Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't pass SRTP to the other leg on reinvite if it was not secured on initial invite #274

Open
wants to merge 1 commit into
base: telnyx/telephony/sbc-certification
Choose a base branch
from

Conversation

Elhodred
Copy link

No description provided.

@@ -5314,7 +5314,7 @@ static void check_stream_changes(switch_core_session_t *session, const char *r_s
switch_core_media_merge_sdp_codec_string(session, r_sdp, sdp_type, filter_codec_string);
}

if (switch_channel_test_flag(session->channel, CF_SECURE)) {
if (switch_channel_test_flag(session->channel, CF_SECURE) && switch_channel_test_flag(other_session->channel, CF_SECURE)) {
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we also need to check the other_session for CF_SECURE. For example if somehow the current session isn't secure but the partner session is secure then we still need to execute switch_core_session_check_outgoing_crypto. If both is secured then we will set the crypto_mode and call switch_core_session_check_outgoing_crypto

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
2 participants