Cannot Configure PJSIP TLS

Home » Asterisk Users » Cannot Configure PJSIP TLS
Asterisk Users 1 Comment

Hey guys,tried to make tls work with pjsip on asterisk 13.2.0

have compiled pjsip with ssl,

added transport

[tls]
type=transport cert_file=/pbx/keys/server.crt ca_list_file=/pbx/keys/ca.key priv_key_file=/pbx/keys/server.key protocol=tls bind=192.168.1.4:5061
local_net=192.168.1.0/24
external_media_address=77.77.77.77
external_signaling_address=77.77.77.77

have configured Grandstream GXP1400 to use tis and srtp, server.crt and server.key uploaded to phone

ubuntu*CLI> pjsip show transports Transport: tls tls 0 0 192.168.1.4:5061

so transport exist, have set endpoint transport to tls,

but for some reason phone getting timeout 408. tried from local network and behind the nat, nothing.

One thought on - Cannot Configure PJSIP TLS

  • by removed line ca_list_file=/pbx/keys/ca.key ERROR[3301]: pjsip:0 : ssl0x7fc8e40f8 Error loading CA list file ‘/pbx/keys/ca.key gone.

    But still cannot handle SRTP, phone says 488 error if I set media_encryption=sdes on an endpoint,

    how do I check if srtp actually work on asterisk?