[Home]

Summary:ASTERISK-24395: DTLS Handshake between Firefox Version > 34 and Asterisk is not completed anymore
Reporter:Marko Seidenglanz (markose)Labels:
Date Opened:2014-10-07 08:37:19Date Closed:2014-10-15 06:11:37
Priority:MajorRegression?No
Status:Closed/CompleteComponents:Resources/res_rtp_asterisk
Versions:12.5.0 Frequency of
Occurrence
Constant
Related
Issues:
Environment:CentOS 6.5Attachments:( 0) ff_33_dtls_client_hello.txt
( 1) ff_34_dtls_client_hello.txt
Description:When initiating a WebRTC Session with Firefox (Version > 34) the DTLS-Handshake is not completed anymore.

As of Firefox v34 the DTLS CLIENT_HELLO Message has changed and seems not to be processed anymore by Asterisk 12.5.



Comments:By: Marko Seidenglanz (markose) 2014-10-07 08:40:00.155-0500

DTLS CLIENT HELLO of Firefox 33

By: Marko Seidenglanz (markose) 2014-10-07 08:41:02.064-0500

DTLS CLIENT HELLO of Firefox 34

By: Marko Seidenglanz (markose) 2014-10-07 08:44:15.640-0500

The DTLS header line:
"DTLSv1.0 Record Layer: Handshake Protocol: Client Hello"

has changed to:
"SSL Record Layer: Handshake Protocol: Client Hello"

since Firefox 34 and Asterisk does not send a SERVER HELLO back anymore.

By: Rusty Newton (rnewton) 2014-10-14 15:03:47.679-0500

[~markose] , are you using chan_sip or chan_pjsip?

By: Marko Seidenglanz (markose) 2014-10-15 06:05:26.323-0500

The bug report is INVALID. Sorry for that.

By: Marko Seidenglanz (markose) 2014-10-15 06:07:00.374-0500

But I have a question regarding DTLS. Is DTLS supported by pjproject or did you do a custom implmentation by your own?

By: Joshua C. Colp (jcolp) 2014-10-15 06:11:02.368-0500

We do not use pjproject for media. We use our own RTP implementation which has DTLS support using OpenSSL.