<div dir="ltr">If you can build Freeswitch, change the code in switch_rtp.c as below,<div><br></div><div>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Menlo;background-color:rgb(254,244,139)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span>#if OPENSSL_VERSION_NUMBER >= 0x10100000</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Menlo;background-color:rgb(254,244,139)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span>dtls->ssl_ctx = SSL_CTX_new((type & DTLS_TYPE_SERVER) ? DTLS_server_method() : DTLS_client_method());</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Menlo;background-color:rgb(254,244,139)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span>#else</span></p>
<p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Menlo;color:rgb(172,31,22);background-color:rgb(254,244,139)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">- <span class="gmail-Apple-converted-space"> </span>dtls->ssl_ctx = SSL_CTX_new((type & DTLS_TYPE_SERVER) ? DTLSv1_server_method() : DTLSv1_client_method());</span></p>
<p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Menlo;color:rgb(38,170,22);background-color:rgb(254,244,139)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">+</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> <span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">switch_log_printf(SWITCH_CHANNEL_SESSION_LOG(rtp_session->session), SWITCH_LOG_INFO,</span></p>
<p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Menlo;color:rgb(38,170,22);background-color:rgb(254,244,139)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">+</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> <span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"Negotiated DTLS1.2 between remote-host:%s, local-host:%s\n", rtp_session->remote_host_str, rtp_session->local_host_str);</span></p>
<p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Menlo;color:rgb(38,170,22);background-color:rgb(254,244,139)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">+</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> <span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">dtls->ssl_ctx = SSL_CTX_new((type & DTLS_TYPE_SERVER) ? DTLSv1_2_server_method() : DTLSv1_2_client_method());</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Menlo;background-color:rgb(254,244,139)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-Apple-converted-space"> </span>#endif</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Menlo;background-color:rgb(254,244,139)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><br></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Menlo;background-color:rgb(254,244,139)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">/Kaiduan</span></p></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Dec 4, 2020 at 1:09 PM Jazmin Marina Florez Marino <<a href="mailto:Jazmin.Marino@on24.com">Jazmin.Marino@on24.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="ES-CO">
<div class="gmail-m_-6759797499119088258WordSection1">
<p class="MsoNormal">Hi<u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">I have a verto client trying to connect to FS using Chrome V87 but we have DTLS problems.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">The openssl version we are using on FS side is OpenSSL 1.0.2k-fips
<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">FreeSWITCH (Version 1.8.4 64bit)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:red">FS LOG - Chrome V87 FAILED CONNECTION<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.762291 [ERR] switch_rtp.c:3199 video Handshake failure 1<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.762291 [INFO] switch_rtp.c:3200 Changing video DTLS state from HANDSHAKE to FAIL<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.832295 [ERR] switch_rtp.c:3199 audio Handshake failure 1<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.832295 [INFO] switch_rtp.c:3200 Changing audio DTLS state from HANDSHAKE to FAIL<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.852295 [NOTICE] switch_rtp.c:3181 Hangup verto.rtc/3520 [CS_EXECUTE] [DESTINATION_OUT_OF_ORDER]<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.852295 [DEBUG] switch_core_media.c:7470 verto.rtc/3520 Video thread ended<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [INFO] conference_loop.c:1670 Channel leaving conference, cause: DESTINATION_OUT_OF_ORDER<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_session.c:2639 verto.rtc/3520 skip receive message [DISPLAY] (channel is hungup already)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] mod_conference.c:2467 verto.rtc/3520 skip receive message [TRANSFER] (channel is hungup already)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_media.c:12220 verto.rtc/3520 skip receive message [BITRATE_REQ] (channel is hungup already)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_codec.c:248 verto.rtc/3520 Restore previous codec opus:116.