[asterisk-bugs] [Asterisk 0013712]: Hangups are not recognized when using IAX2 encryption

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=13712 
====================================================================== 
Reported By:                justdave
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   13712
Category:                   Channels/chan_iax2
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     new
Asterisk Version:           1.4.22 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2008-10-15 17:41 CDT
Last Modified:              2008-11-20 09:39 CST
====================================================================== 
Summary:                    Hangups are not recognized when using IAX2
encryption
Description: 
When activating encryption on an IAX trunk link via "encrypt=aes128" the
call performs normally until one of the parties hangs up.  On the Asterisk
server which performed the hangup, it appears to hang up normally.  On the
other Asterisk server, you get a bunch of these in the log:

[Oct 16 06:37:28] NOTICE[3144]: chan_iax2.c:7020 socket_process: Packet
Decrypt Failed!
[Oct 16 06:37:28] NOTICE[3149]: chan_iax2.c:7020 socket_process: Packet
Decrypt Failed!
[Oct 16 06:37:28] NOTICE[3147]: chan_iax2.c:7020 socket_process: Packet
Decrypt Failed!
[Oct 16 06:37:28] NOTICE[3145]: chan_iax2.c:7020 socket_process: Packet
Decrypt Failed!

for about 30 seconds, finally followed by:
[Oct 16 06:37:27] WARNING[3148]: chan_iax2.c:2049 __attempt_transmit: Max
retries exceeded to host 10.250.4.10 on IAX2/mountainview-4 (type = 6,
subclass = 11, ts=10013, seqno=3)
    -- Hungup 'IAX2/mountainview-8'

I also seem to sometimes get the packet decrypt errors when DTMF digits
are transmitted (can't reproduce that one all the time though).

I've tried it with both trunk=yes and trunk=no in the iax.conf on both
ends with no difference.
====================================================================== 

---------------------------------------------------------------------- 
 (0095182) kwark (reporter) - 2008-11-20 09:39
 http://bugs.digium.com/view.php?id=13712#c95182 
---------------------------------------------------------------------- 
I just ran into the same problem, the only active IAX tunnel that had
encryption enabled reported:

[Nov 20 15:39:59] NOTICE[30387] chan_iax2.c: Packet Decrypt Failed!
[Nov 20 15:40:08] NOTICE[30395] chan_iax2.c: Packet Decrypt Failed!
[Nov 20 15:40:08] NOTICE[30396] chan_iax2.c: Packet Decrypt Failed!
[Nov 20 15:40:09] NOTICE[30393] chan_iax2.c: Packet Decrypt Failed!
[Nov 20 15:40:09] NOTICE[30395] chan_iax2.c: Packet Decrypt Failed!
[Nov 20 15:40:10] NOTICE[30390] chan_iax2.c: Packet Decrypt Failed!
[Nov 20 15:40:10] NOTICE[30389] chan_iax2.c: Packet Decrypt Failed!
[Nov 20 15:40:11] NOTICE[30387] chan_iax2.c: Packet Decrypt Failed!
[Nov 20 15:40:18] NOTICE[30391] chan_iax2.c: Packet Decrypt Failed!
[Nov 20 15:40:18] NOTICE[30392] chan_iax2.c: Packet Decrypt Failed!
[Nov 20 15:40:19] WARNING[30388] chan_iax2.c: Max retries exceeded to host
xxx.xxx.xxx.xxx on IAX2/vbcc-16385 (type = 6, subclass = 11, ts=30009,
seqno=8)

At this point all IAX tunnels start to exceed max retries, type=6 and with
subclass either 2 or 11. But the difference is that in my situation no new
calls can be placed. The only solution I found was to restart asterisk.

Version 1.4.21.

BTW I had the same problem before, but didn't see any "Packet Decrypt
Failed!" at that time (or at least I can't remember seeing them, sadly
enough I don't have those logs anymore). 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2008-11-20 09:39 kwark          Note Added: 0095182                          
======================================================================