title: Error 488 Not acceptable here
body: <p>Hello I know there are already lot of topics about this error (or perhaps I don't have the same problem) but none of them answered my question, I am in a local network with blink on my PC and my asterisk server is on an external server hosted by ovh (so there is nat to do). I control the server via encrypted ssh session ofc.
  As long as the call is not encrypted, everything is fine, I can call any user I want. But when I started to encrypt my traffic everything went wrong and I can't find why.I've generated certficate for both client and server, the traffic is encrypted because I can't see anything in wireshark(I can't see encrypted traffic but I see non-encrypted traffic). Blink is configured correctly with SDES mandatory, .pem file, car.crt , proxy on port 5061 tls, but I think the error is somewhere else.
  Myconig for sip.conf is like this:</p>
  
  <pre><code>[general]
  udpbindaddr=0.0.0.0
  tcpenable=yes                    ; Enable server for incoming TCP connections (default is no)
  tcpbindaddr=0.0.0.0             ; IP address for TCP server to bind to (0.0.0.0 binds to all interfaces)                                ; Optionally add a port number, 192.168.1.1:5062 (default is port 5060)
  tlsenable=yes               ; Enable server for incoming TLS (secure) connections (default is no)
  tlsbindaddr=0.0.0.0   
  transport=udp
  disallow=all       
  allow=ulaw                     ; Allow codecs in order of preference
  allow=alaw
  dtmfmode = rfc2833
  tlscertfile=/etc/asterisk/keys/asterisk.pem
  tlscafile=/etc/asterisk/keys/ca.crt
  tlscipher=ALL
  tlsclientmethod=tlsv1 
  [201](can't communicate instant 488 error)
  type=friend
  username=vincent
  context=from-sip
  host=dynamic
  secret=not4usry
  callerid=vincent&lt;201&gt;
  mailbox=201@default
  nat=comedia
  transport=tls
  encryption=yes
  [203](no tls user and can communicate with the ones who don't use tls)
  type=friend
  username=antoine
  context=from-sip
  host=dynamic
  secret=not4usry
  callerid=antoine&lt;203&gt;
  mailbox=203@default
  nat=comedia
  </code></pre>
  
  <p>Certificates have been generated using ./ast_tls_cert....</p>
  
  <p>RTP logs</p>
  
  <blockquote>
    <p>== Using SIP RTP CoS mark 5 [May 11 15:34:33]
    WARNING[21893][C-00000d0e]: chan_sip.c:10803 process_sdp: Rejecting
    secure audio stream without encryption details: audio 50026 RTP/SAVP
    113 9 0 8 101</p>
  </blockquote>
  
  <p>SIP LOGS</p>
  
  <blockquote>
    <p>INVITE sip:203@vps466556.ovh.net SIP/2.0</p>
    
    <p>Via: SIP/2.0/TLS
    192.168.1.35:53076;rport;branch=z9hG4bKPj275105fe6a304b89b2b18ee5186b5085;alias</p>
    
