[asterisk-bugs] [JIRA] (ASTERISK-16898) SRTP unprotect: authentication failure when RTP sequence number switches from 65535 -> 0

[Alexander Traud (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-16898?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=220916#comment-220916 ] 

Alexander Traud edited comment on ASTERISK-16898 at 5/4/15 6:46 AM:
--------------------------------------------------------------------

Updated the patch for the [latest release|https://github.com/cisco/libsrtp/releases], because [AES-IN|https://en.wikipedia.org/wiki/AES_instruction_set] was added. I used the following commands to compile libsrtp, in Ubuntu 14.04:
{{sudo apt-get install build-essential libssl-dev}}
{{wget github.com/cisco/libsrtp/archive/v1.5.2.tar.gz}}
{{tar zxf v1.5*}}
{{cd /usr/src/libsrtp-1.5*}}
{{wget issues.asterisk.org/jira/secure/attachment/52348/srtpROC-LE_for_libsrtp1.5.x.patch}}
{{patch -p0 <./srtpROC-LE_for_libsrtp1.5.x.patch}}
{{./configure --prefix=/usr --disable-debug --disable-stdout --enable-openssl}}
{{make shared_library}}
{{sudo make install}}


was (Author: traud):
Updated {{srtpROC-LE_for_libsrtpHEAD}} to the [latest libsrtp revision|https://github.com/cisco/libsrtp], because libsrtp added support for [AES-IN|https://en.wikipedia.org/wiki/AES_instruction_set]. This works since resolution of [issue #59|https://github.com/cisco/libsrtp/issues/59] with Asterisk.

I used the following commands to compile libsrtp, in Ubuntu 14.04.1:
{{sudo apt-get install build-essential libssl-dev git}}
{{git clone https://github.com/cisco/libsrtp.git}}
{{cd libsrtp*}}
{{wget https://issues.asterisk.org/jira/secure/attachment/50792/srtpROC-LE_for_libsrtpHEAD.patch}}
{{patch -p0 <./srtpROC-LE_for_libsrtpHEAD.patch}}
{{./configure --prefix=/usr --disable-debug --disable-stdout --enable-openssl}}
{{make libsrtp.so}}
{{sudo make install}}

> SRTP unprotect: authentication failure when RTP sequence number switches from 65535 -> 0
> ----------------------------------------------------------------------------------------
>
>                 Key: ASTERISK-16898
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-16898
>             Project: Asterisk
>          Issue Type: Bug
>          Components: Channels/chan_sip/SRTP
>            Reporter: Marcello Ceschia
>         Attachments: srtpROC-Debug_for_Asterisk11.patch, srtpROC-LE_for_Asterisk11.patch, srtpROC-LE_for_Asterisk13.patch, srtpROC-LE_for_libsrtp1.4.5.patch, srtpROC-LE_for_libsrtp1.5.x.patch, srtpROC-LE_for_libsrtp2.patch
>
>
> {noformat}
> [Jan 19 09:29:34] WARNING[9825] res_srtp.c: SRTP unprotect: authentication failure
> {noformat}
> {noformat}
> Useragent    : Nokia RM-530 052.005
> Prim.Transp. : TLS
> {noformat}
> *ADDITIONAL INFORMATION*
> Depending on the initialze sequence number, the audio stream will become one way.
> I did several tests with the same result always.



--
This message was sent by Atlassian JIRA
(v6.2#6252)