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_session.c:2886 verto.rtc/3520 skip receive message [PHONE_EVENT] (channel is hungup already)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:650 (verto.rtc/3520) State EXECUTE going to sleep<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:584 (verto.rtc/3520) Running State Change CS_HANGUP (Cur 1 Tot 3)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:847 (verto.rtc/3520) Callstate Change ACTIVE -> HANGUP<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:849 (verto.rtc/3520) State HANGUP<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:60 verto.rtc/3520 Standard HANGUP, cause: DESTINATION_OUT_OF_ORDER<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:849 (verto.rtc/3520) State HANGUP going to sleep<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">The weird thing is the connection works ok when the version of chrome is V86. Some weeks ago chrome was updated and we detected this issue.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:red">FS LOG - ChromeV86 CONNECTION OK<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.622294 [INFO] switch_rtp.c:3206 Changing video DTLS state from HANDSHAKE to SETUP<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.672317 [INFO] switch_rtp.c:3113 video Fingerprint Verified.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.672317 [INFO] switch_rtp.c:4104 Activating video Secure RTP SEND<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.672317 [INFO] switch_rtp.c:4082 Activating video Secure RTP RECV<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.672317 [DEBUG] switch_core_sqldb.c:2617 Secure Type: srtp:dtls:AES_CM_128_HMAC_SHA1_80<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.672317 [INFO] switch_rtp.c:3155 Changing video DTLS state from SETUP to READY<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.672317 [DEBUG] switch_rtp.c:1890 rtcp_stats_init: video ssrc[2719546543] base_seq[1999]<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.672317 [DEBUG] switch_core_sqldb.c:2617 Secure Type: srtp:dtls:AES_CM_128_HMAC_SHA1_80<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.702298 [INFO] switch_rtp.c:3206 Changing audio DTLS state from HANDSHAKE to SETUP<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.702298 [INFO] switch_rtp.c:3113 audio Fingerprint Verified.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.702298 [INFO] switch_rtp.c:4104 Activating audio Secure RTP SEND<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.702298 [INFO] switch_rtp.c:4082 Activating audio Secure RTP RECV<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.702298 [DEBUG] switch_core_sqldb.c:2617 Secure Type: srtp:dtls:AES_CM_128_HMAC_SHA1_80<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.702298 [INFO] switch_rtp.c:3155 Changing audio DTLS state from SETUP to READY<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2020-12-03 11:19:19.702298 [DEBUG] switch_core_sqldb.c:2617 Secure Type: srtp:dtls:AES_CM_128_HMAC_SHA1_80<u></u><u></u></span></p>
</div>
</div>
_________________________________________________________________________<br>
<br>
The FreeSWITCH project is sponsored by SignalWire <a href="https://signalwire.com" rel="noreferrer" target="_blank">https://signalwire.com</a><br>
Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services.<br>
Build your next product on our scalable cloud platform.<br>
<br>
Join our online community to chat in real time <a href="https://signalwire.community" rel="noreferrer" target="_blank">https://signalwire.community</a><br>
<br>
Professional FreeSWITCH Services<br>
<a href="mailto:sales@freeswitch.com" target="_blank">sales@freeswitch.com</a><br>
<a href="https://freeswitch.com" rel="noreferrer" target="_blank">https://freeswitch.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="https://freeswitch.com/oss" rel="noreferrer" target="_blank">https://freeswitch.com/oss</a><br>
<a href="https://freeswitch.org/confluence" rel="noreferrer" target="_blank">https://freeswitch.org/confluence</a><br>
<a href="https://cluecon.com" rel="noreferrer" target="_blank">https://cluecon.com</a><br>
<br>
FreeSWITCH-dev mailing list<br>
<a href="mailto:FreeSWITCH-dev@lists.freeswitch.org" target="_blank">FreeSWITCH-dev@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-dev" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-dev</a><br>
<a href="https://freeswitch.com" rel="noreferrer" target="_blank">https://freeswitch.com</a></blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr">Founder of Goodstartsoft<div><a href="https://www.goodstartsoft.com" target="_blank">https://www.goodstartsoft.com</a></div></div></div>