by removed line ca_list_file=/pbx/keys/ca.key 
ERROR[3301]: pjsip:0 <?>: ssl0x7fc8e40f8 Error loading CA list file 
'/pbx/keys/ca.key
gone.

But still cannot handle SRTP, phone says 488 error if I set 
media_encryption=sdes on an endpoint,

how do I check if srtp actually work on asterisk?
  
> On 03 Mar 2015, at 20:14, Nick Awesome <jl...@me.com> wrote:
> 
> Hey guys,tried to make tls work with pjsip on asterisk 13.2.0
> 
> have compiled pjsip with ssl,
> 
> added transport
> 
> [tls]
> type=transport
> cert_file=/pbx/keys/server.crt
> ca_list_file=/pbx/keys/ca.key
> priv_key_file=/pbx/keys/server.key
> protocol=tls
> bind=192.168.1.4:5061
> local_net=192.168.1.0/24
> external_media_address=77.77.77.77
> external_signaling_address=77.77.77.77 
> 
> have configured Grandstream GXP1400 to use tis and srtp, server.crt and 
> server.key uploaded to phone
> 
> ubuntu*CLI> pjsip show transports
> Transport:  tls                       tls      0      0  192.168.1.4:5061
> 
> so transport exist, have set endpoint transport to tls,
> 
> but for some reason phone getting timeout 408. tried from local network and 
> behind the nat, nothing. 

-- 
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
               http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to