Thank you very much it works. It save me from a very difficult and speed server migration (ubuntu 16.04 -> ubuntu 20.04). Cédric Clavier Chef de projet R&D 06 25 00 45 88 4 rue André Marie Ampère - 22300 Lannion <https://saooti.com/> <https://twitter.com/saooti> <https://www.linkedin.com/company/291543/admin/>

Le 8 déc. 2020 à 13:00, freeswitch-dev-request@lists.freeswitch.org a écrit :

Send FreeSWITCH-dev mailing list submissions to freeswitch-dev@lists.freeswitch.org

To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev or, via email, send a message with subject or body 'help' to freeswitch-dev-request@lists.freeswitch.org

You can reach the person managing the list at freeswitch-dev-owner@lists.freeswitch.org

When replying, please edit your Subject line so it is more specific than "Re: Contents of FreeSWITCH-dev digest..." Today's Topics:

1. Re: HELP DTLS HANDSHAKE to FAIL chromeV87 (Kaiduan Xie)

De: Kaiduan Xie <kaiduanx@gmail.com> Objet: Rép. : [Freeswitch-dev] HELP DTLS HANDSHAKE to FAIL chromeV87 Date: 4 décembre 2020 à 21:00:39 UTC+1 À: freeswitch-dev@lists.freeswitch.org Cc: "freeswitch-users-request@lists.freeswitch.org" <freeswitch-users-request@lists.freeswitch.org>, FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org>

If you can build Freeswitch, change the code in switch_rtp.c as below,

#if OPENSSL_VERSION_NUMBER >= 0x10100000 dtls->ssl_ctx = SSL_CTX_new((type & DTLS_TYPE_SERVER) ? DTLS_server_method() : DTLS_client_method()); #else - dtls->ssl_ctx = SSL_CTX_new((type & DTLS_TYPE_SERVER) ? DTLSv1_server_method() : DTLSv1_client_method()); + switch_log_printf(SWITCH_CHANNEL_SESSION_LOG(rtp_session->session), SWITCH_LOG_INFO, + "Negotiated DTLS1.2 between remote-host:%s, local-host:%s\n", rtp_session->remote_host_str, rtp_session->local_host_str); + dtls->ssl_ctx = SSL_CTX_new((type & DTLS_TYPE_SERVER) ? DTLSv1_2_server_method() : DTLSv1_2_client_method()); #endif

/Kaiduan

On Fri, Dec 4, 2020 at 1:09 PM Jazmin Marina Florez Marino <Jazmin.Marino@on24.com <mailto:Jazmin.Marino@on24.com>> wrote: Hi

I have a verto client trying to connect to FS using Chrome V87 but we have DTLS problems.

The openssl version we are using on FS side is OpenSSL 1.0.2k-fips

FreeSWITCH (Version 1.8.4 64bit)

FS LOG - Chrome V87 FAILED CONNECTION

2020-12-03 11:23:06.762291 [ERR] switch_rtp.c:3199 video Handshake failure 1

2020-12-03 11:23:06.762291 [INFO] switch_rtp.c:3200 Changing video DTLS state from HANDSHAKE to FAIL

2020-12-03 11:23:06.832295 [ERR] switch_rtp.c:3199 audio Handshake failure 1

2020-12-03 11:23:06.832295 [INFO] switch_rtp.c:3200 Changing audio DTLS state from HANDSHAKE to FAIL

2020-12-03 11:23:06.852295 [NOTICE] switch_rtp.c:3181 Hangup verto.rtc/3520 [CS_EXECUTE] [DESTINATION_OUT_OF_ORDER]

2020-12-03 11:23:06.852295 [DEBUG] switch_core_media.c:7470 verto.rtc/3520 Video thread ended

2020-12-03 11:23:06.872305 [INFO] conference_loop.c:1670 Channel leaving conference, cause: DESTINATION_OUT_OF_ORDER

2020-12-03 11:23:06.872305 [DEBUG] switch_core_session.c:2639 verto.rtc/3520 skip receive message [DISPLAY] (channel is hungup already)

2020-12-03 11:23:06.872305 [DEBUG] mod_conference.c:2467 verto.rtc/3520 skip receive message [TRANSFER] (channel is hungup already)

2020-12-03 11:23:06.872305 [DEBUG] switch_core_media.c:12220 verto.rtc/3520 skip receive message [BITRATE_REQ] (channel is hungup already)

2020-12-03 11:23:06.872305 [DEBUG] switch_core_codec.c:248 verto.rtc/3520 Restore previous codec opus:116.

