[asterisk-bugs] [JIRA] Feedback Entered: (ASTERISK-20234) SRTP not working with some devices (Eg snom320) - Message "We are requesting SRTP for audio, but they responded without it!"

tootai (JIRA) noreply at issues.asterisk.org
Tue Aug 21 12:02:07 CDT 2012


     [ https://issues.asterisk.org/jira/browse/ASTERISK-20234?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

tootai updated ASTERISK-20234:
------------------------------

    Assignee: Rusty Newton  (was: tootai)
      Status: Triage  (was: Waiting for Feedback)

Hereunder, thanks for your support.


sip.conf:
========

[general]                                                                                                                                                                      
context=default-SIP                                                                                                      
allowoverlap=no
udpbindaddr=0.0.0.0
transport=udp                                                                                                                                                                  
tcpenable=no                                                                                    
tcpbindaddr=0.0.0.0
srvlookup=yes                                                                                                     
disallow=all                   ; First disallow all codecs                                                                                                                     
allow=g722                                                                                                           
allow=ulaw                                                                                                                                                                     
allow=alaw                                                                                                                                                                     
allow=h264                                                                                                                                                                     
allow=h263p                                                                                                                                                                    
allow=h263                                                                                                                                                                     
language=en                                                                                                 
videosupport=yes                                                                                         
alwaysauthreject = yes                                                                                       
registerattempts=0              ; try for ever (default=10)                                                                                                                    
registertimeout=20              ; default                                                                                                                                      
                                                                                                                                                                               
#include local/additional_sip-general.conf                                                                                                                                     
                                                                                                                                                                               
[authentication]                                                                                                                                                               
                                                                                                                                                                               
#include local/sip.d/*.conf


additional_sip-general.conf:
===========================

useragent=MYPhone                                                                                                   
sdpsession=MYPhone PBX                                                                                                                                                        
realm=my.realm.domain                                                                                                                                                             
tlsenable=yes
tlsbindaddr=0.0.0.0
tlscertfile=/var/lib/asterisk/keys/local/asterisk.pem                                                                                                                          
tlscafile=/var/lib/asterisk/keys/local/ca.crt                                                                                                                                  
tlsdontverifyserver=no                                                                                                                                                         
tlscipher=ALL                                                                                                                                                                  
tlsclientmethod=tlsv1
                                                                                                                                                          
t38pt_udptl = yes,fec                                                                                                  
faxdetect = yes
                                                                                                                                                                               
localnet=192.168.7.0/24                                                                                                                                                        
externaddr=xxx.xxx.xxx.xxx                                                                                                                                                       
                                                                                                                                                                               
nat=yes


peer definition:
===============

[Myphone-spec](!)                                                                                                                                                             
accountcode=accphone                                                                                                                                                           
secret=<protected>                                                                                                                                                            
context=from-Myphone                                                                                                                                                          
qualify=5000                                                                                                                                                                   
busy-level=2                                                                                                                                                                   
subscribecontext=MyphoneSubscribe                                                                                                                                             
setvar=mySubscriptions=10                                                                                                                                                      
setvar=myPrivateEnv=Myphone                                                                                                                                                   
setvar=myPrivateVM=no                                                                                                                                                          
setvar=myOnNOANSWER=main                                                                                                                                                       
;insecure=port,invite                                                                                                                                                          
                                                                                                                                                                               
[Myphone-secure](!)                                                                                                                                                           
disallow=all                                                                                                                                                                   
allow=g722,ulaw,alaw                                                                                                                                                           
transport=tls                                                                                                                                                                  
encryption=yes

[myphone115](natted-phone,ulaw-phone,callgroup1,Myphone-spec,Myphone-secure)                                                                                                                
defaultuser=Device 115                                                                                                                                                         


> SRTP not working with some devices (Eg snom320) - Message "We are requesting SRTP for audio, but they responded without it!"
> ----------------------------------------------------------------------------------------------------------------------------
>
>                 Key: ASTERISK-20234
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-20234
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_sip/SRTP
>    Affects Versions: 10.7.0
>         Environment: RHEL5 linux 2.6.18-308.11.1.el5
>            Reporter: tootai
>            Assignee: Rusty Newton
>         Attachments: full
>
>
> As you can see, snom 320 (latest stable firmware snom320-SIP 8.7.3.10) is annoncing crypto but asterisk doesn't recognize it.
> [Edit by Rusty Newton - removed debug excerpt since full log is now attached]
> And call is not accepted
> -- 
> Daniel

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira



More information about the asterisk-bugs mailing list