[asterisk-bugs] [Asterisk 0018899]: no native bridging when more than one crypto offer in SRTP

[Asterisk Bug Tracker]

The following issue has been CLOSED 
====================================================================== 
https://issues.asterisk.org/view.php?id=18899 
====================================================================== 
Reported By:                gersonsm
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   18899
Category:                   Channels/chan_sip/SRTP
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     closed
Asterisk Version:           1.8.2.4 
JIRA:                        
Regression:                 No 
Reviewboard Link:            
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
Resolution:                 open
Fixed in Version:           
====================================================================== 
Date Submitted:             2011-02-28 11:57 CST
Last Modified:              2011-02-28 14:34 CST
====================================================================== 
Summary:                    no native bridging when  more than one crypto offer
in SRTP
Description: 
When using phones (ie Yealink T22p) that send more than one crypto offers
Asterisk does not establish a native bridging between the phones anymore,
meaning that the asterisk server stays in the media path and all the
traffic flows from phone A to Asterisk and from Asterisk further on to
phone B. When using softphone (Phonerlite) i can use SRTP with no issue.

====================================================================== 

---------------------------------------------------------------------- 
 (0132451) twilson (administrator) - 2011-02-28 14:34
 https://issues.asterisk.org/view.php?id=18899#c132451 
---------------------------------------------------------------------- 
This isn't a problem, it is just how things work. Phone A calls Asterisk
and sets up an encrypted session. Asterisk calls Phone B and sets up an
encrypted session. It is not possible for the phones send the media
directly because they wouldn't be able to decrypt.

Asterisk is not a SIP proxy. It doesn't direct the phones to negotiate
encryption between each other. It can behave in no other way. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2011-02-28 14:34 twilson        Note Added: 0132451                          
2011-02-28 14:34 twilson        Status                   new => closed       
======================================================================