hello i have been lately trying to define a sip trunk with type registration from one asterisk server to another one on TLS. still did not figure out how to do it. But I was able before to define a sip trunk with type registration from one asterisk server to another one on UDP. It was simple. Th…

A self signed certificate authority is generally not per-server. It is per-organization. The certificate authority issues certificates for each client or server.

The Asterisk scripts that create certificates are possibly confusing, because they do everything on the machine that people like to call the server. That’s actually bad practice. Really, the secret key for Asterisk should never leave the Asterisk machine, and the secret key for the CA should be on…

so yes now i understand that a CA is not per server but it is per organization, but if i generated a ca for every server then would this come with bad consequences?

You’d have to distribute a lot of CA certificates.

i dont have any problem with that. The only problem is how to define a trunk of type registration on TLS! could this be done? and how?

Maybe this will help: [image] Multiple CA certificates in Asterisk? Asterisk Support Hi, I have a direct link between two Asterisk-servers. This allows me to place direct and encrypted calls. I created my own certificates for this purpose and it works great! This is what…

First, let’s see the actual configs being used on both servers. All of this is guessing right now. Second, if this isn’t being done with Chan_PJSIP it needs to be scrapped and redone to use Chan_PJSIP. Chan_SIP is dead and shouldn’t be used. Finally, I have a feeling this is being over thought as co…

AST1 of ip address 192.168.133.100 AST2 of ip address 192.168.133.99 AST1 pjsip.conf: [transport-udp] type=transport protocol=udp bind=0.0.0.0 [transport-tls] type=transport protocol=tls bind=192.168.133.100:5061 cert_file=/etc/asterisk/keys/asterisk.crt priv_key_file=/etc/asterisk/keys/asteris…

[image] sami-hep: AST1 of ip address 192.168.133.100 AST2 of ip address 192.168.133.99 You know both IP addresses. You should not be using registration.

registration gives me better security. i prefer it with registration!

SIP TLS TRUNK between 2 asterisk server

Asterisk Asterisk Support

david551 February 15, 2022, 2:12pm 11

Maybe this will help:

Topic		Replies	Views
Pjsip trunk with tls registration Asterisk SIP	8	4248	December 29, 2021
SIP trunk between many servers Asterisk Support	13	550	November 21, 2022
2 Server Asterisk TLS Asterisk Support	20	1450	January 17, 2022
PJSIP trunking. Trunk not established Asterisk SIP	6	2149	March 14, 2017
Sip trunk authentication credentials Asterisk SIP	13	5332	June 4, 2020

SIP TLS TRUNK between 2 asterisk server

Related topics