Only allow AES_CM_128_HMAC_SHA1_80 and AES_CM_128_HMAC_SHA1_32 cipher…

… for T34W and T44W Yealink phones
nethesis · Mar 19, 2024 · a89f533 · a89f533
1 parent 7eb565d
commit a89f533
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/data/templates/yealink.tmpl b/data/templates/yealink.tmpl
@@ -1862,6 +1862,10 @@ account.{{ line }}.enable_user_equal_phone = 0
 account.{{ line }}.srtp_encryption = {{ _context['account_encryption_' ~ line] ? '2' : '0' }}
 account.{{ line }}.srtp_unencrypted_rtp.enable = 0
 account.{{ line }}.srtp.unencrypted_rtcp.enable = 0
+# Fix SRTP error
+{% if provisioning_user_agent matches '/SIP-(T34W|T44W)/' %}
+account.{{ line }}.srtp.cipher_list = AES_CM_128_HMAC_SHA1_80,AES_CM_128_HMAC_SHA1_32
+{% endif %}
 account.{{ line }}.ptime = 20
 account.{{ line }}.register_line = 0
 account.{{ line }}.register_mac = 0