WebRTC (DTLS-SRTP) > UDP/TCP RTP call

Dear community

I am trying to achieve the following scenario: WebRTC client that uses DTLS-SRTP invites an end-point that uses UDP/TCP transport and unencrypted media (RTP). I’m running into problems such as 488 Not Acceptable Here, probably because the WebRTC client is offering encrypted media in its SDP message and Asterisk sees that encrypted media is not supported for the receiving end-point. Is this scenario possible with Asterisk?

Thanks in advance!

Each side is independent. If that’s happening, it’s likely due to your underlying configuration. You would need to provide that, and ideally also a SIP trace.

I think, it’s not possible.
Asterisk cannot decrypt DTLS-SRTP and re-encrypt as plain RTP (or vice versa) on its own without a media proxy.
That means Asterisk cannot bridge encrypted WebRTC media to unencrypted RTP endpoints directly.
The error 488 Not Acceptable Here confirms this: it typically indicates that the codec or encryption offered in the SDP cannot be matched by the receiving endpoint.

This is 100% incorrect. Asterisk will decrypt/encrypt as it receives/sends audio at the edge. It is then unencrypted inside of Asterisk. It is completely possible to bridge encrypted and unencrypted channels.

Turns out the 488 Not Acceptable Here was raised because I initially did not define separate end-points for WSS and UDP/TCP. Their configuration seems to be so different that they require their own end-point per transport type. I can now confirm that Asterisk is capable of establishing a call between DTLS-SRTP and unencrypted RTP. Thanks to everyone involved for pointing me towards the right direction.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.