Comment 0 for bug 1425914

Revision history for this message
Pavel (pavel-bazika) wrote :

Hi,

there is a problem in DTLS handshake in OpenSSL library in Ubuntu 12.04 x86_64. The affected library version is libssl 1.0.1-4ubuntu5.21. The problem causes, that it is impossible to establish DTLS session with both Chrome and Firefox when trying to perform a SIP call via WebRTC.

The problem is fixed in OpenSSL upstream by commit https://github.com/openssl/openssl/commit/a20152bdaf7a99b006ff5a0eef081502e0e11553
committed (April 4th 2012).

32bit version of Ubuntu 12.04 is not affected by this issue, because it doesn't support HMAC ciphers, which cause the problem.

I've checked other distributions (Centos6, Centos7, Ubuntu 14.04 and especially Debian 7 - which should be close to Ubuntu 12.04) and all has this patch applied and thus WebRTC calls work.

Please merge this upstream fix to Ubuntu 12.04 x86_64 libssl package.

Thanks