Try latest freeswitch master code. I think the fix is in for this issue there.
On Aug 20, 2018, at 10:11 PM, Rajil Saraswat <rajil.s@gmail.com> wrote:
Hello,
All my outbound calls made by Zoiper5 get dropped. I contacted Zoiper support and they mentioned that it is a FreeSwitch problem. How can this be fixed?
Here is what Zoiper support said,
There was a known issue with FreeSwitch related to the naming of the security suites sent from them, they were not completely matched to RFC 6188.
On the left, the names are the standard ones - used in the RFC6188, and the right ones are the names used by FreeSwitch:
AES_256_CM_HMAC_SHA1_80 == AES_CM_256_HMAC_SHA1_80 AES_256_CM_HMAC_SHA1_32 == AES_CM_256_HMAC_SHA1_32 AES_192_CM_HMAC_SHA1_80 == AES_CM_192_HMAC_SHA1_80 AES_192_CM_HMAC_SHA1_32 == AES_CM_192_HMAC_SHA1_32
In order to be robust we added the so called FS names but they are not different suits just one suite has two names (as the negotiation process requires a complete match of the names).
In the previous Zoiper5 versions (e.g. 5.2.14) the additional FS names were not present. The offered by Zoiper suites were only the described in the RFC 6188 and 4568 in that priority order:
AES_256_CM_HMAC_SHA1_80 AES_256_CM_HMAC_SHA1_32 AES_192_CM_HMAC_SHA1_80 AES_192_CM_HMAC_SHA1_32 AES_CM_128_HMAC_SHA1_80 AES_CM_128_HMAC_SHA1_32
After the addition of FS names (5.2.16 and newer) we now offer everything in the following order:
AES_256_CM_HMAC_SHA1_80 // RFC 6188 AES_256_CM_HMAC_SHA1_32 // RFC 6188 AES_CM_256_HMAC_SHA1_80 // FS interpretation AES_CM_256_HMAC_SHA1_32 // FS interpretation AES_192_CM_HMAC_SHA1_80 // RFC 6188 AES_192_CM_HMAC_SHA1_32 // RFC 6188 AES_CM_192_HMAC_SHA1_80 // FS interpretation AES_CM_192_HMAC_SHA1_32 // FS interpretation AES_CM_128_HMAC_SHA1_80 // RFC 4568 AES_CM_128_HMAC_SHA1_32 // RFC 4568
It seems that FS also sends bad checksums with the AES_256_CM_HMAC_SHA1_80 and AES_CM_192_HMAC_SHA1_80, the only working suite is AES_CM_128_HMAC_SHA1.
There is a workaround you can use until and if this issue is fixed by FS. You may try to rearrange the priority on your FS (put 128 on top instead of 256, or completely disable the non-working suites). Or you can simply keep using older version of Zoiper with 128 bit.
Thanks _________________________________________________________________________ Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com