Hi Matt,
Yes, you can do that. OpenSIPS can do protocol exchange so it can switch
from TLS to UDP. I would recommand to use 1.11 as 1.7 is outdates and
not maintain.
And yes, the TLS module had a lot of fixes in the last years, not to
mentioned the TCP stack (TLS relies on it!).
Regards,
Bogdan-Andrei Iancu
OpenSIPS Founder and Developer
http://www.opensips-solutions.com
On 22.08.2015 02:34, Matt Hamilton wrote:
We are using Opensips as a dispatcher to Asterisk servers. The call
flow for incoming calls to UAC is below (outbound is reversed).
telco -> opensips1 -> asterisk -> opensips1 -> UAC (SIP phones)
We are at the planning stages of implementing TLS. Asterisk (1.8.x),
Opensips (1.7.1 TLS) and the phones are TLS-capable. Is it possible to
have TLS just between Opensips and the phones, and not touch the
traffic between Asterisk and Opensips? If TLS on Asterisk is not
enabled, will traffic flow between Opensips and Asterisk
(unencrypted)? Both Opensips server and Asterisk servers are at the
same location, so it's not really necessary to secure that leg.
Also, do you recommend upgrading Opensips to 2.1 first and then
enabling TLS? I know our version (1.7.1) is pretty old, but it's been
very stable for us without TLS. I'm wondering if the TLS module has
improved (performance, etc.) since then? (We will do the upgrade this
year - just trying to time it).
Thanks,
Matt
_______________________________________________
Users mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/users
_______________________________________________
Users mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/users
