Sdp_crypto_process: Crypto Life Time Unsupported: Crypto

Home » Asterisk Users » Sdp_crypto_process: Crypto Life Time Unsupported: Crypto
Asterisk Users 5 Comments

Hello,

I have added the following to the peer definition :

ignorecryptolifetime=yes

But still Asterisk tells me :

[Oct 9 14:02:34] NOTICE[31980]: sip/sdp_crypto.c:244
sdp_crypto_process: Crypto life time unsupported: crypto:1
AES_CM_128_HMAC_SHA1_80 inline:ikW6yFvdVkSaeTuVO1isTQkdaxOjgQjMEMSGUf+K|2^32
[Oct 9 14:02:34] NOTICE[31980]: sip/sdp_crypto.c:254
sdp_crypto_process: SRTP crypto offer not acceptable
[Oct 9 14:02:34] WARNING[31980]: chan_sip.c:9129 process_sdp: Can’t provide secure audio requested in SDP offer

What else do I need to configure ?

Kind regards,

Jonas.

5 thoughts on - Sdp_crypto_process: Crypto Life Time Unsupported: Crypto

  • Jonas Kellens wrote:

    Kia ora,

    This is not an option within the official tree so unless you’ve added a patch this won’t actually do anything.

    Currently there is no way to turn this off without modifying the source code. I expect this to change in the future based on testing we did at SIPit and stuff we learned.

    Cheers,

  • Hello,

    any idea where and what to change in the source code then ?

    I am able to change the source code, but to do minimal damage I would like to know where to change what exactly.

    Using asterisk 1.8.12

    Kind regards,

    Jonas.

  • Jonas Kellens wrote:

    Yes. In channels/sip/sdp_crypto.c where the line:

    ast_log(LOG_NOTICE, “Crypto life time unsupported: %s\n”, attr);

    is remove the:

    continue;

    Afterwards.

  • Ok this seems to work ! Thanks.

    Does Asterisk now ignore the SRTP crypto offer ? Or does it just ignore the lifetime (in this case : |2^32) ?
    It does not seem right that Asterisk now should ignore the whole crypto offer.

    Kind regards,

    Jonas.

  • Jonas Kellens wrote:

    That change makes the presence of a key lifetime a non-fatal situation. Previously it would reject it, since we don’t support key lifetimes.