Please go through this article on wiki.... http://en.wikipedia.org/wiki/Transport_Layer_Security Hope it may help you understand better. BR, Irshad. On Jan 31, 2008 12:49 PM, Karl Kloppenborg <karl@dragnet.com.au> wrote:
im not familiar with TLS,can someone please explain? On 31/01/2008, at 6:04 PM, Brian West wrote:
Well for the snom its easy:
http://wiki.snom.com/Old/ FAQ#Q:_How_can_I_setup_snom3xx_phones_for_TLS_support.3F
Be warned you'll need to have var sip-force-contact set to NDLB-tls- connectile-dysfunction on the user. set so we watch for the correct port. As for the grandstream no clue. I don't have one that actually works.
Snom is fixing this TLS but in up coming firmware releases as it reports the wrong contact in the register.
/b
On Jan 31, 2008, at 12:52 AM, Irshad Ahamed wrote:
I have SNOM 300 and Grandstream GXP2000 with me.
BR, Irshad.
On Jan 31, 2008 12:03 PM, Brian West <brian.west@mac.com> wrote: What phone do you have?
/b
On Jan 31, 2008, at 12:21 AM, Irshad Ahamed wrote:
Hi,
I have added the below lines in /usr/local/freeswitch/conf/ sip_profiles/default.xml.
<!-- TLS: disabled by default, set to "true" to enable --> <param name="tls" value="true"/> <!-- additional bind parameters for TLS --> <param name="tls-bind-params" value="transport=tls"/> <!-- Port to listen on for TLS requests. (5061 will be used if unspecified) --> <param name="tls-sip-port" value="5061"/> <!-- Location of the agent.pem and cafile.pem ssl certificates (needed for TLS server) --> <param name="tls-cert-dir" value="$${base_dir}/conf/ssl"/> <!-- TLS version ("sslv23" (default), "tlsv1"). NOTE: Phones may not work with TLSv1 --> Which phones you mean will not work???? <param name="tls-version" value="tlsv1"/>
I also copied cafile.pem and agent.pem to /usr/local/freeswitch/ conf/ ssl/
But I am seeing SIP siganlling going on UDP still. Am i missing some link here????
BR, Irshad.
_______________________________________________ Freeswitch-dev mailing list Freeswitch-dev@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch- dev http://www.freeswitch.org
_______________________________________________ Freeswitch-dev mailing list Freeswitch-dev@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch- dev http://www.freeswitch.org
_______________________________________________ Freeswitch-dev mailing list Freeswitch-dev@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-dev http://www.freeswitch.org
_______________________________________________ Freeswitch-dev mailing list Freeswitch-dev@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-dev http://www.freeswitch.org