SIP trunk using SRTP and DTLS

Hello.

Have somebody set up a SIP-trunk with SRTP and DTLS? I’m trying to that now, but with no luck.
I got error “chan_sip.c:10844 process_sdp: Failed to receive SDP offer/answer with required SRTP crypto attributes for audio”

The SIP-protocol is encrypted, but not the audio.
I get this error message when I’m trying to call the number:
chan_sip.c:10844 process_sdp: Failed to receive SDP offer/answer with required SRTP crypto attributes for audio

This is my settings for outgoing:
type=peer
transport=tls
encryption=yes
outboundproxy=sipserverproxyaddress,force
host=sipserveraddress
fromuser=12345
fromdomain=domainname
username=12345
secret=password
dtmfmode=auto
insecure=port,invite
qualify=yes
canreinvite=no
context=from-trunk
dtlsenable=yes
dtlsverify=fingerprint
dtlssetup=actpass

Does your trunk provider support encryption ?

Yes. I have checked with my provider.

DTLS requires a certificate and private key in order to negotiate[1]. Have you configured one and inherited it, or are you using certificate auto generation?

[1] https://github.com/asterisk/asterisk/blob/master/configs/samples/sip.conf.sample#L1358

I have actually bought a certificate (just to make sure that it isn’t a issue with self signed certificates)
Should I point to that certificate with those settings in the sample you linked?

Yes. That is how it works.

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.