diff --git a/doc/siptls.txt b/doc/siptls.txt index 3a54bf09546a227ba1b02784f381efbc8e48a6ff..482939aa1210e0ebc74f05c7b966f2b35cea19d8 100644 --- a/doc/siptls.txt +++ b/doc/siptls.txt @@ -4,17 +4,17 @@ Asterisk SIP/TLS Transport When using TLS the client will typically check the validity of the certificate chain. So that means you either need a certificate that is signed by one of the larger CAs, or if you use a self signed certificate -you must install a copy of your CA on the client. +you must install a copy of your CA certificate on the client. So far this code has been test with: -Asterisk as client and server (TLS and TCP) -Polycom Soundpoint IP Phones (TLS and TCP) +- Asterisk as client and server (TLS and TCP) +- Polycom Soundpoint IP Phones (TLS and TCP) Polycom phones require that the host (ip or hostname) that is configured match the 'common name' in the certificate -Minisip Softphone (TLS and TCP) -Cisco IOS Gateways (TCP only) -SNOM 360 (TLS only) -Zoiper Biz Softphone (TLS and TCP) +- Minisip Softphone (TLS and TCP) +- Cisco IOS Gateways (TCP only) +- SNOM 360 (TLS only) +- Zoiper Biz Softphone (TLS and TCP) sip.conf options @@ -26,7 +26,7 @@ tlsbindaddr=<ip address> Specify IP address to bind TLS server to, default is 0.0.0.0 tlscertfile=</path/to/certificate> - The server's certificate file. Should include the key and + The server's certificate file. Should include the key and certificate. This is mandatory if your going to run a TLS server. tlscafile=</path/to/certificate> @@ -56,6 +56,7 @@ Here are the relevant bits of config for setting up TLS between 2 asterisk servers. With server_a registering to server_b On server_a: + [general] tlsenable=yes tlscertfgile=/etc/asterisk/asterisk.pem