    <p>Max-Forwards: 70</p>
    
    <p>From: "Vincent"
    ;tag=523fe49e3a8646608481fbac0801b605</p>
    
    <p>To: </p>
    
    <p>Contact: </p>
    
    <p>Call-ID: 0fb841de523e4ff0a74514247bb3445a</p>
    
    <p>CSeq: 4966 INVITE</p>
    
    <p>Allow: SUBSCRIBE, NOTIFY, INVITE, ACK, BYE, CANCEL, UPDATE, MESSAGE,
    REFER</p>
    
    <p>Supported: replaces, norefersub, gruu</p>
    
    <p>User-Agent: Blink 3.0.0 (Windows)</p>
    
    <p>Content-Type: application/sdp</p>
    
    <p>Content-Length:   425</p>
    
    <p>v=0</p>
    
    <p>o=- 3735043210 3735043210 IN IP4 192.168.1.35</p>
    
    <p>s=Blink 3.0.0 (Windows)</p>
    
    <p>t=0 0</p>
    
    <p>m=audio 50004 RTP/AVP 113 9 0 8 101</p>
    
    <p>c=IN IP4 192.168.1.35</p>
    
    <p>a=rtcp:50005</p>
    
    <p>a=rtpmap:113 opus/48000/2</p>
    
    <p>a=fmtp:113 useinbandfec=1</p>
    
    <p>a=rtpmap:9 G722/8000</p>
    
    <p>a=rtpmap:0 PCMU/8000</p>
    
    <p>a=rtpmap:8 PCMA/8000</p>
    
    <p>a=rtpmap:101 telephone-event/8000</p>
    
    <p>a=fmtp:101 0-16</p>
    
    <p>a=zrtp-hash:1.10
    af10bf32a78e03147ffbf2859f96cc8d401048ee46a1f2cb961c20139b219913</p>
    
    <p>a=sendrecv</p>
    
    <p>-- 2018-05-11 16:00:11.003276 [blink.exe 3320]: RECEIVED: Packet 136, +0:06:21.266013
    54.37.8.124:5061 -(SIP over TLS)-> 192.168.1.35:53076 SIP/2.0 401 Unauthorized</p>
    
    <p>Via: SIP/2.0/TLS
    192.168.1.35:53076;branch=z9hG4bKPj275105fe6a304b89b2b18ee5186b5085;alias;received=90.112.223.194;rport=53076</p>
    
    <p>From: "Vincent"
    ;tag=523fe49e3a8646608481fbac0801b605</p>
    
    <p>To: ;tag=as50eb1885</p>
    
    <p>Call-ID: 0fb841de523e4ff0a74514247bb3445a</p>
    
    <p>CSeq: 4966 INVITE</p>
    
    <p>Server: Asterisk PBX 13.21.0</p>
    
    <p>Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY,
    INFO, PUBLISH, MESSAGE</p>
    
    <p>Supported: replaces, timer</p>
    
    <p>-Authenticate: Digest algorithm=MD5, realm="asterisk", nonce="6650a402"</p>
    
    <p>Content-Length: 0</p>
    
    <p>-- 2018-05-11 16:00:11.004276 [blink.exe 3320]: SENDING: Packet 137, +0:06:21.267013
    192.168.1.35:53076 -(SIP over TLS)-> 54.37.8.124:5061 ACK sip:203@vps466556.ovh.net SIP/2.0</p>
    
    <p>Via: SIP/2.0/TLS
    192.168.1.35:53076;rport;branch=z9hG4bKPj275105fe6a304b89b2b18ee5186b5085;alias</p>
    
    <p>Max-Forwards: 70</p>
    
    <p>From: "Vincent"
    ;tag=523fe49e3a8646608481fbac0801b605</p>
    
    <p>To: ;tag=as50eb1885</p>
    
    <p>Call-ID: 0fb841de523e4ff0a74514247bb3445a</p>
    
    <p>CSeq: 4966 ACK</p>
    
    <p>User-Agent: Blink 3.0.0 (Windows)</p>
    
    <p>Content-Length:  0</p>
    
    <p>-- 2018-05-11 16:00:11.005276 [blink.exe 3320]: SENDING: Packet 138, +0:06:21.268013
    192.168.1.35:53076 -(SIP over TLS)-> 54.37.8.124:5061 INVITE sip:203@vps466556.ovh.net SIP/2.0</p>
    
    <p>Via: SIP/2.0/TLS
    192.168.1.35:53076;rport;branch=z9hG4bKPj3e8da342afaa41a385d9989648fd069f;alias</p>
    
