[asterisk-bugs] [Asterisk 0013712]: Hangups are not recognized when using IAX2 encryption

[Asterisk Bug Tracker]

The following issue has been UPDATED. 
====================================================================== 
http://bugs.digium.com/view.php?id=13712 
====================================================================== 
Reported By:                justdave
Assigned To:                dvossel
====================================================================== 
Project:                    Asterisk
Issue ID:                   13712
Category:                   Channels/chan_iax2
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     closed
Asterisk Version:           1.4.22 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
Resolution:                 no change required
Fixed in Version:           
====================================================================== 
Date Submitted:             2008-10-15 17:41 CDT
Last Modified:              2009-03-04 18:12 CST
====================================================================== 
Summary:                    Hangups are not recognized when using IAX2
encryption
Description: 
When activating encryption on an IAX trunk link via "encrypt=aes128" the
call performs normally until one of the parties hangs up.  On the Asterisk
server which performed the hangup, it appears to hang up normally.  On the
other Asterisk server, you get a bunch of these in the log:

[Oct 16 06:37:28] NOTICE[3144]: chan_iax2.c:7020 socket_process: Packet
Decrypt Failed!
[Oct 16 06:37:28] NOTICE[3149]: chan_iax2.c:7020 socket_process: Packet
Decrypt Failed!
[Oct 16 06:37:28] NOTICE[3147]: chan_iax2.c:7020 socket_process: Packet
Decrypt Failed!
[Oct 16 06:37:28] NOTICE[3145]: chan_iax2.c:7020 socket_process: Packet
Decrypt Failed!

for about 30 seconds, finally followed by:
[Oct 16 06:37:27] WARNING[3148]: chan_iax2.c:2049 __attempt_transmit: Max
retries exceeded to host 10.250.4.10 on IAX2/mountainview-4 (type = 6,
subclass = 11, ts=10013, seqno=3)
    -- Hungup 'IAX2/mountainview-8'

I also seem to sometimes get the packet decrypt errors when DTMF digits
are transmitted (can't reproduce that one all the time though).

I've tried it with both trunk=yes and trunk=no in the iax.conf on both
ends with no difference.
======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
has duplicate       0014589 chan_iax2.c:7410 socket_process: Packet...
====================================================================== 

---------------------------------------------------------------------- 
 (0101239) dvossel (administrator) - 2009-03-04 18:12
 http://bugs.digium.com/view.php?id=13712#c101239 
---------------------------------------------------------------------- 
Ok, this took me awhile to figure out.  There are two different issues
being discussed here.  The issue which the reporter opened the bug report
on involves packet decrypt errors occurring during hangups in 1.4.22.  I
was able to reproduce this bug in the 1.4.22 and can verify that it is no
longer present in the latest 1.4 branch code.

The second issue being discussed involves dropped calls during packet loss
caused by decryption errors, which is a separate issue entirely.  Since
this is a separate issue it needs to be opened separately.

I'm sorry about the confusion. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-03-04 18:12 dvossel        Note Added: 0101239                          
2009-03-04 18:12 dvossel        Status                   assigned => closed  
2009-03-04 18:12 dvossel        Resolution               reopened => no change
required
======================================================================