Hi All,

I am running: FreeSWITCH Version 1.10.3-release-15-129de34d84~64bit (-release-15-129de34d84 64bit) on Debian GNU/Linux 10 (buster)

I am bridging an incoming call to a destination over SIP TLS, using SRTP and ICE-lite. rtcp_mux is disabled.

I have to use ‘mandatory’ in the export below (before the bridge), as this specific destination fails the call if the SDP includes the unencrypted optioN (i.e. m=audio 2354 RTP/AVP 18 8 98) <action application="export" data=“rtp_secure_media=mandatory:AES_CM_128_HMAC_SHA1_32"/>

I am having a problem in that FS drops the call as soon as the destination answers.

In the debug traces I can see that, although Secure RTP is indeed being negotiated (Activating audio Secure RTP RECV) FS somehow thinks otherwise (switch_core_media.c:5665 Crypto not negotiated but required.)

2020-06-26 18:20:40.208635 [INFO] switch_core_media.c:8843 Activating Audio ICE 2020-06-26 18:20:40.208635 [NOTICE] switch_rtp.c:4915 Activating RTP audio ICE: ZyVg:nzPxIzWUEUYj6GjG 11.22.33.44:50004 2020-06-26 18:20:40.208635 [DEBUG] switch_core_media.c:8975 sofia/teams/27101234567 Set 2833 dtmf send payload to 101 2020-06-26 18:20:40.208635 [DEBUG] switch_core_media.c:8982 sofia/teams/27101234567 Set 2833 dtmf receive payload to 101 2020-06-26 18:20:40.208635 [DEBUG] switch_core_media.c:9005 sofia/teams/27101234567 Set rtp dtmf delay to 40 2020-06-26 18:20:40.208635 [DEBUG] switch_core_media.c:1501 LIFETIME found in |2^31, base 2 exp 31 2020-06-26 18:20:40.208635 [NOTICE] switch_core_media.c:1524 Skipping MKI due to empty index 2020-06-26 18:20:40.208635 [INFO] switch_rtp.c:4217 Activating audio Secure RTP SEND 2020-06-26 18:20:40.208635 [INFO] switch_rtp.c:4195 Activating audio Secure RTP RECV 2020-06-26 18:20:40.208635 [DEBUG] switch_core_sqldb.c:2836 Secure Type: srtp:sdes:AES_CM_128_HMAC_SHA1_32 2020-06-26 18:20:40.208635 [DEBUG] switch_core_sqldb.c:2836 Secure Type: srtp:sdes:AES_CM_128_HMAC_SHA1_32 2020-06-26 18:20:40.208635 [NOTICE] sofia.c:8503 Channel [sofia/teams/27101234567] has been answered 2020-06-26 18:20:40.208635 [DEBUG] switch_channel.c:3865 (sofia/teams/27101234567) Callstate Change RINGING -> ACTIVE 2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5592 Audio Codec Compare [G729:18:8000:20:8000:1]/[opus:116:48000:20:0:1] 2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5592 Audio Codec Compare [G729:18:8000:20:8000:1]/[PCMA:8:8000:20:64000:1] 2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5592 Audio Codec Compare [G729:18:8000:20:8000:1]/[PCMU:0:8000:20:64000:1] 2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5592 Audio Codec Compare [PCMA:8:8000:20:64000:1]/[opus:116:48000:20:0:1] 2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5592 Audio Codec Compare [PCMA:8:8000:20:64000:1]/[PCMA:8:8000:20:64000:1] 2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5647 Audio Codec Compare [PCMA:8:8000:20:64000:1] ++++ is saved as a match 2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5592 Audio Codec Compare [PCMA:8:8000:20:64000:1]/[PCMU:0:8000:20:64000:1] 2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5508 Set telephone-event payload to 98@8000 2020-06-26 18:20:40.228625 [WARNING] switch_core_media.c:5665 Crypto not negotiated but required. 2020-06-26 18:20:40.228625 [DEBUG] switch_core_media.c:5909 sofia/vox/0831233210@10.10.1.1 <mailto:sofia/vox/0831233210@10.10.1.1> Set 2833 dtmf send payload to 98 recv payload to 98 2020-06-26 18:20:40.228625 [NOTICE] switch_channel.c:3908 Hangup sofia/vox/0831233210@10.10.1.1 <mailto:sofia/vox/0831233210@10.10.1.1> [CS_EXECUTE] [INCOMPATIBLE_DESTINATION]

Am I missing something here?

Thanks

Keith