[asterisk-dev] Enable dtls_cfg

[Joshua Colp]

jaflong jaflong wrote:
> Hi
>
> I am having problems using DTLS-SRTP and trying to debug why I am getting this error
> [Mar 26 14:48:23] WARNING[31977][C-00000009]: chan_sip.c:10657 process_sdp: Can't provide secure audio requested in SDP offer
>
>
> In chan_sip.c
>
> Tracing through the code, at this point the value of p->dtls_cfg.enabled is FALSE when run.
> Any tip on how to get p->dtls_cfg.enabled set to TRUE. It seems DTLS config is not getting initiated

Have you enabled it in the configuration? It's controlled using dtlsenable.

> static int process_sdp_a_dtls(const char *a, struct sip_pvt *p, struct ast_rtp_instance *instance)
> {
>          struct ast_rtp_engine_dtls *dtls;
>          int found = FALSE;
>          char value[256], hash[6];
>
>
>          if (!instance || !p->dtls_cfg.enabled || !(dtls = ast_rtp_instance_get_dtls(instance))) {
>                  return found;
>          }
>
>
> By the way what is the minimum version required of openssl to use DTLS-SRTP.
> At present I have 1.01e-fips (cento 6.5)

DTLS-SRTP suppor was added to OpenSSL in version 1.0.1, so it should be 
fine.

Asterisk also does not support SHA-256 currently without using the patch 
available at https://issues.asterisk.org/jira/browse/ASTERISK-22961

-- 
Joshua Colp
Digium, Inc. | Senior Software Developer
445 Jan Davis Drive NW - Huntsville, AL 35806 - US
Check us out at: www.digium.com & www.asterisk.org