<div dir="ltr"><div dir="ltr">Hi!<div><br></div><div>You can try to remove dtls-srtp.pem and manually create the new one:</div><div><br></div><div><div class="gmail-line gmail-number2 gmail-index1 gmail-alt1" style="margin:0px;padding:0px 1em 0px 0em;border-radius:0px;background-image:none;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><code class="gmail-jscript gmail-plain" style="font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;border-radius:0px;background:none;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit;color:rgb(0,0,0)">openssl req -</code><code class="gmail-jscript gmail-keyword" style="font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;border-radius:0px;background:none;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit;font-weight:bold;color:rgb(51,102,153)">new</code> <code class="gmail-jscript gmail-plain" style="font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;border-radius:0px;background:none;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit;color:rgb(0,0,0)">-newkey rsa:2048 -x509 -sha256 -days 900 -nodes -keyout key.pem -out cert.pem</code></div><div class="gmail-line gmail-number3 gmail-index2 gmail-alt2" style="margin:0px;padding:0px 1em 0px 0em;border-radius:0px;background-image:none;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><code class="gmail-jscript gmail-plain" style="font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;border-radius:0px;background:none;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit;color:rgb(0,0,0)">cat key.pem cert.pem > dtls-srtp.pem</code></div></div><div class="gmail-line gmail-number3 gmail-index2 gmail-alt2" style="margin:0px;padding:0px 1em 0px 0em;border-radius:0px;background-image:none;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><code class="gmail-jscript gmail-plain" style="font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;border-radius:0px;background:none;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit;color:rgb(0,0,0)"><br></code></div><div class="gmail-line gmail-number3 gmail-index2 gmail-alt2" style="margin:0px;padding:0px 1em 0px 0em;border-radius:0px;background-image:none;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><code class="gmail-jscript gmail-plain" style="font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;border-radius:0px;background:none;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit;color:rgb(0,0,0)"><br></code></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">пт, 4 груд. 2020 о 21:10 Jazmin Marina Florez Marino <<a href="mailto:Jazmin.Marino@on24.com">Jazmin.Marino@on24.com</a>> пише:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">





<div lang="ES-CO">
<div class="gmail-m_-6668178754475468763WordSection1">
<p class="MsoNormal">Hi<u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">I have a verto client trying to connect to FS using Chrome V87 but we have DTLS problems.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">The openssl version we are using on FS side is OpenSSL 1.0.2k-fips
<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">FreeSWITCH (Version 1.8.4  64bit)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:red">FS LOG - Chrome V87  FAILED CONNECTION<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.762291 [ERR] switch_rtp.c:3199 video Handshake failure 1<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.762291 [INFO] switch_rtp.c:3200 Changing video DTLS state from HANDSHAKE to FAIL<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.832295 [ERR] switch_rtp.c:3199 audio Handshake failure 1<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.832295 [INFO] switch_rtp.c:3200 Changing audio DTLS state from HANDSHAKE to FAIL<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.852295 [NOTICE] switch_rtp.c:3181 Hangup verto.rtc/3520 [CS_EXECUTE] [DESTINATION_OUT_OF_ORDER]<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.852295 [DEBUG] switch_core_media.c:7470 verto.rtc/3520 Video thread ended<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [INFO] conference_loop.c:1670 Channel leaving conference, cause: DESTINATION_OUT_OF_ORDER<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_session.c:2639 verto.rtc/3520 skip receive message [DISPLAY] (channel is hungup already)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] mod_conference.c:2467 verto.rtc/3520 skip receive message [TRANSFER] (channel is hungup already)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_media.c:12220 verto.rtc/3520 skip receive message [BITRATE_REQ] (channel is hungup already)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_codec.c:248 verto.rtc/3520 Restore previous codec opus:116.