On Sun, Jun 13, 2010 at 5:02 PM, Tony Graziano <[email protected]> wrote: > I think it would be better if you expressed what you are trying to do. >
As Dale Worley put it in his reply, "4.2 should have TLS support for communicating with phones." We want SIP Trunking over TLS and phone registration over TLS so that SIP credentials are not sent in the clear. > As I understand it in 4.2, TLS supports "sipxecs-to-sipxecs" calling > and trunking to a provider that might support TLS. Yeah, this was my initial understanding as well. > If the phone is on > a conversation that uses one of these calls this is one thing, but I > was not aware that TLS extended down to the phone for all calls. In > looking at the tracker and the wiki for 4.2 improvements, I see > nothing that indicates all calls for a phone would be supported under > TLS. I doubt if recompiling will help, since I don't think this work > has been done. > Yeah, I wasn't really expecting bearer traffic to be encrypted. But, the 4.2 feature list lists: * TLS support for secure signaling I take this to mean phone registration (SIP username and password) would be encrypted. > http://wiki.sipfoundry.org/display/xecsuserV4r2/Using+TLS > That looks useful for SIP trunk encryption. Thanks for the link. > Feel free to ignore me if you feel my comments are uninformed. Though > you may want to be more detailed and post this to sipx-dev before you > waste time comiling something that will not give you the results you > want. > I really appreciate your quick replies. The default RPMS from sipfoundry do not have the "--enable-sip-tls" option configured in. I'll copy the sipx-dev list. Thanks. -- Jiann-Ming Su "I have to decide between two equally frightening options. If I wanted to do that, I'd vote." --Duckman "The system's broke, Hank. The election baby has peed in the bath water. You got to throw 'em both out." --Dale Gribble "Those who vote decide nothing. Those who count the votes decide everything.” --Joseph Stalin _______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/
