[asterisk-bugs] [Asterisk 0017563]: [patch] SRTP (SRTP unprotect: authentication failure)

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=17563 
====================================================================== 
Reported By:                Alexcr
Assigned To:                twilson
====================================================================== 
Project:                    Asterisk
Issue ID:                   17563
Category:                   Resources/res_srtp
Reproducibility:            always
Severity:                   block
Priority:                   high
Status:                     ready for review
Target Version:             1.8.0
Asterisk Version:           SVN 
JIRA:                       SWP-1795 
Regression:                 No 
Reviewboard Link:           https://reviewboard.asterisk.org/r/878/ 
SVN Branch (only for SVN checkouts, not tarball releases):  trunk 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2010-06-29 04:04 CDT
Last Modified:              2010-09-01 13:44 CDT
====================================================================== 
Summary:                    [patch] SRTP (SRTP unprotect: authentication
failure)
Description: 
I setup asterisk-trunk with res_srtp 

Test with Snom320 and Eyalink T26P is failed with error

[Jun 24 17:08:08] DEBUG[629] res_srtp.c: SRTP unprotect: authentication
failure
[Jun 24 17:08:08] WARNING[629] res_rtp_asterisk.c: RTCP Read error:
Success.  Hanging up.

with eyebeam-1.5 all work fine if add TLS support on both.
====================================================================== 

---------------------------------------------------------------------- 
 (0126535) svnbot (reporter) - 2010-09-01 13:44
 https://issues.asterisk.org/view.php?id=17563#c126535 
---------------------------------------------------------------------- 
Repository: asterisk
Revision: 284477

U   branches/1.8/channels/chan_sip.c
U   branches/1.8/include/asterisk/res_srtp.h
U   branches/1.8/main/rtp_engine.c
U   branches/1.8/res/res_rtp_asterisk.c
U   branches/1.8/res/res_srtp.c

------------------------------------------------------------------------
r284477 | twilson | 2010-09-01 13:44:37 -0500 (Wed, 01 Sep 2010) | 17
lines

Fix SRTP for changing SSRC and multiple a=crypto SDP lines

Adding code to Asterisk that changed the SSRC during bridges and
masquerades
broke SRTP functionality. Also broken was handling the situation where an
incoming INVITE had more than one crypto offer. This patch caches the SRTP
policies the we use so that we can change the ssrc and inform libsrtp of
the
new streams. It also uses the first acceptable a=crypto line from the
incoming
INVITE.

(closes issue https://issues.asterisk.org/view.php?id=17563)
Reported by: Alexcr
Patches: 
      srtp.diff uploaded by twilson (license 396)
Tested by: twilson

Review: https://reviewboard.asterisk.org/r/878/

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=284477 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-09-01 13:44 svnbot         Checkin                                      
2010-09-01 13:44 svnbot         Note Added: 0126535                          
======================================================================