ALERT libsrtp2-1 Problems in Debian/testing branch

kenzo

New Member
Joined
Jan 22, 2019
Messages
3
Reaction score
1
Has anyone else noticed in Debian stretch/testing that there is a bad libsrtp2-1 that causes Asterisk to crash?

I saw other threads about this problem in the forums, but I can safely report that I'm seeing the same crash in both arm and x86 using Asterisk 15.

root@pbx:~# apt list libsrtp2*
Listing... Done
libsrtp2-1/testing 2.2.0-1 amd64 [upgradable from: 2.0.0+20170123-1]
libsrtp2-1-dbg/testing 2.2.0-1 amd64 [upgradable from: 2.0.0+20170123-1]
libsrtp2-dev/testing 2.2.0-1 amd64 [upgradable from: 2.0.0+20170123-1]
libsrtp2-docs/testing 2.2.0-1 all [upgradable from: 2.0.0+20170123-1]

Symptom: REGISTER works fine with a SIP client, connects on TLS. But when placing a call which touches SRTP, this causes Asterisk to core if you have CLI open you get nothing indicating what's going haywire, likely it's causing a core while the SRTP connection is being stood up.

Cause: libsrtp2-1/testing 2.2.0-1 , specifically the libsrtp2 version that's in the testing branch in debian (and has proliferated to other distros) appears to be bad.

Workaround: Force a downgrade of the SRTP library to the version that's in stretch (2.0.0+20170123-1). On Debian for instance:

apt -t=stretch install libsrtp2*

Taking the libsrtp2 that's in the main branch rather than the testing branch backgrades SRTP so it's working again.


I got Asterisk to core using the latest versions of Bria 5 and Zoiper for Android as SIP clients. The certificate was self-signed with a 4096-bit length key.
 

Members online

Forum statistics

Threads
25,810
Messages
167,755
Members
19,240
Latest member
nikko
Get 3CX - Absolutely Free!

Link up your team and customers Phone System Live Chat Video Conferencing

Hosted or Self-managed. Up to 10 users free forever. No credit card. Try risk free.

3CX
A 3CX Account with that email already exists. You will be redirected to the Customer Portal to sign in or reset your password if you've forgotten it.
Top