so i followed this guide exactly to make everything and yes everything went well.. but only problem is my domain status in SBC is still UNKNOWN.
here is my PJSIP.CONF
Blockquote
;===============TRANSPORTS
[transport-udp]
type=transport
protocol=udp
bind=0.0.0.0:5060
[transport-tls]
type=transport
protocol=tls
bind=0.0.0.0:5061
cert_file=/etc/asterisk/ssl/cert.crt
ca_list_file=/etc/asterisk/ssl/ca.crt
priv_key_file=/etc/asterisk/ssl/privkey.crt
cipher=ECDHE-RSA-CHACHA20-POLY1305,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-AES128-GCM-SHA256,ECDHE-RSA-AES256-S>
method=tlsv1_2
local_net=10.0.0.0/8,192.168.0.0/16
external_media_address=192.168.9.1
external_signaling_address=192.168.9.1
;===============ENDPOINT TEMPLATES
endpoint-basic
type=endpoint
context=internal
allow=!all,g722,alaw,ulaw
auth-userpass
type=auth
auth_type=userpass
aor-single-reg
type=aor
max_contacts=50
;--------------------
;TEAMS-OUT
;--------------------
[teams-out]
type=endpoint
transport=transport-tls
context=teams
allow=!all,g722,alaw,ulaw
media_encryption=sdes
from_user =+14155347515
from_domain=bsc.voiperworld.com
refer_blind_progress=no
aors=teams-out
;
[teams-out]
type=aor
qualify_frequency=60
contact=sip:sip.pstnhub.microsoft.com
;--------------------
;TEAMS-IN
;--------------------
[teams-in]
type=endpoint
transport=transport-tls
context=teams
allow=!all,g722,alaw,ulaw
media_encryption=sdes
refer_blind_progress=no
;
[teams-in]
type=identify
endpoint=teams-in
match=sip-all.pstnhub.microsoft.com
now problem i am facing is when i use cipher=ECDHE-RSA-CHACHA20-POLY1305,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-AES128-GCM-SHA256,ECDHE-RSA-AES256-S>
this line in config my logs are
Blockquote
<— Transmitting SIP request (485 bytes) to TLS:52.114.132.46:5061 —>
OPTIONS sip:sip.pstnhub.microsoft.com SIP/2.0
Via: SIP/2.0/TLS bsc.voiperworld.com:5061;rport;branch=z9hG4bKPj49341cb7-8ccb-4744-bdd9-6a6595faf67e;alias
From: sip:+14155347515@bsc.voiperworld.com;tag=5a0dd959-1926-4e47-a265-a5c0e97b8be9
To: sip:sip.pstnhub.microsoft.com
Contact: sip:+14155347515@bsc.voiperworld.com:5061;transport=TLS
Call-ID: 6897a776-0255-46a2-991e-7f873aa52929
CSeq: 56630 OPTIONS
Max-Forwards: 70
User-Agent: Asterisk PBX 22.3.0
Content-Length: 0
;
;
<— Received SIP response (433 bytes) from TLS:52.114.132.46:5061 —>
SIP/2.0 200 OK
FROM: sip:+14155347515@bsc.voiperworld.com;tag=5a0dd959-1926-4e47-a265-a5c0e97b8be9
TO: sip:sip.pstnhub.microsoft.com
CSEQ: 56630 OPTIONS
CALL-ID: 6897a776-0255-46a2-991e-7f873aa52929
VIA: SIP/2.0/TLS bsc.voiperworld.com:5061;branch=z9hG4bKPj49341cb7-8ccb-4744-bdd9-6a6595faf67e;rport
CONTENT-LENGTH: 0
ALLOW: INVITE,ACK,OPTIONS,CANCEL,BYE,NOTIFY
SERVER: Microsoft.PSTNHub.SIPProxy v.2025.3.31.2 i.USEA.9
;
[Apr 28 14:27:47] WARNING[14104]: pjproject: <?>: SSL SSL_ERROR_SSL (Handshake): Level: 0 err: <167772353> <error:0A0000C1:SSL routines::no shared cipher> len: 0 peer: 52.114.132.46:61278
asteri*CLI>
yes with error but as soon as i remove cipher line my logs are
Blockquote