    <p>Max-Forwards: 70</p>
    
    <p>From: "Vincent"
    ;tag=523fe49e3a8646608481fbac0801b605</p>
    
    <p>To: </p>
    
    <p>Contact: </p>
    
    <p>Call-ID: 0fb841de523e4ff0a74514247bb3445a</p>
    
    <p>CSeq: 4967 INVITE</p>
    
    <p>Allow: SUBSCRIBE, NOTIFY, INVITE, ACK, BYE, CANCEL, UPDATE, MESSAGE,
    REFER</p>
    
    <p>Supported: replaces, norefersub, gruu</p>
    
    <p>User-Agent: Blink 3.0.0 (Windows)</p>
    
    <p>Authorization: Digest username="201", realm="asterisk",
    nonce="6650a402", uri="sip:203@vps466556.ovh.net",
    response="dcd6fcd9d8b7381f86f07e1326aa9134", algorithm=MD5</p>
    
    <p>Content-Type: application/sdp</p>
    
    <p>Content-Length:   425</p>
    
    <p>v=0</p>
    
    <p>o=- 3735043210 3735043210 IN IP4 192.168.1.35</p>
    
    <p>s=Blink 3.0.0 (Windows)</p>
    
    <p>t=0 0</p>
    
    <p>m=audio 50004 RTP/AVP 113 9 0 8 101</p>
    
    <p>c=IN IP4 192.168.1.35</p>
    
    <p>a=rtcp:50005</p>
    
    <p>a=rtpmap:113 opus/48000/2</p>
    
    <p>a=fmtp:113 useinbandfec=1</p>
    
    <p>a=rtpmap:9 G722/8000</p>
    
    <p>a=rtpmap:0 PCMU/8000</p>
    
    <p>a=rtpmap:8 PCMA/8000</p>
    
    <p>a=rtpmap:101 telephone-event/8000</p>
    
    <p>a=fmtp:101 0-16</p>
    
    <p>a=zrtp-hash:1.10
    af10bf32a78e03147ffbf2859f96cc8d401048ee46a1f2cb961c20139b219913</p>
    
    <p>a=sendrecv</p>
    
    <p>-- 2018-05-11 16:00:11.087226 [blink.exe 3320]: RECEIVED: Packet 139, +0:06:21.349963
    54.37.8.124:5061 -(SIP over TLS)-> 192.168.1.35:53076 SIP/2.0 488 Not acceptable here</p>
    
    <p>Via: SIP/2.0/TLS
    192.168.1.35:53076;branch=z9hG4bKPj3e8da342afaa41a385d9989648fd069f;alias;received=90.112.223.194;rport=53076</p>
    
    <p>From: "Vincent"
    ;tag=523fe49e3a8646608481fbac0801b605</p>
    
    <p>To: ;tag=as50eb1885</p>
    
    <p>Call-ID: 0fb841de523e4ff0a74514247bb3445a</p>
    
    <p>CSeq: 4967 INVITE</p>
    
    <p>Server: Asterisk PBX 13.21.0</p>
    
    <p>Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY,
    INFO, PUBLISH, MESSAGE</p>
    
    <p>Supported: replaces, timer</p>
    
    <p>Content-Length: 0</p>
    
    <p>-- 2018-05-11 16:00:11.088227 [blink.exe 3320]: SENDING: Packet 140, +0:06:21.350964
    192.168.1.35:53076 -(SIP over TLS)-> 54.37.8.124:5061 ACK sip:203@vps466556.ovh.net SIP/2.0</p>
    
    <p>Via: SIP/2.0/TLS
    192.168.1.35:53076;rport;branch=z9hG4bKPj3e8da342afaa41a385d9989648fd069f;alias</p>
    
    <p>Max-Forwards: 70</p>
    
    <p>From: "Vincent"
    ;tag=523fe49e3a8646608481fbac0801b605</p>
    
    <p>To: ;tag=as50eb1885</p>
    
    <p>Call-ID: 0fb841de523e4ff0a74514247bb3445a</p>
    
    <p>CSeq: 4967 ACK</p>
    
    <p>User-Agent: Blink 3.0.0 (Windows)</p>
    
    <p>Content-Length:  0</p>
  </blockquote>
  
  <p>Thanks for your help,  Vince</p>