DTLS failure occurred, wrong certificate type

teja163 · June 28, 2022, 8:48am

Hello

I am getting following error when I make INVITE through webrtc

[Jun 28 08:30:01] ERROR[28760][C-00000003]: res_rtp_asterisk.c:3166 __rtp_recvfrom: DTLS failure occurred on RTP instance '0x7f348c052d30' due to reason 'wrong certificate type', terminating
[Jun 28 08:30:01] WARNING[28760][C-00000003]: res_rtp_asterisk.c:7700 ast_rtp_read: RTP Read error: Unspecified.  Hanging up.

My pjsip.conf is something like this

[transport-wss]
type=transport
protocol=wss
bind=0.0.0.0

[transport-ws]
type=transport
protocol=ws
bind=0.0.0.0


[webrtc_client]
type=aor
max_contacts=5
remove_existing=yes

[webrtc_client]
type=auth
auth_type=userpass
username=webrtc_client
password=password

[webrtc_client]
type=endpoint
aors=webrtc_client
auth=webrtc_client
dtls_auto_generate_cert=yes
webrtc=yes
context=default
disallow=all
allow=opus,ulaw
dtmf_mode=rfc4733

I see some related topics but not completely solving this case. I have followed the webrtc guide in asterisk wiki for configuration. What am I missing here?

fsilvestre · June 30, 2022, 6:20pm

If I’m not mistaken, you must add these settings to your endpoints:

use_avpf=yes
rtcp_mux=yes
ice_support=yes
media_encryption=dtls```

david551 · June 30, 2022, 7:47pm

I think webrtc=yes sets most or all of those:

github.com

asterisk/asterisk/blob/master/configs/samples/pjsip.conf.sample#L869


      
                                 ; a sip/frag "200 OK" after REFER has been accepted.
          ;notify_early_inuse_ringing = ; Whether to notifies dialog-info 'early'
                                        ; on INUSE && RINGING state (default: "no").
                                        ; The value "yes" is useful for some SIP phones
                                        ; (Cisco SPA) to be able to indicate and pick up
                                        ; ringing devices.
          ;max_audio_streams= ; The maximum number of allowed negotiated audio streams
                              ; (default: 1)
          ;max_video_streams= ; The maximum number of allowed negotiated video streams
                              ; (default: 1)
          ;webrtc= ; When set to "yes" this also enables the following values that are needed
                   ; for webrtc: rtcp_mux, use_avpf, ice_support, and use_received_transport.
                   ; The following configuration settings also get defaulted as follows:
                   ;     media_encryption=dtls
                   ;     dtls_verify=fingerprint
                   ;     dtls_setup=actpass
                   ; A dtls_cert_file and a dtls_ca_file still need to be specified.
                   ; Default for this option is "no"
          ;incoming_mwi_mailbox = ; Mailbox name to use when incoming MWI NOTIFYs are
                                  ; received.
                                  ; If an MWI NOTIFY is received FROM this endpoint,

system · July 30, 2022, 7:48pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.