[asterisk-bugs] [JIRA] (ASTERISK-27397) SRTP call fails if transferred to unencrypted endpoint

[basildane (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-27397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=239870#comment-239870 ] 

basildane commented on ASTERISK-27397:
--------------------------------------

I have attached a sample pjsip.endpoint.conf.
207 is the starting point.  That is Jitsi, and SRTP.

207 calls 202.
202 is a Grandstream 2160, not encrypted.
This leg of the call works.

202 transfers the call to 225.
225 is a Snom M3, not encrypted.
The call fails at this point.

I wish to point out that I have tested this with multiple devices in multiple combinations, and I found that the problem is not related to what kind of phone it is.  The same problem occurs regardless of the manufacture of the endpoint.  The only common denominator seems to be when the call starts out in SRTP, then gets moved through Asterisk paths that are not SRTP.


> SRTP call fails if transferred to unencrypted endpoint
> ------------------------------------------------------
>
>                 Key: ASTERISK-27397
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-27397
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_srtp
>    Affects Versions: 14.7.0
>         Environment: FreePBX distro 14
>            Reporter: basildane
>            Assignee: Unassigned
>         Attachments: pjsip.endpoint.conf
>
>
> Call between two SRTP endpoints work ok until transferred to a device that does not have SRTP.  Then Asterisk logs:
> {panel}
> res_srtp.c: SRTP unprotect failed with: authentication failure 110
> {panel}
> Audio is lost from the call at this point.



--
This message was sent by Atlassian JIRA
(v6.2#6252)