Hello
I am trying to configure TLS in my asterisk server to use it with my grandstream phone.
I generated the keys and added the correct configuration in sip.conf file. I followed several tutorials and made sure that tlsenable=yes and transport=tls.
However, I don’t even receive the handshake when I sniff the packets , the account is not registered and when i tried to do core show peer in Asterisk CLI I receive: Prim.Transp. : UDP Allowed.Trsp : UDP, which simply doesn’t make sense.
Here’s my configuration:
[general]
transport=tls
context=default
tlsenable=yes
tlsbindaddr=0.0.0.0
tlscertfile=/etc/asterisk/certif/asterisk.pem
tlscafile=/etc/asterisk/certif/ca.crt
;tlsclientmethod=sslv23
;tlscipher=DES-EDE3-CBC
[enam]
type=peer
host=dynamic
secret=pwd200
context=test
transport=tls
tlsenable=yes
tcpenable=yes
tlsdontverifyserver=yes
allowsubscribe=yes
subscribecontext=BLF
notifyringing=yes
limitonpeers=yes
call-limit=99
encryption=yes
port=5061
Here is the message I receive when I perform sip reload:
[Jan 6 10:08:10] WARNING[13235]: chan_sip.c:30601 build_peer: ‘tls’ is not a valid transport type when tlsenable=no. If no other is specified, the defaults from general will be used.
== Parsing ‘/etc/asterisk/sip_notify.conf’: Found
Any help on what I can possibly do? or what is possibly wrong?
Many thanks