zhang <simon.zhang@domain>"
?
Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O
You need a Passphrase to protect your secret key.
?
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
++++++++++++++++++++.+++++.++++++++++.+++++++++++++++.+++++++++++++++++++++++++++++++++++++++++++++++++++++++..++++++++++++++++++++..+++++>++++++++++..............................+++++
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
++++++++++++++++++++++++++++++.+++++.+++++.+++++....+++++.+++++.....++++++++++.++++++++++..+++++.+++++.+++++..+++++.+++++...++++++++++.+++++++++++++++.+++++....+++++.+++++..+++++..+++++.+++++....+++++..+++++>.+++++++++++++++...+++++.+++++.....+++++++++++++++.+++++.+++++>+++++>..+++++.....>.+++++.................................................................................................+++++^^^
gpg: key 3532FD44 marked as ultimately trusted
public and secret key created and signed.
?
gpg: checking the trustdb
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0 ?valid: ? 4 ?signed: ? 0 ?trust: 0-, 0q, 0n, 0m, 0f, 4u
gpg: next trustdb check due at 2010-01-06
pub ? 1024D/3532FD44 2009-10-15
Key fingerprint = 17CD 4A5A 9A6D F817 0796 ?ACD5 8651 E9E8 3532 FD44
uid ? ? ? ? ? ? ? ? ?Simon Zhang <simon.zhang@domain>
sub ? 4096g/E14D2527 2009-10-15
?
然后导出公匙：
你可以用刚刚设定问题中的Real name或者是电子邮件地址为名称导出公匙：
gpg -a --export Simon\ Zhang > Simon_PUBKEY.asc
或者：
gpg -a --export simon.zhang@domain > Simon_PUBKEY.asc
?
然后复制这个公匙到asterisk服务器，要想操作asterisk用户的匙扣，你要给asterisk用户一个shell
用vi打开/etc/passwd, 找到asterisk用户，将行尾的/bin/false改为/bin/bash，保存退出
然后以root用户身份su到asterisk用户并导入它：
root@server:~# su asterisk
asterisk@server:/root$ gpg --import Simon_PUBKEY.asc
编辑信任度：
asterisk@server:~$ gpg --edit-key simon.zhang@domain
gpg (GnuPG) 1.4.9; Copyright (C) 2008 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
?
Secret key is available.
?
pub ?1024D/166B2755 ?created: 2009-06-11 ?expires: never ? ? ? usage: SC
trust: undefined ? ? ?validity: ultimate
sub ?4096g/2C66CF1E ?created: 2009-06-11 ?expires: never ? ? ? usage: E
[ultimate] (1). Simon Zhang (this key pair is for external mail transfer) <simon.zhang@domain>
?
Command> trust
pub ?1024D/166B2755 ?created: 2009-06-11 ?expires: never ? ? ? usage: SC
trust: undefined ? ? ?validity: ultimate
sub ?4096g/2C66CF1E ?created: 2009-06-11 ?expires: never ? ? ? usage: E
[ultimate] (1). Simon Zhang (this key pair is for external mail transfer) <simon.zhang@domain>
?
Please decide how far you trust this user to correctly verify other users' keys
(by looking at passports, checking fingerprints from different sources, etc.)
?
1 = I don't know or won't say
2 = I do NOT trust
3 = I trust marginally
4 = I trust fully
5 = I trust ultimately
m = back to the main menu
?
Your decision? 5
Do you really want to set this key to ultimate trust? (y/N) y
?
pub ?1024D/166B2755 ?created: 2009-06-11 ?expires: never ? ? ? usage: SC
trust: ultimate ? ? ?validity: ultimate
sub ?4096g/2C66CF1E ?created: 2009-06-11 ?expires: never ? ? ? usage: E
[ultimate] (1). Simon Zhang (this key pair is for external mail transfer) <simon.zhang@domain>
?
Command> quit
asterisk@server:/root$ exit
root@server:~#
?
完成后别忘记把asterisk用户的shell改回false喔。
ALL DONE！
?