RTSP/SRTP in gstreamer (MIKEY vrl2rtspserver)

[Manikandan Valaguru]

Hi,
i have also tired something like this

GST_DEBUG=5 gst-launch-1.0 rtspsrc location=rtsps://econ:econ@192.168.1.23:5005/routecam tls-validation-flags=0 protocols=udp   ! application/x-srtp,     srtp-key=a053ace0edcaba09192bff35fa01da61,     srtp-salt=70317cd36af12b87be015f416701,     srtp-cipher=aes-128-icm,     srtp-auth=hmac-sha1-80,     roc=0,     ssrc=0x508dfe7e   ! srtpdec   ! rtph264depay   ! avdec_h264   ! xvimagesink -v

0:00:00.981843700 125093 0x7fbb7801cb00 WARN                 srtpdec gstsrtpdec.c:1430:gst_srtp_dec_decode_buffer:<srtpdec_0> Error authentication packet, dropping
0:00:00.984209661 125093 0x7fbb7801cb00 WARN                 srtpdec gstsrtpdec.c:1430:gst_srtp_dec_decode_buffer:<srtpdec_0> Error authentication packet, dropping
0:00:00.986277125 125093 0x7fbb7801cb00 WARN                 srtpdec gstsrtpdec.c:1430:gst_srtp_dec_decode_buffer:<srtpdec_0> Error authentication packet, dropping
0:00:00.988455164 125093 0x7fbb7801cb00 WARN                 srtpdec gstsrtpdec.c:1430:gst_srtp_dec_decode_buffer:<srtpdec_0> Error authentication packet, dropping
0:00:00.990363340 125093 0x7fbb7801cb00 WARN                 srtpdec gstsrtpdec.c:1430:gst_srtp_dec_decode_buffer:<srtpdec_0> Error authentication packet, dropping
0:00:00.992391755 125093 0x7fbb7801cb00 WARN                 srtpdec gstsrtpdec.c:1430:gst_srtp_dec_decode_buffer:<srtpdec_0> Error authentication packet, dropping
________________________________
From: gstreamer-devel <gstreamer-devel-bounces at lists.freedesktop.org> on behalf of Manikandan Valaguru via gstreamer-devel <gstreamer-devel at lists.freedesktop.org>
Sent: Thursday, March 27, 2025 11:54 AM
To: gstreamer-devel at lists.freedesktop.org <gstreamer-devel at lists.freedesktop.org>
Cc: Manikandan Valaguru <manikandan.v at e-consystems.com>
Subject: RTSP/SRTP in gstreamer (MIKEY vrl2rtspserver)

Hi,
I am currently working with a custom v4l2rtspserver built on Live555, aiming to enable RTSPS (RTSP over TLS) and SRTP (Secure RTP) for secure video streaming. My objective is to stream encrypted video and successfully decode it in GStreamer.

Based on my understanding:

    RTSPS encryption and decryption rely on TLS certificates.

    SRTP requires a decryption key, which can be extracted from the MIKEY data in the SDP (Session Description Protocol) of the RTSP response.

    Using this key, I need to construct a GStreamer pipeline to decrypt SRTP packets.

Could you confirm if this approach is correct?

Currently, I am extracting the SRTP key from the SDP session and embedding it into the GStreamer pipeline as follows:

GST_DEBUG=3 gst-launch-1.0 rtspsrc location=rtsps://econ:econ@192.168.1.23:5005/routecam tls-validation-flags=4 protocols=udp \
    ! application/x-srtp, srtp-key=a053ace0edcaba09192bff35fa01da6170317cd36af12b87be015f416701, \
      srtp-cipher=aes-128-icm, srtp-auth=hmac-sha1-80, roc=0 \
    ! srtpdec \
    ! rtph264depay \
    ! avdec_h264 \
    ! xvimagesink -v

However, I am encountering issues during playback. I have attached the error logs and MIKEY data for reference. Could you please review them and let me know if I am missing anything?

Looking forward to your insights.

Regards,
Manikandan
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Taking any action in reliance on the contents of this information is strictly prohibited. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. WARNING: Although the company has taken reasonable precautions to ensure no viruses are present in this email, e-con cannot accept responsibility for any loss or damage arising from the use of this email or attachment.
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Taking any action in reliance on the contents of this information is strictly prohibited. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. WARNING: Although the company has taken reasonable precautions to ensure no viruses are present in this email, e-con cannot accept responsibility for any loss or damage arising from the use of this email or attachment.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/gstreamer-devel/attachments/20250327/bc5d2204/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: log2
Type: application/octet-stream
Size: 103099 bytes
Desc: log2
URL: <https://lists.freedesktop.org/archives/gstreamer-devel/attachments/20250327/bc5d2204/attachment-0001.obj>