<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"><meta name="Generator" content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 5 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang="EN-US" link="blue" vlink="purple"><div class="WordSection1"><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">I was going by examples from FreeSWITCH 1.2 book (didn’t see a later release on Amazon). </span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">The following wiki states outdated values as well (and happens to be the first link when googling for freeswitch SRTP):</span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><a href="https://wiki.freeswitch.org/wiki/SRTP">https://wiki.freeswitch.org/wiki/SRTP</a></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"> </span></p><div><div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <a href="mailto:freeswitch-users-bounces@lists.freeswitch.org">freeswitch-users-bounces@lists.freeswitch.org</a> [mailto:<a href="mailto:freeswitch-users-bounces@lists.freeswitch.org">freeswitch-users-bounces@lists.freeswitch.org</a>] <b>On Behalf Of </b>Michael Jerris<br><b>Sent:</b> Friday, March 18, 2016 2:12 PM<br><b>To:</b> FreeSWITCH Users Help <<a href="mailto:freeswitch-users@lists.freeswitch.org">freeswitch-users@lists.freeswitch.org</a>><br><b>Subject:</b> Re: [Freeswitch-users] SRTP calls fail 'because secure media is administratively disabled'</span></p></div></div><p class="MsoNormal"> </p><p class="MsoNormal">That change was made between 1.2 and 1.4, its been multiple years now, not recent.</p><div><p class="MsoNormal"> </p><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><p class="MsoNormal">On Mar 18, 2016, at 11:04 AM, <a href="mailto:covici@ccs.covici.com">covici@ccs.covici.com</a> wrote:</p></div><p class="MsoNormal"> </p><div><p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">They changed the name to rtp_secure_media sometime in the last few<br>months.<br><br>Eternal21 <</span><a href="mailto:eternal24@gmail.com"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">eternal24@gmail.com</span></a><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">> wrote:<br><br style="text-align:start;word-spacing:0px"><br></span></p><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">I am using FreeSWITCH demo configuration to test SRTP calls. I am placing<br>a call between endpoint 1000 and 1001. The call works fine when SRTP is<br>disabled on the softphones. The problem starts when I enable SRTP on the<br>softphones. I also enabled SRTP on FreeSWITCH server, by including the<br>following command in vars.xml:<br><br><X-PRE-PROCESS cmd="set" data="sip_secure_media=true"/><br><br>When I try to place a call between the two endpoints now, I end up with one<br>side immediately hanging up.<br>Specifically, the error seems to be:<br>[WARNING] switch_core_media.c:4035 Declining invite with only SAVP because<br>secure media is administratively disabled<br><br>Followed by:<br>[NOTICE] sofia.c:7742 Hangup <a href="mailto:sofia/internal/1001@10.10.10.112">sofia/internal/1001@10.10.10.112</a>:5060<br>[CS_CONSUME_MEDIA] [INCOMPATIBLE_DESTINATION]<br><br>Couldn't find any info on how to resolve this issue online.<br><br>Here's the relevant log:<br>2016-03-18 09:45:21.664536<br><br>[INFO] switch_rtp.c:3605 Activating Audio Secure RTP SEND<br>[DEBUG] switch_core_sqldb.c:2607 Secure Type:<br>srtp:sdes:AES_CM_128_HMAC_SHA1_80<br>[INFO] switch_rtp.c:3583 Activating Audio Secure RTP RECV<br>[DEBUG] switch_core_sqldb.c:2607 Secure Type:<br>srtp:sdes:AES_CM_128_HMAC_SHA1_80<br>[NOTICE] sofia_media.c:92 Pre-Answer <a href="mailto:sofia/internal/1000@10.10.10.77">sofia/internal/1000@10.10.10.77</a>!<br>[DEBUG] switch_channel.c:3461 (<a href="mailto:sofia/internal/1000@10.10.10.77">sofia/internal/1000@10.10.10.77</a>) Callstate<br>Change RINGING -> EARLY<br>[DEBUG] mod_sofia.c:2330 Ring SDP:<br>v=0<br>o=FreeSWITCH 1458288533 1458288534 IN IP4 10.10.10.77<br>s=FreeSWITCH<br>c=IN IP4 10.10.10.77<br>t=0 0<br>m=audio 20188 RTP/SAVP 0 101<br>a=rtpmap:0 PCMU/8000<br>a=rtpmap:101 telephone-event/8000<br>a=fmtp:101 0-16<br>a=ptime:20<br>a=sendrecv<br>a=crypto:1 AES_CM_128_HMAC_SHA1_80<br>inline:uhco9Z9FgciE1vh5LQqGyNXxts0etxavW51gJKVP<br><br>[DEBUG] switch_ivr_originate.c:1274 Raw Codec Activation Success L16@8000hz<br>1 channel 20ms<br>[DEBUG] switch_core_codec.c:221 <a href="mailto:sofia/internal/1000@10.10.10.77">sofia/internal/1000@10.10.10.77</a> Push codec<br>L16:100<br>[DEBUG] switch_ivr_originate.c:1343 Play Ringback Tone<br>[%(2000,4000,440,480)]<br>[DEBUG] sofia.c:6756 Channel <a href="mailto:sofia/internal/1000@10.10.10.77">sofia/internal/1000@10.10.10.77</a> entering state<br>[early][183]<br>[DEBUG] switch_rtp.c:6645 Correct audio ip/port confirmed.