Hi Jaan, This happens because Chrome drops support for DTLS 1.0 with March 2020. FreeSWITCH supports new version of DTLS required by Chrome. To use it, you must: 1. Run recent version of openssl (1.1.1 or above will be definitely OK) 2. Run recent version of FreeSWITCH (> 1.8 is OK, not sure if this change has been backported to earlier versions - could be) By default new DTLS v1.2 is used on recent FreeSWITCH, though for backward compatibility there is a switch variable "legacyDTLS" introduced. This can be set to true to run version 1.0. kind regards, Piotr Gregor Software Engineer M: (+44) 07483 866 525 www: dataandsignal.com On Mon, Mar 2, 2020 at 1:49 PM Jaan Kaja <Jaan.Kaja@enghouse.com> wrote:
We had the same problem with FS 1.10.1 on Windows. I found a compiler switch: HAVE_OPENSSL_DTLSv1_2_method. Adding this to the FreeSwitchCore project file for Visual Studio, and recompiling, fixed the problem. It tells FS to use DTLS v1.2.
I have never compiled FS on Linux, but I guess there are Makefiles that can be modified, possibly after some configure procedure.
Best regards,
Jaan
*From:* FreeSWITCH-users <freeswitch-users-bounces@lists.freeswitch.org> *On Behalf Of *MARAND, Remi *Sent:* den 28 februari 2020 13:32 *To:* freeswitch-users@lists.freeswitch.org *Subject:* [Freeswitch-users] Help for Google Chrome version 81 & FS.
We use Freeswitch in the case of a SIP to WebRTC application and it is a solid and reliable solution.
When we test calls with the sipjs.js library (V0.15.10) and Freeswitch (FreeSWITCH Version 1.8.5-6-31281a0bf1~64bit (-6-31281a0bf1 64bit) + Debian 9, with the beta version of Chrome, Version 81.0.4044.17 (Official Build) beta (64-bit), we observe a notification on the javascript console : “[Deprecation] Your partner is negotiating an obsolete (D)TLS version. Support for this will be removed in M81, around March 2020. Please check with your partner to have this fixed. »
The Wireshark trace shows that the DTLS-SRTP exchange is done with DTLSv1.0.
What would be the version update to do on the Freeswitch side (or Debian) to avoid this deprecation ?
Is there a configuration to do in our current version?
Best regards.
*Rémi Marand*
Odigo France | Issy les Moulineaux
Tel.: +33 1 46 84 12 77 / +33 6 87 72 53 25.
This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message. _________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com