[Freeswitch-users] SRTP calls fail 'because secure media is administratively disabled'

Piotr Starzyk pstarzyk at general-devices.com
Fri Mar 18 21:21:26 MSK 2016


I was going by examples from FreeSWITCH 1.2 book (didn’t see a later
release on Amazon).

The following wiki states outdated values as well (and happens to be the
first link when googling for freeswitch SRTP):

https://wiki.freeswitch.org/wiki/SRTP



*From:* freeswitch-users-bounces at lists.freeswitch.org [mailto:
freeswitch-users-bounces at lists.freeswitch.org] *On Behalf Of *Michael Jerris
*Sent:* Friday, March 18, 2016 2:12 PM
*To:* FreeSWITCH Users Help <freeswitch-users at lists.freeswitch.org>
*Subject:* Re: [Freeswitch-users] SRTP calls fail 'because secure media is
administratively disabled'



That change was made between 1.2 and 1.4, its been multiple years now, not
recent.



On Mar 18, 2016, at 11:04 AM, covici at ccs.covici.com wrote:



They changed the name to rtp_secure_media sometime in the last few
months.

Eternal21 <eternal24 at gmail.com> wrote:


I am using FreeSWITCH demo configuration to test SRTP calls.  I am placing
a call between endpoint 1000 and 1001.  The call works fine when SRTP is
disabled on the softphones.  The problem starts when I enable SRTP on the
softphones.  I also enabled SRTP on FreeSWITCH server, by including the
following command in vars.xml:

<X-PRE-PROCESS cmd="set" data="sip_secure_media=true"/>

When I try to place a call between the two endpoints now, I end up with one
side immediately hanging up.
Specifically, the error seems to be:
[WARNING] switch_core_media.c:4035 Declining invite with only SAVP because
secure media is administratively disabled

Followed by:
[NOTICE] sofia.c:7742 Hangup sofia/internal/1001 at 10.10.10.112:5060
[CS_CONSUME_MEDIA] [INCOMPATIBLE_DESTINATION]

Couldn't find any info on how to resolve this issue online.

Here's the relevant log:
2016-03-18 09:45:21.664536

[INFO] switch_rtp.c:3605 Activating Audio Secure RTP SEND
[DEBUG] switch_core_sqldb.c:2607 Secure Type:
srtp:sdes:AES_CM_128_HMAC_SHA1_80
[INFO] switch_rtp.c:3583 Activating Audio Secure RTP RECV
[DEBUG] switch_core_sqldb.c:2607 Secure Type:
srtp:sdes:AES_CM_128_HMAC_SHA1_80
[NOTICE] sofia_media.c:92 Pre-Answer sofia/internal/1000 at 10.10.10.77!
[DEBUG] switch_channel.c:3461 (sofia/internal/1000 at 10.10.10.77) Callstate
Change RINGING -> EARLY
[DEBUG] mod_sofia.c:2330 Ring SDP:
v=0
o=FreeSWITCH 1458288533 1458288534 IN IP4 10.10.10.77
s=FreeSWITCH
c=IN IP4 10.10.10.77
t=0 0
m=audio 20188 RTP/SAVP 0 101
a=rtpmap:0 PCMU/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16
a=ptime:20
a=sendrecv
a=crypto:1 AES_CM_128_HMAC_SHA1_80
inline:uhco9Z9FgciE1vh5LQqGyNXxts0etxavW51gJKVP

[DEBUG] switch_ivr_originate.c:1274 Raw Codec Activation Success L16 at 8000hz
1 channel 20ms
[DEBUG] switch_core_codec.c:221 sofia/internal/1000 at 10.10.10.77 Push codec
L16:100
[DEBUG] switch_ivr_originate.c:1343 Play Ringback Tone
[%(2000,4000,440,480)]
[DEBUG] sofia.c:6756 Channel sofia/internal/1000 at 10.10.10.77 entering state
[early][183]
[DEBUG] switch_rtp.c:6645 Correct audio ip/port confirmed.
[DEBUG] sofia.c:6756 Channel sofia/internal/1001 at 10.10.10.112:5060 entering
state [completing][200]
[DEBUG] sofia.c:6766 Remote SDP:
v=0
o=VOCAL 61793 12653 IN IP4 10.10.10.112
s=-
c=IN IP4 10.10.10.112
t=0 0
m=audio 1442 RTP/SAVP 0
a=rtpmap:0 PCMU/8000
a=crypto:1 AES_CM_128_HMAC_SHA1_80
inline:i7qQOAKGWeBs/QtXQcYRD3g7u2pGv/BDqrvKE6Av
a=ptime:20

[DEBUG] sofia.c:6756 Channel sofia/internal/1001 at 10.10.10.112:5060 entering
state [ready][200]
[WARNING] switch_core_media.c:4035 Declining invite with only SAVP because
secure media is administratively disabled
[NOTICE] sofia.c:7742 Hangup sofia/internal/1001 at 10.10.10.112:5060
[CS_CONSUME_MEDIA] [INCOMPATIBLE_DESTINATION]
[DEBUG] sofia.c:1355 Channel is already hungup.

2016-03-18 09:45:26.303802

----------------------------------------------------
Alternatives:

----------------------------------------------------
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting at freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


-- 
Your life is like a penny.  You're going to lose it.  The question is:
How do
you spend it?

        John Covici
        covici at ccs.covici.com

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting at freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20160318/8ffc1784/attachment-0001.html 


Join us at ClueCon 2016 Aug 8-12, 2016
More information about the FreeSWITCH-users mailing list