Does asterisk already support DTLS-SRTP?
I have problem with offer SDP that mozzila firefox generates. It generates the folowing error:
"Can’t provide secure audio requested in SDP offer"
v=0
o=Mozilla-SIPUA 14911 0 IN IP4 xxx
s=SIP Call
t=0 0
a=ice-ufrag:de2f016f
a=ice-pwd:5f6c1d1e785108256c0e9e94d2a5ee78
a=fingerprint:sha-256 B4:C6:2A:9E:3E:C9:BD:92:13:D3:20:4A:07:B2:BB:9E:27:18:7F:B8:77:70:1D:76:49:A0:40:0F:66:1C:DD:96
m=audio 60273 RTP/SAVPF 109 0 8 101
c=IN IP4 xxx
a=rtpmap:109 opus/48000/2
a=ptime:20
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=sendrecv
Is the a=fingerprint atribute supported or it still needs the a=cypto?
In config i have encryption=yes, avpf=yes. On Chrome is working ok with the old SDES a=cypto attribute.
Regards
[quote=“mitjaka”]Does asterisk already support DTLS-SRTP?
Is the a=fingerprint atribute supported or it still needs the a=cypto?
[/quote]
Yes, and yes, fingerprint is supported.
There has been an absence of clients actually implementing DTLS-SRTP. That’s starting to change. You should make your posting to the asterisk-users mailing list (lists.digium.com), as the people who read the lists are more likely to be able to offer suggestions than the people who read these forums.
Thank you for the answer could you please provide me with more details to which list exactly should i post questions related to WEBRTC?
After further testing the problem looks like this:
WARNING[25424][C-00000004]: chan_sip.c:10936 process_sdp_a_dtls: Unsupported fingerprint hash type ‘sha-2’ received on dialog '2457893540’
After inspecting the code in v Chan_sip.c metode process_sdp_a_dtls, looks like there is only sha-1 supported:
if (!strcasecmp(hash, “sha-1”))
{
dtls->set_fingerprint(instance, AST_RTP_DTLS_HASH_SHA1, value);
} else {
ast_log(LOG_WARNING, “Unsupported fingerprint hash type ‘%s’ received on dialog ‘%s’\n”,hash, p->callid);
}
[quote=“malcolmd”]
There has been an absence of clients actually implementing DTLS-SRTP. That’s starting to change. You should make your posting to the asterisk-users mailing list (lists.digium.com), as the people who read the lists are more likely to be able to offer suggestions than the people who read these forums.[/quote]
Hello, could you recommend me some softphones, which already support DTLS protocol?