Update libsrtp to 1.5.4 or later

VitalPBX
1

Hi,

I’ve some SRTP issues, and the Asterisk wiki…
https://wiki.asterisk.org/wiki/display/AST/libsrtp
…says ‘the minimum supported version of libsrtp supported by Asterisk is 1.5.4’.

Unfortunately, CentOS 7 only includes libsrtp up to 1.4.4.

So can you tell me how to securely update to libsrtp 1.5.4 or later?
I would prefer a followable step-by-step guide.

BR

2

Me again…

I see masses of messages like this…

WARNING[5417][C-0000002a]: chan_sip.c:10937 process_sdp: Failed to receive SDP offer/answer with required SRTP crypto attributes for audio
  == SRTP unprotect failed on SSRC 218124252 because of authentication failure 10
  == SRTCP unprotect failed on SSRC 218124252 because of authentication failure
  == SRTP unprotect failed on SSRC 218124252 because of authentication failure 160
  == SRTCP unprotect failed on SSRC 218124252 because of authentication failure
  == SRTP unprotect failed on SSRC 218124252 because of authentication failure 160
  == SRTP unprotect failed on SSRC 218124252 because of authentication failure 160
  == SRTCP unprotect failed on SSRC 218124252 because of authentication failure
  == SRTP unprotect failed on SSRC 218124252 because of authentication failure 160
  == SRTP unprotect failed on SSRC 218124252 because of authentication failure 160
  == SRTCP unprotect failed on SSRC 218124252 because of authentication failure
  == SRTP unprotect failed on SSRC 218124252 because of authentication failure 160
  == SRTCP unprotect failed on SSRC 218124252 because of authentication failure
  == SRTP unprotect failed on SSRC 218124252 because of authentication failure 160

Same issue as described here…

But should also be solved by this, as already described above…
https://wiki.asterisk.org/wiki/display/AST/libsrtp

So please can anybody help how to install libsrtp 1.5.4 or later on Vital?

BR

3

@pbxprovider,

We expect to migrate to Debian in a couple of months maybe Debian comes with the latest version of the libsrtp library.

Our asterisk packages come compiled with the flag “–with-pjproject-bundled”, I don’t really know if activating this flag makes Asterisk download the right version of the libsrtp library, but the Asterisk documentation says the following:

For production builds and use ./configure --with-pjproject-bundled (of course) to make sure both Asterisk and pjproject are in sync with respect to library versions.