Configuring TLS connection on Escene ES280

[alexanderzhirov]

Unable to set up a secure connection to the Asterisk server on the Escence ES280 device. The device hisses after lifting the handset.

I created certificates according to the instructions on this page.

Go straight to settings:

[transport-tls]
type=transport
protocol=tls
bind=0.0.0.0:5061
cert_file=/certs/asterisk.crt
priv_key_file=/certs/asterisk.key
ca_list_file=/certs/ca.crt
method=sslv23
local_net=10.100.0.190/23

[104]
type=aor
max_contacts=5
remove_existing=yes
 
[104]
type=auth
auth_type=userpass
username=104
password=104

[104]
type=endpoint
aors=104
auth=104
context=testing
disallow=all
allow=g722
media_encryption=sdes

Phone Settings:

I also downloaded the ca.crt certificate to the phone:

If I use a softphone (for example, MicroSIP), then the call goes perfectly. sngrep does not catch traffic.

And this is the result of a call from the Escene device:

[alexanderzhirov]

I downloaded the latest firmware from the official website for my phone ES280. I updated the firmware and now everything started working. Most likely, the old firmware could not properly encrypt traffic using the ca.crt certificate.

And even the web page interface has been updated: