Chan_sip.c:10919 process_sdp: Can't provide secure audio requested in SDP offer

Working to configure sip calling but getting below error.

I have enabled a sip log (set sip debug on) and got the below logs.

<— SIP read from TCP:27.61.136.102:10657 —>
INVITE sip:502@X.X.X.X SIP/2.0
Via: SIP/2.0/TCP X.X.X.X:XX00;branch=z9hG4bK-524287-1—c1177e656aeb0c6e;rport
Max-Forwards: 70
Contact: sip:501@X.X.X.X:XX00;transport=tcp;+sip.instance=“501@X.X.X.X”
To: sip:502@X.X.X.X
From: sip:501@X.X.X.X;tag=3fef9e55
Call-ID: l_xlNM0mCxrLgkrLJWivrw…
CSeq: 1 INVITE
Session-Expires: 1800
Min-SE: 90
Accept-Language: en
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, NOTIFY, SUBSCRIBE, INFO, MESSAGE, PRACK
Content-Type: application/sdp
Supported: timer, 100rel
Content-Length: 4096

v=0
o=- 6816957135637064306 2 IN IP4 127.0.0.1
s=-
t=0 0
a=group:BUNDLE 0 1
a=msid-semantic: WMS ARDAMS
m=video 10683 UDP/TLS/RTP/SAVPF 96 97 98 99 100 101 127 124 125
c=IN IP4 27.61.136.102
a=rtcp:9 IN IP4 0.0.0.0
a=candidate:475081971 1 udp 2122129151 X.X.X.X 43886 typ host generation 0 network-id 3 network-cost 900
a=candidate:1510613869 1 udp 2121998079 127.0.0.1 39415 typ host generation 0 network-id 1
a=candidate:842163049 1 udp 1685921535 27.61.136.102 10683 typ srflx raddr X.X.X.X rport 43886 generation 0 network-id 3 network-cost 900
a=ice-ufrag:I9Xk
a=ice-pwd:7lKTlOYENjVM5OBDf/1j2IJD
a=ice-options:trickle renomination
a=fingerprint:sha-256 85:CF:75:D8:CA:94:5E:AF:AD:B4:1A:F6:01:05:45:DF:FE:FE:21:F0:FF:D8:A4:4F:0C:83:AF:29:81:E7:15:9D
a=setup:actpass
a=mid:0
a=extmap:14 urn:ietf:params:rtp-hdrext:toffset
a=extmap:2 http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time
a=extmap:13 urn:3gpp:video-orientation
a=extmap:3 http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
a=extmap:12 http://www.webrtc.org/experiments/rtp-hdrext/playout-delay
a=extmap:11 http://www.webrtc.org/experiments/rtp-hdrext/video-content-type
a=extmap:7 http://www.webrtc.org/experiments/rtp-hdrext/video-timing
a=extmap:8 http://tools.ietf.org/html/draft-ietf-avtext-framemarking-07
a=extmap:9 http://www.webrtc.org/experiments/rtp-hdrext/color-space
a=extmap:4 urn:ietf:params:rtp-hdrext:sdes:mid
a=extmap:5 urn:ietf:params:rtp-hdrext:sdes:rtp-stream-id
a=extmap:6 urn:ietf:params:rtp-hdrext:sdes:repaired-rtp-stream-id
a=sendrecv
a=msid:ARDAMS ARDAMSv0
a=rtcp-mux
a=rtcp-rsize
a=rtpmap:96 VP8/90000
a=rtcp-fb:96 goog-remb
a=rtcp-fb:96 transport-cc
a=rtcp-fb:96 ccm fir
a=rtcp-fb:96 nack
a=rtcp-fb:96 nack pli
a=rtpmap:97 rtx/90000
a=fmtp:97 apt=96
a=rtpmap:98 VP9/90000
a=rtcp-fb:98 goog-remb
a=rtcp-fb:98 transport-cc
a=rtcp-fb:98 ccm fir
a=rtcp-fb:98 nack
a=rtcp-fb:98 nack pli
a=rtpmap:99 rtx/90000
a=fmtp:99 apt=98
a=rtpmap:100 H264/90000
a=rtcp-fb:100 goog-remb
a=rtcp-fb:100 transport-cc
a=rtcp-fb:100 ccm fir
a=rtcp-fb:100 nack
a=rtcp-fb:100 nack pli
a=fmtp:100 level-asymmetry-allowed=1;packetization-mode=1;profile-level-id=42e01f
a=rtpmap:101 rtx/90000
a=fmtp:101 apt=100
a=rtpmap:127 red/90000
a=rtpmap:124 rtx/90000
a=fmtp:124 apt=127
a=rtpmap:125 ulpfec/90000
a=ssrc-group:FID 1807244391 2674923617
a=ssrc:1807244391 cname:2WkUmzSLNsk7FZun
a=ssrc:1807244391 msid:ARDAMS ARDAMSv0
a=ssrc:1807244391 mslabel:ARDAMS
a=ssrc:1807244391 label:ARDAMSv0
a=ssrc:2674923617 cname:2WkUmzSLNsk7FZun
a=ssrc:2674923617 msid:ARDAMS ARDAMSv0
a=ssrc:2674923617 mslabel:ARDAMS
a=ssrc:2674923617 label:ARDAMSv0
m=audio 9 UDP/TLS/RTP/SAVPF 111 103 104 9 102 0 8 106 105 13 110 112 113 126
c=IN IP4 0.0.0.0
a=rtcp:9 IN IP4 0.0.0.0
a=ice-ufrag:I9Xk
a=ice-pwd:7lKTlOYENjVM5OBDf/1j2IJD
a=ice-options:trickle renomination
a=fingerprint:sha-256 85:CF:75:D8:CA:94:5E:AF:AD:B4:1A:F6:01:05:45:DF:FE:FE:21:F0:FF:D8:A4:4F:0C:83:AF:29:81:E7:15:9D
a=setup:actpass
a=mid:1
a=extmap:1 urn:ietf:params:rtp-hdrext:ssrc-audio-level
a=extmap:2 http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time
a=extmap:3 http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
a=extmap:4 urn:ietf:params:rtp-hdrext:sdes:mid
a=extmap:5 urn:ietf:params:rtp-hdrext:sdes:rtp-stream-id
a=extmap:6 urn:ietf:params:rtp-hdrext:sdes:repaired-rtp-stream-id
a=sendrecv
a=msid:ARDAMS ARDAMSa0
a=rtcp-mux
a=rtpmap:111 opus/48000/2
a=rtcp-fb:111 transport-cc
a=fmtp:111 minptime=10;useinbandfec=1
a=rtpmap:103 ISAC/16000
a=rtpmap:104 ISAC/32000
a=rtpmap:9 G722/8000
a=rtpmap:102 ILBC/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:106 CN/32000
a=rtpmap:105 CN/16000
a=rtpmap:13 CN/8000
a=rtpmap:110 telephone-event/48000
a=rtpmap:112 telephone-event/32000
a=rtpmap:113 telephone-event/16000
a=rtpmap:126 telephone-event/8000
a=ssrc:439168497 cname:2WkUmzSLNsk7FZun
a=ssrc:439168497 msid:ARDAMS ARDAMSa0
a=ssrc:439168497 mslabel:ARDAMS
a=ssrc:439168497 label:ARDAMSa0
<------------->
— (15 headers 110 lines) —
Sending to 27.61.136.102:10657 (NAT)
Sending to 27.61.136.102:10657 (NAT)
Using INVITE request as basis request - l_xlNM0mCxrLgkrLJWivrw…
Found peer ‘501’ for ‘501’ from 27.61.136.102:10657

<— Reliably Transmitting (NAT) to 27.61.136.102:10657 —>
SIP/2.0 401 Unauthorized
Via: SIP/2.0/TCP X.X.X.X:XX00;branch=z9hG4bK-524287-1—c1177e656aeb0c6e;received=27.61.136.102;rport=10657
From: sip:501@X.X.X.X;tag=3fef9e55
To: sip:502@X.X.X.X;tag=as75b25a42
Call-ID: l_xlNM0mCxrLgkrLJWivrw…
CSeq: 1 INVITE
Server: FPBX-15.0.16.53(16.10.0)
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
WWW-Authenticate: Digest algorithm=MD5, realm=“asterisk”, nonce=“3a69836c”
Content-Length: 0

<------------>
Scheduling destruction of SIP dialog ‘l_xlNM0mCxrLgkrLJWivrw…’ in 19712 ms (Method: INVITE)

<— SIP read from TCP:27.61.136.102:10657 —>
ACK sip:502@X.X.X.X SIP/2.0
Via: SIP/2.0/TCP X.X.X.X:XX00;branch=z9hG4bK-524287-1—c1177e656aeb0c6e;rport
Max-Forwards: 70
To: sip:502@X.X.X.X;tag=as75b25a42
From: sip:501@X.X.X.X;tag=3fef9e55
Call-ID: l_xlNM0mCxrLgkrLJWivrw…
CSeq: 1 ACK
Content-Length: 0

<------------->
— (8 headers 0 lines) —

<— SIP read from TCP:27.61.136.102:10657 —>
INVITE sip:502@X.X.X.X SIP/2.0
Via: SIP/2.0/TCP X.X.X.X:XX00;branch=z9hG4bK-524287-1—9da2867394188663;rport
Max-Forwards: 70
Contact: sip:501@X.X.X.X:XX00;transport=tcp;+sip.instance=“501@X.X.X.X”
To: sip:502@X.X.X.X
From: sip:501@X.X.X.X;tag=3fef9e55
Call-ID: l_xlNM0mCxrLgkrLJWivrw…
CSeq: 2 INVITE
Session-Expires: 1800
Min-SE: 90
Accept-Language: en
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, NOTIFY, SUBSCRIBE, INFO, MESSAGE, PRACK
Content-Type: application/sdp
Supported: timer, 100rel
Authorization: Digest username=“501”,realm=“asterisk”,nonce=“3a69836c”,uri=“sip:502@X.X.X.X”,response=“000741e2e78c19ccc72a0b99f7039c6e”,algorithm=MD5
Content-Length: 4096

v=0
o=- 6816957135637064306 2 IN IP4 127.0.0.1
s=-
t=0 0
a=group:BUNDLE 0 1
a=msid-semantic: WMS ARDAMS
m=video 10683 UDP/TLS/RTP/SAVPF 96 97 98 99 100 101 127 124 125
c=IN IP4 27.61.136.102
a=rtcp:9 IN IP4 0.0.0.0
a=candidate:475081971 1 udp 2122129151 X.X.X.X 43886 typ host generation 0 network-id 3 network-cost 900
a=candidate:1510613869 1 udp 2121998079 127.0.0.1 39415 typ host generation 0 network-id 1
a=candidate:842163049 1 udp 1685921535 27.61.136.102 10683 typ srflx raddr X.X.X.X rport 43886 generation 0 network-id 3 network-cost 900
a=ice-ufrag:I9Xk
a=ice-pwd:7lKTlOYENjVM5OBDf/1j2IJD
a=ice-options:trickle renomination
a=fingerprint:sha-256 85:CF:75:D8:CA:94:5E:AF:AD:B4:1A:F6:01:05:45:DF:FE:FE:21:F0:FF:D8:A4:4F:0C:83:AF:29:81:E7:15:9D
a=setup:actpass
a=mid:0
a=extmap:14 urn:ietf:params:rtp-hdrext:toffset
a=extmap:2 http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time
a=extmap:13 urn:3gpp:video-orientation
a=extmap:3 http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
a=extmap:12 http://www.webrtc.org/experiments/rtp-hdrext/playout-delay
a=extmap:11 http://www.webrtc.org/experiments/rtp-hdrext/video-content-type
a=extmap:7 http://www.webrtc.org/experiments/rtp-hdrext/video-timing
a=extmap:8 http://tools.ietf.org/html/draft-ietf-avtext-framemarking-07
a=extmap:9 http://www.webrtc.org/experiments/rtp-hdrext/color-space
a=extmap:4 urn:ietf:params:rtp-hdrext:sdes:mid
a=extmap:5 urn:ietf:params:rtp-hdrext:sdes:rtp-stream-id
a=extmap:6 urn:ietf:params:rtp-hdrext:sdes:repaired-rtp-stream-id
a=sendrecv
a=msid:ARDAMS ARDAMSv0
a=rtcp-mux
a=rtcp-rsize
a=rtpmap:96 VP8/90000
a=rtcp-fb:96 goog-remb
a=rtcp-fb:96 transport-cc
a=rtcp-fb:96 ccm fir
a=rtcp-fb:96 nack
a=rtcp-fb:96 nack pli
a=rtpmap:97 rtx/90000
a=fmtp:97 apt=96
a=rtpmap:98 VP9/90000
a=rtcp-fb:98 goog-remb
a=rtcp-fb:98 transport-cc
a=rtcp-fb:98 ccm fir
a=rtcp-fb:98 nack
a=rtcp-fb:98 nack pli
a=rtpmap:99 rtx/90000
a=fmtp:99 apt=98
a=rtpmap:100 H264/90000
a=rtcp-fb:100 goog-remb
a=rtcp-fb:100 transport-cc
a=rtcp-fb:100 ccm fir
a=rtcp-fb:100 nack
a=rtcp-fb:100 nack pli
a=fmtp:100 level-asymmetry-allowed=1;packetization-mode=1;profile-level-id=42e01f
a=rtpmap:101 rtx/90000
a=fmtp:101 apt=100
a=rtpmap:127 red/90000
a=rtpmap:124 rtx/90000
a=fmtp:124 apt=127
a=rtpmap:125 ulpfec/90000
a=ssrc-group:FID 1807244391 2674923617
a=ssrc:1807244391 cname:2WkUmzSLNsk7FZun
a=ssrc:1807244391 msid:ARDAMS ARDAMSv0
a=ssrc:1807244391 mslabel:ARDAMS
a=ssrc:1807244391 label:ARDAMSv0
a=ssrc:2674923617 cname:2WkUmzSLNsk7FZun
a=ssrc:2674923617 msid:ARDAMS ARDAMSv0
a=ssrc:2674923617 mslabel:ARDAMS
a=ssrc:2674923617 label:ARDAMSv0
m=audio 9 UDP/TLS/RTP/SAVPF 111 103 104 9 102 0 8 106 105 13 110 112 113 126
c=IN IP4 0.0.0.0
a=rtcp:9 IN IP4 0.0.0.0
a=ice-ufrag:I9Xk
a=ice-pwd:7lKTlOYENjVM5OBDf/1j2IJD
a=ice-options:trickle renomination
a=fingerprint:sha-256 85:CF:75:D8:CA:94:5E:AF:AD:B4:1A:F6:01:05:45:DF:FE:FE:21:F0:FF:D8:A4:4F:0C:83:AF:29:81:E7:15:9D
a=setup:actpass
a=mid:1
a=extmap:1 urn:ietf:params:rtp-hdrext:ssrc-audio-level
a=extmap:2 http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time
a=extmap:3 http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
a=extmap:4 urn:ietf:params:rtp-hdrext:sdes:mid
a=extmap:5 urn:ietf:params:rtp-hdrext:sdes:rtp-stream-id
a=extmap:6 urn:ietf:params:rtp-hdrext:sdes:repaired-rtp-stream-id
a=sendrecv
a=msid:ARDAMS ARDAMSa0
a=rtcp-mux
a=rtpmap:111 opus/48000/2
a=rtcp-fb:111 transport-cc
a=fmtp:111 minptime=10;useinbandfec=1
a=rtpmap:103 ISAC/16000
a=rtpmap:104 ISAC/32000
a=rtpmap:9 G722/8000
a=rtpmap:102 ILBC/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:106 CN/32000
a=rtpmap:105 CN/16000
a=rtpmap:13 CN/8000
a=rtpmap:110 telephone-event/48000
a=rtpmap:112 telephone-event/32000
a=rtpmap:113 telephone-event/16000
a=rtpmap:126 telephone-event/8000
a=ssrc:439168497 cname:2WkUmzSLNsk7FZun
a=ssrc:439168497 msid:ARDAMS ARDAMSa0
a=ssrc:439168497 mslabel:ARDAMS
a=ssrc:439168497 label:ARDAMSa0
<------------->
— (16 headers 110 lines) —
Sending to 27.61.136.102:10657 (NAT)
Using INVITE request as basis request - l_xlNM0mCxrLgkrLJWivrw…
Found peer ‘501’ for ‘501’ from 27.61.136.102:10657
== Using SIP VIDEO TOS bits 136
== Using SIP VIDEO CoS mark 6
== Using SIP RTP TOS bits 184
== Using SIP RTP CoS mark 5
Got SDP version 2 and unique parts [- 6816957135637064306 IN IP4 127.0.0.1]
Found RTP video format 96
Found RTP video format 97
Found RTP video format 98
Found RTP video format 99
Found RTP video format 100
Found RTP video format 101
Found RTP video format 127
Found RTP video format 124
Found RTP video format 125
Found video description format VP8 for ID 96
Found video description format H264 for ID 100
Found RTP audio format 111
Found RTP audio format 103
Found RTP audio format 104
Found RTP audio format 9
Found RTP audio format 102
Found RTP audio format 0
Found RTP audio format 8
Found RTP audio format 106
Found RTP audio format 105
Found RTP audio format 13
Found RTP audio format 110
Found RTP audio format 112
Found RTP audio format 113
Found RTP audio format 126
Found audio description format opus for ID 111
Found unknown media description format ISAC for ID 103
Found unknown media description format ISAC for ID 104
Found audio description format G722 for ID 9
Found audio description format ILBC for ID 102
Found audio description format PCMU for ID 0
Found audio description format PCMA for ID 8
Found unknown media description format CN for ID 106
Found unknown media description format CN for ID 105
Found audio description format CN for ID 13
Found unknown media description format telephone-event for ID 110
Found unknown media description format telephone-event for ID 112
Found unknown media description format telephone-event for ID 113
Found audio description format telephone-event for ID 126
[2020-09-12 09:01:24] WARNING[3075][C-00000016]: chan_sip.c:10919 process_sdp: Can’t provide secure audio requested in SDP offer

<— Reliably Transmitting (NAT) to 27.61.136.102:10657 —>
SIP/2.0 488 Not acceptable here
Via: SIP/2.0/TCP X.X.X.X:XX00;branch=z9hG4bK-524287-1—9da2867394188663;received=27.61.136.102;rport=10657
From: sip:501@X.X.X.X;tag=3fef9e55
To: sip:502@X.X.X.X;tag=as75b25a42
Call-ID: l_xlNM0mCxrLgkrLJWivrw…
CSeq: 2 INVITE
Server: FPBX-15.0.16.53(16.10.0)
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
Content-Length: 0

<------------>
Scheduling destruction of SIP dialog ‘l_xlNM0mCxrLgkrLJWivrw…’ in 19712 ms (Method: INVITE)

<— SIP read from TCP:27.61.136.102:10657 —>
ACK sip:502@X.X.X.X SIP/2.0
Via: SIP/2.0/TCP X.X.X.X:XX00;branch=z9hG4bK-524287-1—9da2867394188663;rport
Max-Forwards: 70
To: sip:502@X.X.X.X;tag=as75b25a42
From: sip:501@X.X.X.X;tag=3fef9e55
Call-ID: l_xlNM0mCxrLgkrLJWivrw…
CSeq: 2 ACK
Content-Length: 0

Please provide the channel technology configuration file. It is likely you haven’t enabled encryption, properly.

Also, although it is not positively identified, I think you are using chan_sip. If so, why are you not using pjsip? Please note that chan_sip only has limited support (community support).

Hi,

Please find the below configuration.

Due to some specific requirement, I need to do it va chain_sip.

[501]
deny=0.0.0.0/0.0.0.0
disallow=all
secret=XXXXXXX
dtmfmode=rfc2833
canreinvite=no
context=from-internal
host=dynamic
defaultuser=
trustrpid=yes
user_eq_phone=no
sendrpid=pai
type=friend
session-timers=accept
nat=force_rport,comedia
port=7000
qualify=yes
qualifyfreq=60
transport=tcp,udp
avpf=yes
force_avp=yes
icesupport=yes
rtcp_mux=yes
encryption=yes
videosupport=yes
namedcallgroup=
namedpickupgroup=
allow=ulaw
allow=h264
allow=alaw
dial=SIP/501
accountcode=
permit=0.0.0.0/0.0.0.0
callerid=501 <501>
recordonfeature=apprecord
recordofffeature=apprecord
callcounter=yes
faxdetect=no

You don’t appear to have configured or enabled TLS. I was under the impression that media encryption had signalling encryption as a pre-requisite.

Okay,

Can you please tell me, Which parameter is required to setup it?

https://wiki.asterisk.org/wiki/display/AST/Secure+Calling+Tutorial