<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><a href="https://issues.asterisk.org/jira/browse/ASTERISK-17899">https://issues.asterisk.org/jira/browse/ASTERISK-17899</a><div><br></div><div><div apple-content-edited="true"><span class="Apple-style-span" style="border-collapse: separate; font-size: 12px; border-spacing: 0px; "><div>I've done a lot of research about this and find a worrysome amount of pages where people explain that this is a bug in Asterisk and a few different patches floating around. That's not a good situation. It does break communication in a customer platform I'm working with.</div><div><br></div><div>The story is this:</div><div><br></div><div>In SDES we send master crypto keys in clear text (don't laugh, please). The keys can have attributes for the lifetime - number of packets we can use this key for - and a master key index. In asterisk, if someone sends us this attribute which quite a lot of servers and phones seems to do, we break the call and do not accept - even if the lifetime is 2^31 packets which is quite a long call, spanning decades, with a rate of 50 packets per second.</div><div><br></div><div>We do not have to answer with any attributes on our key. The key attributes are just declarative, not an offer/answer item.</div><div><br></div></span><div style="font-size: 12px; ">I consider this a bug that we need to fix in all release versions. There's a correct way of solving it - using packet counters and forcing a re-invite and a key reset beforehand or a quick and dirty where we accept all lifetimes above a treshold, like 2^20 and assume no calls will be that long or that if they are, the other end will start a key reset.</div><div style="font-size: 12px; "><br></div>
</div>
My questions to the esteemed reader of this list:</div><div>- can we agree that the current behaviour is a bug?</div><div>- which solution should we code for?</div><div><br></div><div>/O</div></body></html>