Skip to main content

rtp_secure_media

Created by Ryan Harris, last modified by Branden Jordan on 2020.07.26

rtp_secure_media​

string

Syntax: rtp_secure_media=<permission>[:<list of encryption suites>]

sip_secure_media is no longer implemented

permission:

  • mandatory - Accept/Offer SAVP negotiation ONLY
  • optional - Accept/Offer SAVP/AVP with SAVP preferred
  • forbidden - More useful for inbound to deny SAVP negotiation
  • deprecatedfalse - implies forbidden
  • deprecatedtrue - implies mandatory
  • default - accept SAVP inbound if offered

encryption suites:

  • AEAD_AES_256_GCM_8
  • AEAD_AES_128_GCM_8
  • AES_CM_256_HMAC_SHA1_80
  • AES_CM_192_HMAC_SHA1_80
  • AES_CM_128_HMAC_SHA1_80
  • AES_CM_256_HMAC_SHA1_32
  • AES_CM_192_HMAC_SHA1_32
  • AES_CM_128_HMAC_SHA1_32
  • AES_CM_128_NULL_AUTH

Examples:

  • rtp_secure_media=mandatory:AES_CM_256_HMAC_SHA1_80,AES_CM_256_HMAC_SHA1_32
  • rtp_secure_media=true:AES_CM_256_HMAC_SHA1_80,AES_CM_256_HMAC_SHA1_32
  • rtp_secure_media=optional:AES_CM_256_HMAC_SHA1_80
  • rtp_secure_media=true:AES_CM_256_HMAC_SHA1_80