VoIP Mailing List Archives

[jleed at me.com]

Hey guys,tried to make tls work with pjsip on asterisk 13.2.0

have compiled pjsip with ssl,

added transport

[tls]
type=transport
cert_file=/pbx/keys/server.crt
ca_list_file=/pbx/keys/ca.key
priv_key_file=/pbx/keys/server.key
protocol=tls
bind=192.168.1.4:5061
local_net=192.168.1.0/24
external_media_address=77.77.77.77
external_signaling_address=77.77.77.77

have configured Grandstream GXP1400 to use tis and srtp, server.crt and server.key uploaded to phone

ubuntu*CLI> pjsip show transports

Transport: tls tls 0 0 192.168.1.4:5061


so transport exist, have set endpoint transport to tls,

but for some reason phone getting timeout 408. tried from local network and behind the nat, nothing.

[jleed at me.com]

by removed line ca_list_file=/pbx/keys/ca.key ERROR[3301]: pjsip:0 <?>: ssl0x7fc8e40f8 Error loading CA list file '/pbx/keys/ca.key
gone.

But still cannot handle SRTP, phone says 488 error if I set media_encryption=sdes on an endpoint,

how do I check if srtp actually work on asterisk?