Summary:	ASTERISK-27967: srtp: rejecting short sdes lifetimes incompatible with obihai ATAs
Reporter:	Nick French (naf)	Labels:
Date Opened:	2018-07-17 13:56:02	Date Closed:	2018-07-18 10:22:37
Priority:	Minor	Regression?
Status:	Closed/Complete	Components:	Core/RTP
Versions:	13.22.0 15.5.0	Frequency of Occurrence
Related Issues:
Environment:		Attachments:
Description:	SRTP SDES key lifetime support was added in ASTERISK-17899. In that addition, the minimum key lifetime to be accepted was set at the (as far as I can tell completely arbitrary) 10 hours @ 20ms/packet = 1800000 packets. The firmware in the obi1xx ATA uses a hardcoded lifetime of 2^20 packets, so it cannot use SDES encryption with asterisk due to the arbitrary 10 hour limit.
Comments:	By: Asterisk Team (asteriskteam) 2018-07-17 13:56:02.977-0500 Thanks for creating a report! The issue has entered the triage process. That means the issue will wait in this status until a Bug Marshal has an opportunity to review the issue. Once the issue has been reviewed you will receive comments regarding the next steps towards resolution. A good first step is for you to review the [Asterisk Issue Guidelines|https://wiki.asterisk.org/wiki/display/AST/Asterisk+Issue+Guidelines] if you haven't already. The guidelines detail what is expected from an Asterisk issue report. Then, if you are submitting a patch, please review the [Patch Contribution Process|https://wiki.asterisk.org/wiki/display/AST/Patch+Contribution+Process]. By: Friendly Automation (friendly-automation) 2018-07-18 10:22:38.528-0500 Change 9500 merged by George Joseph: SRTP: Lower SDES key lifetime minimum to 2^20 [https://gerrit.asterisk.org/9500|https://gerrit.asterisk.org/9500] By: Friendly Automation (friendly-automation) 2018-07-18 10:23:50.107-0500 Change 9503 merged by George Joseph: SRTP: Lower SDES key lifetime minimum to 2^20 [https://gerrit.asterisk.org/9503|https://gerrit.asterisk.org/9503] By: Friendly Automation (friendly-automation) 2018-07-18 10:24:03.496-0500 Change 9501 merged by George Joseph: SRTP: Lower SDES key lifetime minimum to 2^20 [https://gerrit.asterisk.org/9501|https://gerrit.asterisk.org/9501]