[asterisk-bugs] [JIRA] Commented: (ASTERISK-20234) SRTP not working with some devices (Eg snom320) - Message "We are requesting SRTP for audio, but they responded without it!"

[Matt Jordan (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-20234?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=196722#comment-196722 ] 

Matt Jordan commented on ASTERISK-20234:
----------------------------------------

Following up again.

After some further thought, so long as this is configurable in the SNOM phones, I think we're not going to change the behavior in Asterisk.

The concern for me is that we might end up in a situation where some (poorly written) UA sends us an INVITE request with AVP specified and a crypto line, but does *not* intend for us to process the crypto attribute.  This would mean we would start to send SRTP to the device, but they would be expecting RTP.

I'm more on the side of thought that says if you want SRTP, you should negotiate for it properly.

You're more than welcome to continue to use this patch if you don't want to configure all of the phones.

If you find out that you cannot configure the SNOM phones to send SAVP, then this becomes a bit of a different issue - there's a common model of phone doing something "wrong", but there is no workaround for it in the phone, and we may want to consider putting the workaround for the behavior in Asterisk instead.  If that's the case, please contact a bug marshal in #asterisk-bugs or on the asterisk-bugs mailing list and have them reopen this issue.

Thanks!

> SRTP not working with some devices (Eg snom320) - Message "We are requesting SRTP for audio, but they responded without it!"
> ----------------------------------------------------------------------------------------------------------------------------
>
>                 Key: ASTERISK-20234
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-20234
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_sip/SRTP
>    Affects Versions: 10.7.0
>         Environment: RHEL5 linux 2.6.18-308.11.1.el5
>            Reporter: tootai
>            Assignee: tootai
>         Attachments: asterisk-20234-sip.conf, full, srtp_patches.diff
>
>
> As you can see, snom 320 (latest stable firmware snom320-SIP 8.7.3.10) is annoncing crypto but asterisk doesn't recognize it.
> [Edit by Rusty Newton - removed debug excerpt since full log is now attached]
> And call is not accepted
> -- 
> Daniel

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira