[Freeswitch-users] TLS-Support

[Brian West]

You need to make sure you have openssl-devel when you configure/ 
compile Sofia otherwise it's not enabled.  Also their is more to it  
than "bin/gentls_cert setup"

http://wiki.freeswitch.org/wiki/Tls

Thanks,
Brian



On May 19, 2008, at 7:52 AM, Helmut Kuper wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hello,
>
> I try to get SIPS via TLS/TCP up. Unfortunately I get this error in
> console as a non root user:
>
> tport_bind_server(0x80febb8) to */85.16.246.5:5061/sips
> nta: bind(85.16.246.5:5061;transport=*): Protocol not supported
> nua: initializing SIP stack failed
> tport_destroy(0x80febb8)
> 2008-05-19 14:27:06 [ERR] sofia.c:551 sofia_profile_thread_run() Error
> Creating SIP UA for profile: internal
>
>
> in sip_profiles/internal.xml I configured TLS support as follows:
>
> ~    <!-- TLS: disabled by default, set to "true" to enable -->
> ~    <param name="tls" value="true"/>
> ~    <!-- additional bind parameters for TLS -->
> ~    <param name="tls-bind-params" value="transport=tls"/>
> ~    <!-- Port to listen on for TLS requests. (5061 will be used if
> unspecified) -->
> ~    <param name="tls-sip-port" value="5061"/>
> ~    <!-- Location of the agent.pem and cafile.pem ssl certificates
> (needed for TLS server) -->
> ~    <param name="tls-cert-dir" value="$${base_dir}/conf.tls/ssl"/>
> ~    <!-- TLS version ("sslv23" (default), "tlsv1"). NOTE: Phones  
> may not
> work with TLSv1 -->
> ~    <param name="tls-version" value="tlsv1"/>
>
>
> I did a "bin/gentls_cert setup" to generate a CA.
>
> Maybe I habe to compile FS with TLS support?
>
>
> regards
> Helmut
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.8 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkgxeBoACgkQ4tZeNddg3dyCpwCgj7pfQvJKMWKevJVyeIU6dQmy
> xcwAnidYgk6rA6p0YziRHkbJ1biQYuBA
> =DIYB
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Freeswitch-users mailing list
> Freeswitch-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org

Brian West
sip:brian at freeswitch.org