[asterisk-bugs] [Asterisk 0015834]: iax2 encryption failed on asterisk 1.4.26.2

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15834 
====================================================================== 
Reported By:                karesmakro
Assigned To:                dvossel
====================================================================== 
Project:                    Asterisk
Issue ID:                   15834
Category:                   Channels/chan_iax2
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     assigned
Asterisk Version:           1.4.26.1 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-09-04 13:31 CDT
Last Modified:              2009-09-10 03:28 CDT
====================================================================== 
Summary:                    iax2 encryption failed on asterisk 1.4.26.2
Description: 
I installed new asterisk 1.4.26.2 release as recommended, because of iax2
security issues and added the new options with come with new release.
Problem is, if encryption is enabled, I always get following error
message:
"host xxx.xxx.xxx.xxx failed to authenticate as 7100"
As I miss something? If encryption is disabled, call can be placed without
any problem!
In earlier version (asterisk-1.4.26.1) it worked perfectly!

If I disable encryption on server and enable on client side, I get message
like "decryption failed" as expectet.

====================================================================== 

---------------------------------------------------------------------- 
 (0110455) c0rnoTa (reporter) - 2009-09-10 03:28
 https://issues.asterisk.org/view.php?id=15834#c110455 
---------------------------------------------------------------------- 
switching requirecalltoken to 'no' doesn't change situation. Here is my
part of config:

[global]
calltokenoptional=my.ip.ad.ss/255.255.255.0

[callnumberlimits]
my.ip.ad.ss/255.255.255.255=1024

[asterisk-cc]
type=friend
username=asterisk3
auth=md5
secret=some-secret
requirecalltoken=no
encryption=aes128
trunk=yes
context=default
disallow=all
allow=g729
nat=yes
canreinvite=no
dtmfmode=rfc2833
host=my.ip.ad.ss 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-09-10 03:28 c0rnoTa        Note Added: 0110455                          
======================================================================