[asterisk-bugs] [Asterisk 0017563]: [patch] SRTP (SRTP unprotect: authentication failure)

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=17563 
====================================================================== 
Reported By:                Alexcr
Assigned To:                twilson
====================================================================== 
Project:                    Asterisk
Issue ID:                   17563
Category:                   Resources/res_srtp
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     acknowledged
Target Version:             1.8.0
Asterisk Version:           SVN 
JIRA:                       SWP-1795 
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases):  trunk 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2010-06-29 04:04 CDT
Last Modified:              2010-07-28 06:03 CDT
====================================================================== 
Summary:                    [patch] SRTP (SRTP unprotect: authentication
failure)
Description: 
I setup asterisk-trunk with res_srtp 

Test with Snom320 and Eyalink T26P is failed with error

[Jun 24 17:08:08] DEBUG[629] res_srtp.c: SRTP unprotect: authentication
failure
[Jun 24 17:08:08] WARNING[629] res_rtp_asterisk.c: RTCP Read error:
Success.  Hanging up.

with eyebeam-1.5 all work fine if add TLS support on both.
====================================================================== 

---------------------------------------------------------------------- 
 (0125182) sfritsch (reporter) - 2010-07-28 06:03
 https://issues.asterisk.org/view.php?id=17563#c125182 
---------------------------------------------------------------------- 
This is from your log:
[Jul 28 12:14:26] DEBUG[14287] sip/sdp_crypto.c: local_key64
P8cJePk3WFz5Qk6DfEIqFrPQ8oHq7wCiKmjYzduM len 40
[Jul 28 12:14:26] DEBUG[14287] sip/sdp_crypto.c: SRTP policy activated
[Jul 28 12:14:26] DEBUG[14287] chan_sip.c: Processing media-level (audio)
SDP a=crypto:1 AES_CM_128_HMAC_SHA1_32
inline:e0v5vPHwr86LtCDkk55yxqVMekysb6h+pHn/9P2z... OK.
[Jul 28 12:14:26] DEBUG[14287] sip/sdp_crypto.c: SRTP policy activated
[Jul 28 12:14:26] DEBUG[14287] chan_sip.c: Processing media-level (audio)
SDP a=crypto:2 AES_CM_128_HMAC_SHA1_80
inline:e0v5vPHwr86LtCDkk55yxqVMekysb6h+pHn/9P2z... OK.


It seems your SPA942 allows the other side to choose the crypto-suite. Try
to disable AES_CM_128_HMAC_SHA1_32 crypto-suite in your configuration and
test again. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-07-28 06:03 sfritsch       Note Added: 0125182                          
======================================================================