A
A
Andrey Barbolin2019-01-21 12:45:22
Asterisk
Andrey Barbolin, 2019-01-21 12:45:22

Setting up asterik 15 + PJSIP + TLS?

Set up a bunch of Asterisk 15 + PJSIP + TLS + SRTP.
The idea is that the client could set security settings on his side. That is, if he wants to use TLS + SRTP, he does not want to - he does not. There are no problems with registration, and outgoing calls work fine too. There is a problem with incoming calls. Server in INVITE sends
If media_encryption_optimistic=yes is enabled, then it sends and, accordingly, softphone with SRTP hangs up the call
m=audio 18564 RTP/AVP
a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:V3uqHJ6BZHh9fqM14Y5lRQ3fvAznKbVMruquJisl
Response
415 Unsupported_en
Typecryption= softphone without encryption stops receiving calls.
m=audio 18564 RTP/SAVP
a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:V3uqHJ6BZHhh9fqM14Y5lRQ3fvAznKbVMruquJisl
How can this happiness be destroyed?

exten = 1111,1,Verbose(1, "User ${CALLERID(num)} dialed ${EXTEN}.")                                                                                                                                      same = n,Set(DNUM=1111)                                                                                                                                                                
 same = n,Dial(${PJSIP_DIAL_CONTACTS(${DNUM})}${INTERNAL_DIAL_OPT})
 same = n,Hangup(17)

[1111](endpoint-nat)
auth = 1111
aors = 1111
force_avp=yes
media_encryption=sdes
media_use_received_transport=yes
callerid = Test User <1111>
context = Dial-Users
dtmf_mode=rfc4733
force_rport=yes
ice_support=yes
rewrite_contact=yes

Answer the question

In order to leave comments, you need to log in

1 answer(s)
A
Andrey Barbolin, 2019-01-23
@dronmaxman

If anyone is interested, I created such a topic on another forum and received an official answer that Asterisk does not support this functionality.
https://community.asterisk.org/t/asterisk-tls-srtp...

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question