Asterisk Secure call TLS SRTP

本帖最後由 harold 於 2018-3-1 13:54 編輯

因為GSWave 有無多免費好用嘅功能，所以加咗啲嘢係Asterisk Server 到，可以比大家參考下
我係用Asterisk 13.13.1, 唔洗再安裝其它嘢

https://wiki.asterisk.org/wiki/d ... re+Calling+Tutorial

no additional install in asterisk 13.13.1

mkdir /etc/asterisk/certkey

Next, use the "ast_tls_cert" script in the "contrib/scripts" Asterisk source directory to make a self-signed certificate authority and an Asterisk certificate.
./ast_tls_cert -C Your_Domain -O "Your Name" -d /etc/asterisk/certkey
Enter pass phrase for /etc/asterisk/certkey/ca.key:Your_Password
./ast_tls_cert -m client -c /etc/asterisk/certkey/ca.crt -k /etc/asterisk/certkey/ca.key -C Your_Domain -O "Your_Name" -d /etc/asterisk/certkey -o YourSIPClient
chmod -R -f 755 cert/

sip.conf
externtlsport = 5061
tlsenable=yes
tlsbindaddr=0.0.0.0:5061
tlscertfile=/etc/asterisk/certkey/asterisk.pem
tlsprivatekey=/etc/asterisk/certkey/asterisk.key
tlscafile=/etc/asterisk/certkey/ca.crt
tlscapath=/etc/asterisk/certkey/
tlscipher=ALL
tlsclientmethod=tlsv1

[User]
transport=tls
encryption=yes

Check User “ asterisk -rx "sip show peer (User)”
Prim.Transp. : TLS
Allowed.Trsp : TLS

OBI TLS 設定

唔知點解OBI SRTP 設定咗都唔得，响完一pickup 就線，估計係唔係好support,所以放棄！

Asterisk sip.conf

transport=tls
encryption=no ；SRTP 設定但唔work
ignorecryptolifetime=yes

OBI110
Service Provider -> ITS Profile SIP -> Proxy ServerTransport->TLS