[Freeswitch-users] Forcing SRTP/TLS connections

[Avi Marcus]

For lack of other responses so far.. these may be hacky:
1) mess with the ports - TLS and regular are on different ports. set 5060
for the tls and disable / firewall the non-tls port.
2) re: srtp you can check if it's on in the dialplan, and if not redirect to
some sort of error message instead of completing the call.
Not sure you would want to completely disable non-tls/srtp though... I
suppose it depends on your usage.

-Avi

On Sun, May 29, 2011 at 7:37 PM, Chris Cureau <cmcureau at gmail.com> wrote:

> Hi, everyone.
>
> I've begun experimenting with SRTP and TLS connections since the ZRTP
> download seems offline for the foreseeable future...sigh.
>
> I've got the SRTP enabled in my conf/vars.xml for both internal and
> external connections, but it appears that I can still connect without
> security from an unconfigured ATA.  What I want to know is how to enforce a
> secure connection at registration time.  Ideally, I'd like to do this both
> between two freeswitch servers and between a freeswitch server and an ATA.
>
> Thanks in advance!
>
> _______________________________________________
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20110529/78ba81cb/attachment.html