Author: brian Date: Sat Aug 30 14:25:53 2008 New Revision: 9388 Modified: freeswitch/trunk/conf/sip_profiles/external.xml Log: you have to have this on each profile for TLS to be enabled Modified: freeswitch/trunk/conf/sip_profiles/external.xml ============================================================================== --- freeswitch/trunk/conf/sip_profiles/external.xml (original) +++ freeswitch/trunk/conf/sip_profiles/external.xml Sat Aug 30 14:25:53 2008 @@ -39,5 +39,17 @@ <param name="rtp-timeout-sec" value="300"/> <param name="rtp-hold-timeout-sec" value="1800"/> <!--<param name="enable-3pcc" value="true"/>--> + + <!-- TLS: disabled by default, set to "true" to enable --> + <param name="tls" value="false"/> + <!-- additional bind parameters for TLS --> + <param name="tls-bind-params" value="transport=tls"/> + <!-- Port to listen on for TLS requests. (5061 will be used if unspecified) --> + <param name="tls-sip-port" value="5081"/> + <!-- Location of the agent.pem and cafile.pem ssl certificates (needed for TLS server) --> + <param name="tls-cert-dir" value="$${base_dir}/conf/ssl"/> + <!-- TLS version ("sslv23" (default), "tlsv1"). NOTE: Phones may not work with TLSv1 --> + <param name="tls-version" value="tlsv1"/> + </settings> </profile>