[asterisk-bugs] [JIRA] (ASTERISK-27397) SRTP call fails if transferred to unencrypted endpoint

[Joshua Colp (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-27397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=240409#comment-240409 ] 

Joshua Colp commented on ASTERISK-27397:
----------------------------------------

At least in the debug provided the problem appears to stem from the connected line update which is being sent as a re-invite. We send a re-invite which uses the same keys as before. Jitsi, however, answers with different keys as to what they initially provided. This means that either we aren't applying the key to the SRTP session in this instance or they aren't applying it to their own.

> SRTP call fails if transferred to unencrypted endpoint
> ------------------------------------------------------
>
>                 Key: ASTERISK-27397
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-27397
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_srtp
>    Affects Versions: 14.7.0
>         Environment: FreePBX distro 14
>            Reporter: basildane
>            Assignee: Unassigned
>         Attachments: debug.log, pjsip.conf, pjsip.endpoint.conf
>
>
> Call between two SRTP endpoints work ok until transferred to a device that does not have SRTP.  Then Asterisk logs:
> {panel}
> res_srtp.c: SRTP unprotect failed with: authentication failure 110
> {panel}
> Audio is lost from the call at this point.



--
This message was sent by Atlassian JIRA
(v6.2#6252)