The following attempted workaround also fails: 1. don't use DTLS=off, force transport rtpengine_manage("ICE=remove transport-protocol=RTP/SAVP"); 2. rtpengine side use dtls-passive rtpengine --dtls-passive
For some reason this also doesn't work, as rtpengine after rewritng SDP adds
a=setup:actpass a=fingerprint:sha-1 0F:21:F8:06:56:09:51:EC:B2:0B:47:A8:2D:98:D0:E7:E9:F7:0F:A9