<br>[DEBUG] sofia.c:6756 Channel <a href="mailto:sofia/internal/1001@10.10.10.112">sofia/internal/1001@10.10.10.112</a>:5060 entering<br>state [completing][200]<br>[DEBUG] sofia.c:6766 Remote SDP:<br>v=0<br>o=VOCAL 61793 12653 IN IP4 10.10.10.112<br>s=-<br>c=IN IP4 10.10.10.112<br>t=0 0<br>m=audio 1442 RTP/SAVP 0<br>a=rtpmap:0 PCMU/8000<br>a=crypto:1 AES_CM_128_HMAC_SHA1_80<br>inline:i7qQOAKGWeBs/QtXQcYRD3g7u2pGv/BDqrvKE6Av<br>a=ptime:20<br><br>[DEBUG] sofia.c:6756 Channel <a href="mailto:sofia/internal/1001@10.10.10.112">sofia/internal/1001@10.10.10.112</a>:5060 entering<br>state [ready][200]<br>[WARNING] switch_core_media.c:4035 Declining invite with only SAVP because<br>secure media is administratively disabled<br>[NOTICE] sofia.c:7742 Hangup <a href="mailto:sofia/internal/1001@10.10.10.112">sofia/internal/1001@10.10.10.112</a>:5060<br>[CS_CONSUME_MEDIA] [INCOMPATIBLE_DESTINATION]<br>[DEBUG] sofia.c:1355 Channel is already hungup.<br><br>2016-03-18 09:45:26.303802<br><br>----------------------------------------------------<br>Alternatives:<br><br>----------------------------------------------------<br>_________________________________________________________________________<br>Professional FreeSWITCH Consulting Services:<span class="apple-converted-space"> </span><br><a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br><a href="http://www.freeswitchsolutions.com/">http://www.freeswitchsolutions.com</a><br><br>Official FreeSWITCH Sites<br><a href="http://www.freeswitch.org/">http://www.freeswitch.org</a><br><a href="http://confluence.freeswitch.org/">http://confluence.freeswitch.org</a><br><a href="http://www.cluecon.com/">http://www.cluecon.com</a><br><br>FreeSWITCH-users mailing list<br><a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>UNSUBSCRIBE:http://<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users">lists.freeswitch.org/mailman/options/freeswitch-users</a><br><a href="http://www.freeswitch.org/">http://www.freeswitch.org</a></span></p></blockquote><p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif"><br>--<span class="apple-converted-space"> </span><br>Your life is like a penny. You're going to lose it. The question is:<br>How do<br>you spend it?<br><br> John Covici<br> </span><a href="mailto:covici@ccs.covici.com"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">covici@ccs.covici.com</span></a><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif"><br><br>_________________________________________________________________________<br>Professional FreeSWITCH Consulting Services:<span class="apple-converted-space"> </span><br></span><a href="mailto:consulting@freeswitch.org"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">consulting@freeswitch.org</span></a><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif"><br></span><a href="http://www.freeswitchsolutions.com/"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">http://www.freeswitchsolutions.com</span></a><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif"><br><br>Official FreeSWITCH Sites<br></span><a href="http://www.freeswitch.org/"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">http://www.freeswitch.org</span></a><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif"><br></span><a href="http://confluence.freeswitch.org/"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">http://confluence.freeswitch.org</span></a><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif"><br></span><a href="http://www.cluecon.com/"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">http://www.cluecon.com</span></a><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif"><br><br>FreeSWITCH-users mailing list<br></span><a href="mailto:FreeSWITCH-users@lists.freeswitch.org"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">FreeSWITCH-users@lists.freeswitch.org</span></a><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif"><br></span><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</span></a><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif"><br>UNSUBSCRIBE:http://</span><a href="http://lists.freeswitch.org/mailman/options/freeswitch-users"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">lists.freeswitch.org/mailman/options/freeswitch-users</span></a><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif"><br></span><a href="http://www.freeswitch.org/"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">http://www.freeswitch.org</span></a></p></div></blockquote></div><p class="MsoNormal"> </p></div></div></body></html>