-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi,
I have built a kamailio based phone system along the lines of the tutorial below. I have updated it for version 4.0 and it is running successfully on Debian 7.0. I have set my system up with a Gandi SSL cert rather than a self signed one.
http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour
I want to federate/peer with another proxy running Kamailio with TLS. What do I need to do to make this work? Thanks.
Regards, John
Hello,
On 5/7/13 12:36 AM, johnc wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi,
I have built a kamailio based phone system along the lines of the tutorial below. I have updated it for version 4.0 and it is running successfully on Debian 7.0. I have set my system up with a Gandi SSL cert rather than a self signed one.
http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour
I want to federate/peer with another proxy running Kamailio with TLS. What do I need to do to make this work? Thanks.
kamailio forwards based on domain name of the destination and does NAPTR (if enabled as global parameter), SRV, A/CNAME DNS query to discover where to send the SIP requests. If it returns a TLS destination, it will use it.
You can enforce TLS via specific functions in tm module or setting $du to a SIP address that specifies tls transport. The validation of the connection is based on what options you set for tls module.
Cheers, Daniel
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi Daniel,
Thanks for the reply. Can you point me to some configuration snippets, wikis etc. I'm on a bit of a steep learning curve at the moment as I am new to Kamailio. Many thanks for this software!
Cheers, John
On 07/05/13 08:23, Daniel-Constantin Mierla wrote:
Hello,
On 5/7/13 12:36 AM, johnc wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi,
I have built a kamailio based phone system along the lines of the tutorial below. I have updated it for version 4.0 and it is running successfully on Debian 7.0. I have set my system up with a Gandi SSL cert rather than a self signed one.
http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour
I want to federate/peer with another proxy running Kamailio with TLS.
What do I need to do to make this work? Thanks.
kamailio forwards based on domain name of the destination and does NAPTR (if enabled as global parameter), SRV, A/CNAME DNS query to discover where to send the SIP requests. If it returns a TLS destination, it will use it.
You can enforce TLS via specific functions in tm module or setting $du to a SIP address that specifies tls transport. The validation of the connection is based on what options you set for tls module.
Cheers, Daniel
-- Daniel-Constantin Mierla - http://www.asipto.com http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda Kamailio Advanced Training, San Francisco, USA - June 24-27, 2013 * http://asipto.com/u/katu *
_______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
-
Daniel-Constantin Mierla -
johnc