[asterisk-bugs] [Asterisk 0019196]: Can't provide secure audio requested in SDP offer

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=19196 
====================================================================== 
Reported By:                stefanero
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   19196
Category:                   Channels/chan_sip/SRTP
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     feedback
Asterisk Version:           1.8.3.2 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2011-04-28 08:29 CDT
Last Modified:              2011-04-28 10:21 CDT
====================================================================== 
Summary:                    Can't provide secure audio requested in SDP offer
Description: 
Hello,

I am running * version 1.8.3.2 on opensuse 11.3 x86_64

we have a lot of Voice over WLan phones attached to our * , which use * as
a generic gateway to our Nortel CS1KE (rel 5.5).

I wanted to upgrade from * 1.6.0.24 to latest 1.8.X version.

when now calling from SIP phone to Nortel everything is okey, all calls
work no problem.

but when I want to transfer an existing wlan-nortel call to a 2nd nortel
phone I get an error in the asterisk console.
also the RTP stream is dead on both ends, and noone can hear the other.
====================================================================== 

---------------------------------------------------------------------- 
 (0134239) davidw (reporter) - 2011-04-28 10:21
 https://issues.asterisk.org/view.php?id=19196#c134239 
---------------------------------------------------------------------- 
Those sound like the sensible short term actions - making an explicit
policy of no encryption is better than relying on falling back to it.

However, it might be instructive to know if the Nortel accepted the
invalid response from 1.6,or retried without offering encryption.  In the
latter case, it might be worth investigating rejecting just the failed
stream, rather than the whole INVITE.

I'm not sure anyone would put time into investigating rejecting the stream
unless there was some evidence that it might help on a significant number
of peers, particularly given that your two options are probably better
choices in most cases. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2011-04-28 10:21 davidw         Note Added: 0134239                          
======================================================================