Hi All,

I am running: FreeSWITCH Version 1.10.3-release-15-129de34d84~64bit (-release-15-129de34d84 64bit) on Debian GNU/Linux 10 (buster)

I am bridging an incoming call to a destination over SIP TLS, using SRTP and ICE-lite. rtcp_mux is disabled. 

I have to use ‘mandatory’ in the export below (before the bridge), as this specific destination fails the call if the SDP includes the unencrypted optioN (i.e. m=audio 2354 RTP/AVP 18 8 98)
<action application="export" data=“rtp_secure_media=mandatory:AES_CM_128_HMAC_SHA1_32"/>

I am having a problem in that FS drops the call as soon as the destination answers.

In the debug traces I can see that, although Secure RTP is indeed being negotiated (Activating audio Secure RTP RECV) FS somehow thinks otherwise (switch_core_media.c:5665 Crypto not negotiated but required.)

2020-06-26 18:20:40.208635 [INFO] switch_core_media.c:8843 Activating Audio ICE
2020-06-26 18:20:40.208635 [NOTICE] switch_rtp.c:4915 Activating RTP audio ICE: ZyVg:nzPxIzWUEUYj6GjG 11.22.33.44:50004
2020-06-26 18:20:40.208635 [DEBUG] switch_core_media.c:8975 sofia/teams/27101234567 Set 2833 dtmf send payload to 101
2020-06-26 18:20:40.208635 [DEBUG] switch_core_media.c:8982 sofia/teams/27101234567 Set 2833 dtmf receive payload to 101
2020-06-26 18:20:40.208635 [DEBUG] switch_core_media.c:9005 sofia/teams/27101234567 Set rtp dtmf delay to 40
2020-06-26 18:20:40.208635 [DEBUG] switch_core_media.c:1501 LIFETIME found in |2^31, base 2 exp 31
2020-06-26 18:20:40.208635 [NOTICE] switch_core_media.c:1524 Skipping MKI due to empty index
2020-06-26 18:20:40.208635 [INFO] switch_rtp.c:4217 Activating audio Secure RTP SEND
2020-06-26 18:20:40.208635 [INFO] switch_rtp.c:4195 Activating audio Secure RTP RECV
2020-06-26 18:20:40.208635 [DEBUG] switch_core_sqldb.c:2836 Secure Type: srtp:sdes:AES_CM_128_HMAC_SHA1_32
2020-06-26 18:20:40.208635 [DEBUG] switch_core_sqldb.c:2836 Secure Type: srtp:sdes:AES_CM_128_HMAC_SHA1_32
2020-06-26 18:20:40.208635 [NOTICE] sofia.c:8503 Channel [sofia/teams/27101234567] has been answered
2020-06-26 18:20:40.208635 [DEBUG] switch_channel.c:3865 (sofia/teams/27101234567) Callstate Change RINGING -> ACTIVE
2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5592 Audio Codec Compare [G729:18:8000:20:8000:1]/[opus:116:48000:20:0:1]
2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5592 Audio Codec Compare [G729:18:8000:20:8000:1]/[PCMA:8:8000:20:64000:1]
2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5592 Audio Codec Compare [G729:18:8000:20:8000:1]/[PCMU:0:8000:20:64000:1]
2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5592 Audio Codec Compare [PCMA:8:8000:20:64000:1]/[opus:116:48000:20:0:1]
2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5592 Audio Codec Compare [PCMA:8:8000:20:64000:1]/[PCMA:8:8000:20:64000:1]
2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5647 Audio Codec Compare [PCMA:8:8000:20:64000:1] ++++ is saved as a match
2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5592 Audio Codec Compare [PCMA:8:8000:20:64000:1]/[PCMU:0:8000:20:64000:1]
2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5508 Set telephone-event payload to 98@8000
2020-06-26 18:20:40.228625 [WARNING] switch_core_media.c:5665 Crypto not negotiated but required.
2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5909 sofia/vox/0831233210@10.10.1.1 Set 2833 dtmf send payload to 98 recv payload to 98
2020-06-26 18:20:40.228625 [NOTICE] switch_channel.c:3908 Hangup sofia/vox/0831233210@10.10.1.1 [CS_EXECUTE] [INCOMPATIBLE_DESTINATION]

Am I missing something here? 

Thanks

Keith