#1086030 asterisk: TURN support ist broken: DTLS packet from [::1]:xxxx dropped. Source not in ICE active candidate list.

Package:
asterisk
Source:
asterisk
Description:
Open Source Private Branch Exchange (PBX)
Submitter:
David Gunzinger
Date:
2024-10-25 09:42:02 UTC
Severity:
normal
Tags:
#1086030#5
Date:
2024-10-25 09:31:23 UTC
From:
To:
Dear Maintainer,

Asterisk fails to route over a TURN server. When setting core set debug category rtp:3 for ICE, the following error appears:
DTLS packet from [::1]:12868 dropped. Source not in ICE active candidate list.

This error stems from the Debian patch debian/patches/CVE-2023-49786.patch.
Building the package without this patch allows TURN functionality to work properly.

Upstream addressed this issue with an additional patch, available in commit 8c3ececb12d82ee5d63adad6b9f9e79ad239e803.
Cherry-picking and applying this patch to the source package resolves the problem.

Best Regards