How enable ZRTP or DTLS in PJSIP

Asterisk Asterisk SIP
1

How do you implement or enable ZRTP or DTLS in PJSIP.conf?

I found DTLS only for WebSockets but maybe it works for extensions too.

media_encryption=dtls
dtls_verify=fingerprint
dtls_cert_file=/etc/asterisk/keys/asterisk.pem
dtls_ca_file=/etc/asterisk/keys/ca.crt
dtls_setup=actpass
use_avpf=yes
ice_support=yes
media_use_received_transport=yes
rtcp_mux=yes

2

Asterisk does not support ZRTP. DTLS is enabled using the DTLS options in your provided configuration.

3

Thanks

and SDES with
media_encryption=sdes?

And I have one more for my understanding:
encryption=yes
is only in the sip.conf and means the signaling is encrypted with TLS

4

Yes, setting media_encryption to sdes enables sdes in PJSIP. The encryption=yes setting in sip.conf enables SDES support. It does not mean that signaling is using TLS. They are separate things.

1 Like
5

I still have a tiny question about SRTP and didn’t want to create a new topic.

SRTP and “direct_media = yes” not working, right?

6

Asterisk will not allow direct media if SRTP is used.

2 Likes
7

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.