[asterisk-bugs] [JIRA] (ASTERISK-16898) SRTP unprotect: authentication failure when RTP sequence number switches from 65535 -> 0

[Alexander Traud (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-16898?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=220916#comment-220916 ] 

Alexander Traud edited comment on ASTERISK-16898 at 5/22/20 5:44 AM:
---------------------------------------------------------------------

Updated the patch for the [latest release|https://github.com/cisco/libsrtp/releases], because [AES-IN|https://en.wikipedia.org/wiki/AES_instruction_set] was added. I used the following commands to compile libsrtp, in Ubuntu 14.04 LTS:{noformat}
sudo apt install build-essential libssl-dev
wget github.com/cisco/libsrtp/archive/v2.tar.gz
tar -zxf v2.tar.gz
cd ./libsrtp-*
wget issues.asterisk.org/jira/secure/attachment/59069/srtpROC-LE_for_libsrtp2.3.x.patch
patch -p0 <./srtpROC-LE_for_libsrtp2.3.x.patch
./configure --disable-debug --disable-stdout --enable-openssl
make shared_library
sudo make install{noformat}


was (Author: traud):
Updated the patch for the [latest release|https://github.com/cisco/libsrtp/releases], because [AES-IN|https://en.wikipedia.org/wiki/AES_instruction_set] was added. I used the following commands to compile libsrtp, in Ubuntu 14.04:
{{sudo apt-get install build-essential libssl-dev}}
{{wget github.com/cisco/libsrtp/archive/v1.5.2.tar.gz}}
{{tar zxf v1.5*}}
{{cd /usr/src/libsrtp-1.5*}}
{{wget issues.asterisk.org/jira/secure/attachment/52348/srtpROC-LE_for_libsrtp1.5.x.patch}}
{{patch -p0 <./srtpROC-LE_for_libsrtp1.5.x.patch}}
{{./configure --prefix=/usr --disable-debug --disable-stdout --enable-openssl}}
{{make shared_library}}
{{sudo make install}}

> SRTP unprotect: authentication failure when RTP sequence number switches from 65535 -> 0
> ----------------------------------------------------------------------------------------
>
>                 Key: ASTERISK-16898
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-16898
>             Project: Asterisk
>          Issue Type: Bug
>          Components: Channels/chan_sip/SRTP
>            Reporter: Marcello Ceschia
>              Labels: patch
>      Target Release: 13.18.0, 14.7.0, 15.1.0, 16.0.0
>
>         Attachments: srtpROC-Debug_for_Asterisk11.patch, srtpROC-LE_for_Asterisk11.patch, srtpROC-LE_for_Asterisk13.patch, srtpROC-LE_for_Asterisk16.patch, srtpROC-LE_for_libsrtp1.4.5.patch, srtpROC-LE_for_libsrtp1.5.x.patch, srtpROC-LE_for_libsrtp1.6.x.patch, srtpROC-LE_for_libsrtp2.0.x.patch, srtpROC-LE_for_libsrtp2.1.x.patch, srtpROC-LE_for_libsrtp2.2.x.patch, srtpROC-LE_for_libsrtp2.3.x.patch
>
>
> {noformat}
> [Jan 19 09:29:34] WARNING[9825] res_srtp.c: SRTP unprotect: authentication failure
> {noformat}
> {noformat}
> Useragent    : Nokia RM-530 052.005
> Prim.Transp. : TLS
> {noformat}
> *ADDITIONAL INFORMATION*
> Depending on the initialze sequence number, the audio stream will become one way.
> I did several tests with the same result always.



--
This message was sent by Atlassian JIRA
(v6.2#6252)