2020-12-03 11:23:06.872305 [DEBUG] switch_core_session.c:2886 verto.rtc/3520 skip receive message [PHONE_EVENT] (channel is hungup already)

2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:650 (verto.rtc/3520) State EXECUTE going to sleep

2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:584 (verto.rtc/3520) Running State Change CS_HANGUP (Cur 1 Tot 3)

2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:847 (verto.rtc/3520) Callstate Change ACTIVE -> HANGUP

2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:849 (verto.rtc/3520) State HANGUP

2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:60 verto.rtc/3520 Standard HANGUP, cause: DESTINATION_OUT_OF_ORDER

2020-12-03 11:23:06.872305 [DEBUG] switch_core_state_machine.c:849 (verto.rtc/3520) State HANGUP going to sleep

The weird thing is the connection works ok when the version of chrome is V86. Some weeks ago chrome was updated and we detected this issue.

FS LOG - ChromeV86 CONNECTION OK

2020-12-03 11:19:19.622294 [INFO] switch_rtp.c:3206 Changing video DTLS state from HANDSHAKE to SETUP

2020-12-03 11:19:19.672317 [INFO] switch_rtp.c:3113 video Fingerprint Verified.

2020-12-03 11:19:19.672317 [INFO] switch_rtp.c:4104 Activating video Secure RTP SEND

2020-12-03 11:19:19.672317 [INFO] switch_rtp.c:4082 Activating video Secure RTP RECV

2020-12-03 11:19:19.672317 [DEBUG] switch_core_sqldb.c:2617 Secure Type: srtp:dtls:AES_CM_128_HMAC_SHA1_80

2020-12-03 11:19:19.672317 [INFO] switch_rtp.c:3155 Changing video DTLS state from SETUP to READY

2020-12-03 11:19:19.672317 [DEBUG] switch_rtp.c:1890 rtcp_stats_init: video ssrc[2719546543] base_seq[1999]

2020-12-03 11:19:19.672317 [DEBUG] switch_core_sqldb.c:2617 Secure Type: srtp:dtls:AES_CM_128_HMAC_SHA1_80

2020-12-03 11:19:19.702298 [INFO] switch_rtp.c:3206 Changing audio DTLS state from HANDSHAKE to SETUP

2020-12-03 11:19:19.702298 [INFO] switch_rtp.c:3113 audio Fingerprint Verified.

2020-12-03 11:19:19.702298 [INFO] switch_rtp.c:4104 Activating audio Secure RTP SEND

2020-12-03 11:19:19.702298 [INFO] switch_rtp.c:4082 Activating audio Secure RTP RECV

2020-12-03 11:19:19.702298 [DEBUG] switch_core_sqldb.c:2617 Secure Type: srtp:dtls:AES_CM_128_HMAC_SHA1_80

2020-12-03 11:19:19.702298 [INFO] switch_rtp.c:3155 Changing audio DTLS state from SETUP to READY

2020-12-03 11:19:19.702298 [DEBUG] switch_core_sqldb.c:2617 Secure Type: srtp:dtls:AES_CM_128_HMAC_SHA1_80

_________________________________________________________________________

The FreeSWITCH project is sponsored by SignalWire https://signalwire.com <https://signalwire.com/> Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.

Join our online community to chat in real time https://signalwire.community <https://signalwire.community/>

Professional FreeSWITCH Services sales@freeswitch.com <mailto:sales@freeswitch.com> https://freeswitch.com <https://freeswitch.com/>

Official FreeSWITCH Sites https://freeswitch.com/oss <https://freeswitch.com/oss> https://freeswitch.org/confluence <https://freeswitch.org/confluence> https://cluecon.com <https://cluecon.com/>

FreeSWITCH-dev mailing list FreeSWITCH-dev@lists.freeswitch.org <mailto:FreeSWITCH-dev@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev <http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-dev <http://lists.freeswitch.org/mailman/options/freeswitch-dev> https://freeswitch.com <https://freeswitch.com/>

-- Founder of Goodstartsoft https://www.goodstartsoft.com <https://www.goodstartsoft.com/>

_________________________________________________________________________

The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.

Join our online community to chat in real time https://signalwire.community

Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com

Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com

FreeSWITCH-dev mailing list FreeSWITCH-dev@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-dev https://freeswitch.com