[Freeswitch-users] SRTP calls fail 'because secure media is administratively disabled'

[Brian West]

Think you mean YEAR

On Friday, March 18, 2016, <covici at ccs.covici.com> wrote:

> They changed the name to rtp_secure_media sometime in the last few
> months.
>
> Eternal21 <eternal24 at gmail.com <javascript:;>> wrote:
>
> >  I am using FreeSWITCH demo configuration to test SRTP calls.  I am
> placing
> > a call between endpoint 1000 and 1001.  The call works fine when SRTP is
> > disabled on the softphones.  The problem starts when I enable SRTP on the
> > softphones.  I also enabled SRTP on FreeSWITCH server, by including the
> > following command in vars.xml:
> >
> > <X-PRE-PROCESS cmd="set" data="sip_secure_media=true"/>
> >
> > When I try to place a call between the two endpoints now, I end up with
> one
> > side immediately hanging up.
> > Specifically, the error seems to be:
> > [WARNING] switch_core_media.c:4035 Declining invite with only SAVP
> because
> > secure media is administratively disabled
> >
> > Followed by:
> > [NOTICE] sofia.c:7742 Hangup sofia/internal/1001 at 10.10.10.112:5060
> > [CS_CONSUME_MEDIA] [INCOMPATIBLE_DESTINATION]
> >
> > Couldn't find any info on how to resolve this issue online.
> >
> > Here's the relevant log:
> > 2016-03-18 09:45:21.664536
> >
> > [INFO] switch_rtp.c:3605 Activating Audio Secure RTP SEND
> > [DEBUG] switch_core_sqldb.c:2607 Secure Type:
> > srtp:sdes:AES_CM_128_HMAC_SHA1_80
> > [INFO] switch_rtp.c:3583 Activating Audio Secure RTP RECV
> > [DEBUG] switch_core_sqldb.c:2607 Secure Type:
> > srtp:sdes:AES_CM_128_HMAC_SHA1_80
> > [NOTICE] sofia_media.c:92 Pre-Answer sofia/internal/1000 at 10.10.10.77
> <javascript:;>!
> > [DEBUG] switch_channel.c:3461 (sofia/internal/1000 at 10.10.10.77
> <javascript:;>) Callstate
> > Change RINGING -> EARLY
> > [DEBUG] mod_sofia.c:2330 Ring SDP:
> > v=0
> > o=FreeSWITCH 1458288533 1458288534 IN IP4 10.10.10.77
> > s=FreeSWITCH
> > c=IN IP4 10.10.10.77
> > t=0 0
> > m=audio 20188 RTP/SAVP 0 101
> > a=rtpmap:0 PCMU/8000
> > a=rtpmap:101 telephone-event/8000
> > a=fmtp:101 0-16
> > a=ptime:20
> > a=sendrecv
> > a=crypto:1 AES_CM_128_HMAC_SHA1_80
> > inline:uhco9Z9FgciE1vh5LQqGyNXxts0etxavW51gJKVP
> >
> > [DEBUG] switch_ivr_originate.c:1274 Raw Codec Activation Success
> L16 at 8000hz
> > 1 channel 20ms
> > [DEBUG] switch_core_codec.c:221 sofia/internal/1000 at 10.10.10.77
> <javascript:;> Push codec
> > L16:100
> > [DEBUG] switch_ivr_originate.c:1343 Play Ringback Tone
> > [%(2000,4000,440,480)]
> > [DEBUG] sofia.c:6756 Channel sofia/internal/1000 at 10.10.10.77
> <javascript:;> entering state
> > [early][183]
> > [DEBUG] switch_rtp.c:6645 Correct audio ip/port confirmed.
> > [DEBUG] sofia.c:6756 Channel sofia/internal/1001 at 10.10.10.112:5060
> entering
> > state [completing][200]
> > [DEBUG] sofia.c:6766 Remote SDP:
> > v=0
> > o=VOCAL 61793 12653 IN IP4 10.10.10.112
> > s=-
> > c=IN IP4 10.10.10.112
> > t=0 0
> > m=audio 1442 RTP/SAVP 0
> > a=rtpmap:0 PCMU/8000
> > a=crypto:1 AES_CM_128_HMAC_SHA1_80
> > inline:i7qQOAKGWeBs/QtXQcYRD3g7u2pGv/BDqrvKE6Av
> > a=ptime:20
> >
> > [DEBUG] sofia.c:6756 Channel sofia/internal/1001 at 10.10.10.112:5060
> entering
> > state [ready][200]
> > [WARNING] switch_core_media.c:4035 Declining invite with only SAVP
> because
> > secure media is administratively disabled
> > [NOTICE] sofia.c:7742 Hangup sofia/internal/1001 at 10.10.10.112:5060
> > [CS_CONSUME_MEDIA] [INCOMPATIBLE_DESTINATION]
> > [DEBUG] sofia.c:1355 Channel is already hungup.
> >
> > 2016-03-18 09:45:26.303802
> >
> > ----------------------------------------------------
> > Alternatives:
> >
> > ----------------------------------------------------
> > _________________________________________________________________________
> > Professional FreeSWITCH Consulting Services:
> > consulting at freeswitch.org <javascript:;>
> > http://www.freeswitchsolutions.com
> >
> > Official FreeSWITCH Sites
> > http://www.freeswitch.org
> > http://confluence.freeswitch.org
> > http://www.cluecon.com
> >
> > FreeSWITCH-users mailing list
> > FreeSWITCH-users at lists.freeswitch.org <javascript:;>
> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> > http://www.freeswitch.org
>
> --
> Your life is like a penny.  You're going to lose it.  The question is:
> How do
> you spend it?
>
>          John Covici
>          covici at ccs.covici.com <javascript:;>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org <javascript:;>
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org <javascript:;>
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>


-- 

*Brian West*
brian at freeswitch.org


*Twitter: @FreeSWITCH , @briankwest*
http://www.freeswitchbook.com
http://www.freeswitchcookbook.com
https://www.gofundme.com/freeswitch_ubuntu

Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit:
/r/freeswitch <https://www.reddit.com/r/freeswitch>

*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378)
*iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20160318/93aebc59/attachment.html