Hello Bob, sure, this does work. I have a couple of phones working with TLS and SRTP and they all communicate to the outside world through Freeswitch via SIP and RTP. You have to ensure though that Freeswitch is not is proxy or bypass media mode. Best regards Peter Am 05.01.2012 22:38, schrieb Bob Smith:

Hello List,

To save me much head-banging and time-wasting, could someone please tell me whether it is possible to configure Freeswitch so that an endpoint can register over TLS, but can route out to and receive calls from the big bad unencrypted outside world ?

I've got a basic DDI config at the moment that I can receive calls on fine when endpoint registers as unencrypted. But the moment I turn on TLS, the DDI no longer rings.

I've followed the instructions here http://wiki.freeswitch.org/wiki/SIP_TLS to enable TLS (only enabling TLS on the internal Sofia obviously). By the way, it would be great if someone could update those instructions with more detail as to how to get things working with a commercial certificate, as I had no luck making it work, so there's obviously a trick that's missing, and had to resort to a self signed one.

Thanks

Bob

_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com

Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com

FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

-- With kind regards Peter Steinbach Telefaks Services GmbH mailto:lists (att) telefaks.de Internet: www.telefaks.de