VoIP Mailing List Archives
Mailing list archives for the VoIP community |
|
| View previous topic :: View next topic |
| Author |
Message |
jonas.kellens at telen...
Guest
|
 Posted: Thu Oct 09, 2014 7:06 am Post subject: [asterisk-users] sdp_crypto_process: Crypto life time unsupp |
 |
|
Hello,
I have added the following to the peer definition :
ignorecryptolifetime=yes
But still Asterisk tells me :
[Oct 9 14:02:34] NOTICE[31980]: sip/sdp_crypto.c:244 sdp_crypto_process: Crypto life time unsupported: crypto:1 AES_CM_128_HMAC_SHA1_80 inline:ikW6yFvdVkSaeTuVO1isTQkdaxOjgQjMEMSGUf+K|2^32
[Oct 9 14:02:34] NOTICE[31980]: sip/sdp_crypto.c:254 sdp_crypto_process: SRTP crypto offer not acceptable
[Oct 9 14:02:34] WARNING[31980]: chan_sip.c:9129 process_sdp: Can't provide secure audio requested in SDP offer
What else do I need to configure ?
Kind regards,
Jonas. |
|
| Back to top |
|
 |
jcolp at digium.com
Guest
|
| Posted: Thu Oct 09, 2014 7:12 am Post subject: [asterisk-users] sdp_crypto_process: Crypto life time unsupp |
|
|
Jonas Kellens wrote:
Kia ora,
| Quote: | I have added the following to the peer definition :
ignorecryptolifetime=yes
|
This is not an option within the official tree so unless you've added a
patch this won't actually do anything.
| Quote: |
But still Asterisk tells me :
[Oct 9 14:02:34] NOTICE[31980]: sip/sdp_crypto.c:244 sdp_crypto_process:
Crypto life time unsupported: crypto:1 AES_CM_128_HMAC_SHA1_80
inline:ikW6yFvdVkSaeTuVO1isTQkdaxOjgQjMEMSGUf+K|2^32
[Oct 9 14:02:34] NOTICE[31980]: sip/sdp_crypto.c:254 sdp_crypto_process:
SRTP crypto offer not acceptable
[Oct 9 14:02:34] WARNING[31980]: chan_sip.c:9129 process_sdp: Can't
provide secure audio requested in SDP offer
What else do I need to configure ?
|
Currently there is no way to turn this off without modifying the source
code. I expect this to change in the future based on testing we did at
SIPit and stuff we learned.
Cheers,
--
Joshua Colp
Digium, Inc. | Senior Software Developer
445 Jan Davis Drive NW - Huntsville, AL 35806 - US
Check us out at: www.digium.com & www.asterisk.org
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users |
|
| Back to top |
|
|
jonas.kellens at telen...
Guest
|
| Posted: Thu Oct 09, 2014 7:20 am Post subject: [asterisk-users] sdp_crypto_process: Crypto life time unsupp |
|
|
On 09-10-14 14:11, Joshua Colp wrote:
| Quote: | Jonas Kellens wrote:
Kia ora,
| Quote: | I have added the following to the peer definition :
ignorecryptolifetime=yes
|
This is not an option within the official tree so unless you've added
a patch this won't actually do anything.
| Quote: |
But still Asterisk tells me :
[Oct 9 14:02:34] NOTICE[31980]: sip/sdp_crypto.c:244 sdp_crypto_process:
Crypto life time unsupported: crypto:1 AES_CM_128_HMAC_SHA1_80
inline:ikW6yFvdVkSaeTuVO1isTQkdaxOjgQjMEMSGUf+K|2^32
[Oct 9 14:02:34] NOTICE[31980]: sip/sdp_crypto.c:254 sdp_crypto_process:
SRTP crypto offer not acceptable
[Oct 9 14:02:34] WARNING[31980]: chan_sip.c:9129 process_sdp: Can't
provide secure audio requested in SDP offer
What else do I need to configure ?
|
Currently there is no way to turn this off without modifying the
source code. I expect this to change in the future based on testing we
did at SIPit and stuff we learned.
|
Hello,
any idea where and what to change in the source code then ?
I am able to change the source code, but to do minimal damage I would
like to know where to change what exactly.
Using asterisk 1.8.12
Kind regards,
Jonas.
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users |
|
| Back to top |
|
|
jcolp at digium.com
Guest
|
| Posted: Thu Oct 09, 2014 7:28 am Post subject: [asterisk-users] sdp_crypto_process: Crypto life time unsupp |
|
|
Jonas Kellens wrote:
| Quote: | Hello,
any idea where and what to change in the source code then ?
I am able to change the source code, but to do minimal damage I would
like to know where to change what exactly.
|
Yes. In channels/sip/sdp_crypto.c where the line:
ast_log(LOG_NOTICE, "Crypto life time unsupported: %s\n", attr);
is remove the:
continue;
Afterwards.
--
Joshua Colp
Digium, Inc. | Senior Software Developer
445 Jan Davis Drive NW - Huntsville, AL 35806 - US
Check us out at: www.digium.com & www.asterisk.org
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users |
|
| Back to top |
|
|
jonas.kellens at telen...
Guest
|
| Posted: Thu Oct 09, 2014 7:52 am Post subject: [asterisk-users] sdp_crypto_process: Crypto life time unsupp |
|
|
On 09-10-14 14:28, Joshua Colp wrote:
| Quote: | Jonas Kellens wrote:
| Quote: | Hello,
any idea where and what to change in the source code then ?
I am able to change the source code, but to do minimal damage I would
like to know where to change what exactly.
|
Yes. In channels/sip/sdp_crypto.c where the line:
ast_log(LOG_NOTICE, "Crypto life time unsupported: %s\n", attr);
is remove the:
continue;
Afterwards.
|
Ok this seems to work ! Thanks.
Does Asterisk now ignore the SRTP crypto offer ? Or does it just ignore the lifetime (in this case : |2^32) ?
It does not seem right that Asterisk now should ignore the whole crypto offer.
Kind regards,
Jonas. |
|
| Back to top |
|
|
jcolp at digium.com
Guest
|
| Posted: Thu Oct 09, 2014 8:19 am Post subject: [asterisk-users] sdp_crypto_process: Crypto life time unsupp |
|
|
Jonas Kellens wrote:
| Quote: |
Ok this seems to work ! Thanks.
Does Asterisk now ignore the SRTP crypto offer ? Or does it just ignore
the lifetime (in this case : |2^32) ?
It does not seem right that Asterisk now should ignore the whole crypto
offer.
|
That change makes the presence of a key lifetime a non-fatal situation.
Previously it would reject it, since we don't support key lifetimes.
--
Joshua Colp
Digium, Inc. | Senior Software Developer
445 Jan Davis Drive NW - Huntsville, AL 35806 - US
Check us out at: www.digium.com & www.asterisk.org
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users |
|
| Back to top |
|
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
Powered by phpBB © 2001, 2005 phpBB Group
|
Search
