[asterisk-dev] Re: Asterisk SRTP certificates

[Mikael Magnusson]

On Tue, May 22, 2007 at 11:57:44AM +0300, Alexandr Olekhnovich wrote:
> Hello
> I'm using the next command to create certificates:
> 
> #openssl req -new -x509 -keyout asterisk.key -out asterisk.crt -days 3650
> #cp asterisk.crt ca-certificates.crt
> 
> But now when I run asterisk it askes me the pass phrase, so when I input it
> asterisk gets crash (segmentation fault), when I input the wrong pass phrase
> it continues to work (but without srtp). What can be wrong with the
> certificates?
> 

Certificate based MIKEY methods are not supported by current SRTP patch.
MIKEY DH-HMAC is supported and uses the sip.conf secrets as Pre-shared secret.

Mikael