[asterisk-bugs] [JIRA] (ASTERISK-30343) res_crypto: ast_sign_bin fails

Michael Newton (JIRA) noreply at issues.asterisk.org
Tue Dec 13 14:38:51 CST 2022


    [ https://issues.asterisk.org/jira/browse/ASTERISK-30343?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=260905#comment-260905 ] 

Michael Newton commented on ASTERISK-30343:
-------------------------------------------

No permissions problems, and SELinux is not interfering either; same problem with it set to permissive.
{noformat}
$ ls -lahZ /var/lib/asterisk/keys/
total 12K
drwxr-x---.  3 asterisk asterisk system_u:object_r:asterisk_var_lib_t:s0  78 Sep 15 17:06 .
drwxr-x---. 12 asterisk asterisk system_u:object_r:asterisk_var_lib_t:s0 160 Sep 15 17:06 ..
-r--------.  1 asterisk asterisk system_u:object_r:asterisk_var_lib_t:s0 887 Sep  8 12:19 gateway.key
-r--r--r--.  1 asterisk asterisk system_u:object_r:asterisk_var_lib_t:s0 271 Sep 24  2015 gateway.pub
-r--r--r--.  1 asterisk asterisk system_u:object_r:asterisk_var_lib_t:s0 271 Sep 24  2015 pbx.pub
drwxr-x---.  2 asterisk asterisk system_u:object_r:asterisk_var_lib_t:s0   6 Sep 15 17:06 stir_shaken
{noformat}

> res_crypto: ast_sign_bin fails
> ------------------------------
>
>                 Key: ASTERISK-30343
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-30343
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Resources/res_crypto
>    Affects Versions: 16.29.0, 18.15.1, 20.0.1
>         Environment: Alma Linux 9.1
>            Reporter: Michael Newton
>            Assignee: Michael Newton
>            Severity: Major
>
> After upgrade from 16.28 to 16.29 our dundi queries stopped working with this error output:
> {noformat}
> WARNING[100840]: res_crypto.c:384 ast_sign_bin: RSA Signature (key gateway) failed -1
> NOTICE[100840]: pbx_dundi.c:1366 update_key: Failed to sign key (-1)!
> NOTICE[100840]: pbx_dundi.c:3376 dundi_send: Failed to send packet to '00:50:56:ae:13:23'
> {noformat}
> This appears to be a regression resulting from changes in ASTERISK-30046.



--
This message was sent by Atlassian JIRA
(v6.2#6252)



More information about the asterisk-bugs mailing list