<— Transmitting SIP request (485 bytes) to TLS:52.114.132.46:5061 —>
OPTIONS sip:sip.pstnhub.microsoft.com SIP/2.0
Via: SIP/2.0/TLS bsc.voiperworld.com:5061;rport;branch=z9hG4bKPjb65a60bc-1102-4386-a4ea-f16286d7e02a;alias
From: sip:+14155347515@bsc.voiperworld.com;tag=3b1799f7-4d0e-4427-b599-e2dcce6da14e
To: sip:sip.pstnhub.microsoft.com
Contact: sip:+14155347515@bsc.voiperworld.com:5061;transport=TLS
Call-ID: eee2c224-44ae-440f-9206-05b23ac73328
CSeq: 49832 OPTIONS
Max-Forwards: 70
User-Agent: Asterisk PBX 22.3.0
Content-Length: 0
;
[Apr 28 14:37:44] NOTICE[14379]: res_pjsip/pjsip_transport_events.c:190 verify_log_result: Transport ‘transport-tls’ to remote ‘sip.pstnhub.microsoft.com’ - 52.114.132.46:5061 - The certificate is untrusted
<— Received SIP response (434 bytes) from TLS:52.114.132.46:5061 —>
SIP/2.0 200 OK
FROM: sip:+14155347515@bsc.voiperworld.com;tag=3b1799f7-4d0e-4427-b599-e2dcce6da14e
TO: sip:sip.pstnhub.microsoft.com
CSEQ: 49832 OPTIONS
CALL-ID: eee2c224-44ae-440f-9206-05b23ac73328
VIA: SIP/2.0/TLS bsc.voiperworld.com:5061;branch=z9hG4bKPjb65a60bc-1102-4386-a4ea-f16286d7e02a;rport
CONTENT-LENGTH: 0
ALLOW: INVITE,ACK,OPTIONS,CANCEL,BYE,NOTIFY
SERVER: Microsoft.PSTNHub.SIPProxy v.2025.3.31.2 i.USEA.11
;
== Endpoint teams-out is now Reachable
– Contact teams-out/sip:sip.pstnhub.microsoft.com is now Reachable. RTT: 99.741 msec
<— Received SIP request (535 bytes) from TLS:52.114.132.46:17682 —>
OPTIONS sip:+14155347515@bsc.voiperworld.com:5061;transport=TLS SIP/2.0
FROM: sip:sip-du-a-us.pstnhub.microsoft.com:5061;tag=cdde7574-389e-4789-ba5d-6bbfc993191a
TO: sip:+14155347515@bsc.voiperworld.com
CSEQ: 1 OPTIONS
CALL-ID: 07e055ed-fc2e-4064-9e0d-73673de26042
MAX-FORWARDS: 70
VIA: SIP/2.0/TLS 52.114.132.46:5061;branch=z9hG4bK1547b5d8
CONTACT: sip:sip-du-a-us.pstnhub.microsoft.com:5061
CONTENT-LENGTH: 0
USER-AGENT: Microsoft.PSTNHub.SIPProxy v.2025.3.31.2 i.USEA.11
ALLOW: INVITE,ACK,OPTIONS,CANCEL,BYE,NOTIFY
;
<— Transmitting SIP response (868 bytes) to TLS:52.114.132.46:17682 —>
SIP/2.0 200 OK
Via: SIP/2.0/TLS 52.114.132.46:5061;rport=17682;received=52.114.132.46;branch=z9hG4bK1547b5d8
Call-ID: 07e055ed-fc2e-4064-9e0d-73673de26042
From: sip:sip-du-a-us.pstnhub.microsoft.com;tag=cdde7574-389e-4789-ba5d-6bbfc993191a
To: sip:+14155347515@bsc.voiperworld.com;tag=z9hG4bK1547b5d8
CSeq: 1 OPTIONS
Accept: application/xpidf+xml, application/cpim-pidf+xml, application/dialog-info+xml, application/simple-message-summary, application/pidf+xml, application/pidf+xml, application/dialog-info+xml, application/simple-message-summary, application/sdp, message/sipfrag;version=2.0
Allow: OPTIONS, REGISTER, SUBSCRIBE, NOTIFY, PUBLISH, INVITE, ACK, BYE, CANCEL, UPDATE, PRACK, INFO, MESSAGE, REFER
Supported: 100rel, timer, replaces, norefersub
Accept-Encoding: identity
Accept-Language: en
Server: Asterisk PBX 22.3.0
Content-Length: 0
but in both ways my status at Azure Panel is still unknown. i believe its due to not using of CIPHER but then when i use CIPHER i am getting error..