Given the limitations around Asterisk‘s TLS support, and all the benefits of using a SIP proxy, I’ve put together a rough guide about how to use the repro SIP proxy as a front-end for Asterisk connectivity with TLS peers:
It works for TLS from phones, but also for full federated SIP with any other SIP-enabled domain on the public Internet.
* repro does all the connectivity work (certificate validation, etc) and registration service
* Asterisk sits in the background and provides applications (voicemail, queues, etc)
Any feedback, questions or discussion about this is very welcome.