[Freeswitch-users] Problem with SRTP in HA

Francisco Carmona Ramírez franciscocarmona777 at gmail.com
Thu Jul 4 09:45:17 UTC 2019


Hi, i have some issues trying to make a HA with SRTP, i have that dialplan


        <extension name="salientes">
                <condition field="destination_number"
expression="^(\d{9})$">
                         <action application="set"
data="ringback=${es-ring}"/>
                         <action application="set"
data="transfer_rinback=$${hold_music}"/>
                         <action application="set" data="call_timeout=30" />
                         <action application="set"
data="hangup_after_bridge=true"/>
                         <action application="set"
data="continue_on_fail=true"/>
                         <action application="export"
data="rtp_secure_media=optional"/>
                         <action application="export"
data="rtp_secure_media_outbound=forbidden"/>
                         <action application="bridge"
data="sofia/gateway/providerExt/$1"/>
                         <action application="hangup"/>
                 </condition>
        </extension>

When i make a normal call in my FS1 it goes well, same when i do a normal
call in a FS2, then the problem that i find is when i do a normal call in
my FS1 (it takes AES_CM_128_HMAC_SHA1_32) and i do a "fsctl crash" in my
"fs_cli", when the FS2 recovery the call, the audio drops in both ways, and
if I use sngrep to see what is sending in the invite, i see that the crypto
is "AES_CM_NULL_AUTH", in addition in the fs_cli on FS2 y found that error

2019-07-04 10:37:38.286877 [ERR] switch_core_media.c:1554 Error! No crypto
to parse
2019-07-04 10:37:38.286877 [INFO] switch_rtp.c:4104 Activating audio Secure
RTP SEND
2019-07-04 10:37:38.286877 [DEBUG] switch_core_sqldb.c:2617 Secure Type:
srtp:sdes:AES_CM_128_HMAC_SHA1_32
2019-07-04 10:37:38.286877 [INFO] switch_rtp.c:4082 Activating audio Secure
RTP RECV
2019-07-04 10:37:38.286877 [DEBUG] switch_core_sqldb.c:2617 Secure Type:
srtp:sdes:AES_CM_128_HMAC_SHA1_32

Can someone give me some clarity about that problem? How I can solve this?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20190704/22359510/attachment.html>


More information about the FreeSWITCH-users mailing list