[Freeswitch-users] SRTP calls fail 'because secure media is administratively disabled'

Piotr Starzyk pstarzyk at general-devices.com
Fri Mar 18 18:14:15 MSK 2016


Thank you for a prompt response.  Replacing sip_secure_media with
rtp_secure_media resolved my issue.

-----Original Message-----
From: freeswitch-users-bounces at lists.freeswitch.org
[mailto:freeswitch-users-bounces at lists.freeswitch.org] On Behalf Of
covici at ccs.covici.com
Sent: Friday, March 18, 2016 11:05 AM
To: FreeSWITCH Users Help <freeswitch-users at lists.freeswitch.org>
Subject: Re: [Freeswitch-users] SRTP calls fail 'because secure media is
administratively disabled'

They changed the name to rtp_secure_media sometime in the last few months.

Eternal21 <eternal24 at gmail.com> wrote:

>  I am using FreeSWITCH demo configuration to test SRTP calls.  I am
> placing a call between endpoint 1000 and 1001.  The call works fine
> when SRTP is disabled on the softphones.  The problem starts when I
> enable SRTP on the softphones.  I also enabled SRTP on FreeSWITCH
> server, by including the following command in vars.xml:
>
> <X-PRE-PROCESS cmd="set" data="sip_secure_media=true"/>
>
> When I try to place a call between the two endpoints now, I end up
> with one side immediately hanging up.
> Specifically, the error seems to be:
> [WARNING] switch_core_media.c:4035 Declining invite with only SAVP
> because secure media is administratively disabled
>
> Followed by:
> [NOTICE] sofia.c:7742 Hangup sofia/internal/1001 at 10.10.10.112:5060
> [CS_CONSUME_MEDIA] [INCOMPATIBLE_DESTINATION]
>
> Couldn't find any info on how to resolve this issue online.
>
> Here's the relevant log:
> 2016-03-18 09:45:21.664536
>
> [INFO] switch_rtp.c:3605 Activating Audio Secure RTP SEND [DEBUG]
> switch_core_sqldb.c:2607 Secure Type:
> srtp:sdes:AES_CM_128_HMAC_SHA1_80
> [INFO] switch_rtp.c:3583 Activating Audio Secure RTP RECV [DEBUG]
> switch_core_sqldb.c:2607 Secure Type:
> srtp:sdes:AES_CM_128_HMAC_SHA1_80
> [NOTICE] sofia_media.c:92 Pre-Answer sofia/internal/1000 at 10.10.10.77!
> [DEBUG] switch_channel.c:3461 (sofia/internal/1000 at 10.10.10.77)
> Callstate Change RINGING -> EARLY [DEBUG] mod_sofia.c:2330 Ring SDP:
> v=0
> o=FreeSWITCH 1458288533 1458288534 IN IP4 10.10.10.77 s=FreeSWITCH
> c=IN IP4 10.10.10.77
> t=0 0
> m=audio 20188 RTP/SAVP 0 101
> a=rtpmap:0 PCMU/8000
> a=rtpmap:101 telephone-event/8000
> a=fmtp:101 0-16
> a=ptime:20
> a=sendrecv
> a=crypto:1 AES_CM_128_HMAC_SHA1_80
> inline:uhco9Z9FgciE1vh5LQqGyNXxts0etxavW51gJKVP
>
> [DEBUG] switch_ivr_originate.c:1274 Raw Codec Activation Success
> L16 at 8000hz
> 1 channel 20ms
> [DEBUG] switch_core_codec.c:221 sofia/internal/1000 at 10.10.10.77 Push
> codec
> L16:100
> [DEBUG] switch_ivr_originate.c:1343 Play Ringback Tone
> [%(2000,4000,440,480)] [DEBUG] sofia.c:6756 Channel
> sofia/internal/1000 at 10.10.10.77 entering state [early][183] [DEBUG]
> switch_rtp.c:6645 Correct audio ip/port confirmed.
> [DEBUG] sofia.c:6756 Channel sofia/internal/1001 at 10.10.10.112:5060
> entering state [completing][200] [DEBUG] sofia.c:6766 Remote SDP:
> v=0
> o=VOCAL 61793 12653 IN IP4 10.10.10.112
> s=-
> c=IN IP4 10.10.10.112
> t=0 0
> m=audio 1442 RTP/SAVP 0
> a=rtpmap:0 PCMU/8000
> a=crypto:1 AES_CM_128_HMAC_SHA1_80
> inline:i7qQOAKGWeBs/QtXQcYRD3g7u2pGv/BDqrvKE6Av
> a=ptime:20
>
> [DEBUG] sofia.c:6756 Channel sofia/internal/1001 at 10.10.10.112:5060
> entering state [ready][200] [WARNING] switch_core_media.c:4035
> Declining invite with only SAVP because secure media is
> administratively disabled [NOTICE] sofia.c:7742 Hangup
> sofia/internal/1001 at 10.10.10.112:5060
> [CS_CONSUME_MEDIA] [INCOMPATIBLE_DESTINATION] [DEBUG] sofia.c:1355
> Channel is already hungup.
>
> 2016-03-18 09:45:26.303802
>
> ----------------------------------------------------
> Alternatives:
>
> ----------------------------------------------------
> ______________________________________________________________________
> ___ Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use
> rs
> http://www.freeswitch.org

--
Your life is like a penny.  You're going to lose it.  The question is:
How do
you spend it?

         John Covici
         covici at ccs.covici.com

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting at freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



Join us at ClueCon 2016 Aug 8-12, 2016
More information about the FreeSWITCH-users mailing list