[asterisk-bugs] [JIRA] (ASTERISK-29266) ICE Role conflict with an unauthorized session

[Friendly Automation (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-29266?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=254055#comment-254055 ] 

Friendly Automation commented on ASTERISK-29266:
------------------------------------------------

Change 15385 merged by Joshua Colp:
res_rtp_asterisk:  Check remote ICE reset and reset local ice attrb

[https://gerrit.asterisk.org/c/asterisk/+/15385|https://gerrit.asterisk.org/c/asterisk/+/15385]

> ICE Role conflict with an unauthorized session
> ----------------------------------------------
>
>                 Key: ASTERISK-29266
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-29266
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_rtp_asterisk
>    Affects Versions: 16.10.0
>            Reporter: Salah Ahmed
>            Assignee: Salah Ahmed
>         Attachments: full.log
>
>
> Hello,
> Recently we have experienced an issue related to ICE. We did some analysis on the issue, let me explain the scenario, 
> Suppose, if in a call the asterisk's initial ICE role is Controlling and if in the conversation asterisk get an offer(re-Invite), then Asterisk create a new session with ICE Controlled role.
> After then, If remote agent sending any STUN binding request with old attrb and Controlled role, then asterisk switch its current role to Controlling mode. And this create "ice role conflict" problem for all following STUN binding requests from that agent, eventually call get disconnected from remote side.
> We got a solution for this, if we reset the local ICE attributes (ufrag and pass) then if the remote agent sending any Bind request with old attrb then this req get rejected with 401 (Unauthorized). This makes remote agent happy.
> Thank You,
> Salah



--
This message was sent by Atlassian JIRA
(v6.2#6252)