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_session.c:2886 verto.rtc/3520 skip receive message [PHONE_EVENT] (channel is hungup already)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:650 (verto.rtc/3520) State EXECUTE going to sleep<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:584 (verto.rtc/3520) Running State Change CS_HANGUP (Cur 1 Tot 3)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:847 (verto.rtc/3520) Callstate Change ACTIVE -> HANGUP<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:849 (verto.rtc/3520) State HANGUP<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:60 verto.rtc/3520 Standard HANGUP, cause: DESTINATION_OUT_OF_ORDER<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:849 (verto.rtc/3520) State HANGUP going to sleep<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">The weird thing is the connection works ok when the version of chrome is V86. Some weeks ago chrome was updated and we detected this issue.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:red">FS LOG - ChromeV86 CONNECTION OK<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.622294 [INFO] switch_rtp.c:3206 Changing video DTLS state from HANDSHAKE to SETUP<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.672317 [INFO] switch_rtp.c:3113 video Fingerprint Verified.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.672317 [INFO] switch_rtp.c:4104 Activating video Secure RTP SEND<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.672317 [INFO] switch_rtp.c:4082 Activating video Secure RTP RECV<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.672317 [DEBUG] switch_core_sqldb.c:2617 Secure Type: srtp:dtls:AES_CM_128_HMAC_SHA1_80<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.672317 [INFO] switch_rtp.c:3155 Changing video DTLS state from SETUP to READY<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.672317 [DEBUG] switch_rtp.c:1890 rtcp_stats_init: video ssrc[2719546543] base_seq[1999]<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.672317 [DEBUG] switch_core_sqldb.c:2617 Secure Type: srtp:dtls:AES_CM_128_HMAC_SHA1_80<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.702298 [INFO] switch_rtp.c:3206 Changing audio DTLS state from HANDSHAKE to SETUP<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.702298 [INFO] switch_rtp.c:3113 audio Fingerprint Verified.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.702298 [INFO] switch_rtp.c:4104 Activating audio Secure RTP SEND<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.702298 [INFO] switch_rtp.c:4082 Activating audio Secure RTP RECV<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.702298 [DEBUG] switch_core_sqldb.c:2617 Secure Type: srtp:dtls:AES_CM_128_HMAC_SHA1_80<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.702298 [INFO] switch_rtp.c:3155 Changing audio DTLS state from SETUP to READY<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.702298 [DEBUG] switch_core_sqldb.c:2617 Secure Type: srtp:dtls:AES_CM_128_HMAC_SHA1_80<u></u><u></u></span></p>
</div>
</div>

_________________________________________________________________________<br>
<br>
The FreeSWITCH project is sponsored by SignalWire <a href="https://signalwire.com" rel="noreferrer" target="_blank">https://signalwire.com</a><br>
Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services.<br>
Build your next product on our scalable cloud platform.<br>
<br>
Join our online community to chat in real time <a href="https://signalwire.community" rel="noreferrer" target="_blank">https://signalwire.community</a><br>
<br>
Professional FreeSWITCH Services<br>
<a href="mailto:sales@freeswitch.com" target="_blank">sales@freeswitch.com</a><br>
<a href="https://freeswitch.com" rel="noreferrer" target="_blank">https://freeswitch.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="https://freeswitch.com/oss" rel="noreferrer" target="_blank">https://freeswitch.com/oss</a><br>
<a href="https://freeswitch.org/confluence" rel="noreferrer" target="_blank">https://freeswitch.org/confluence</a><br>
<a href="https://cluecon.com" rel="noreferrer" target="_blank">https://cluecon.com</a><br>
<br>
FreeSWITCH-dev mailing list<br>
<a href="mailto:FreeSWITCH-dev@lists.freeswitch.org" target="_blank">FreeSWITCH-dev@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-dev" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-dev</a><br>
<a href="https://freeswitch.com" rel="noreferrer" target="_blank">https://freeswitch.com</a></blockquote></div><br clear="all"><div><br></div><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"></div></div></div></div></div></div></div></div></div></div></div>