[asterisk-commits] oej: trunk r99482 - /trunk/doc/siptls.txt
SVN commits to the Asterisk project
asterisk-commits at lists.digium.com
Tue Jan 22 10:39:59 CST 2008
Author: oej
Date: Tue Jan 22 03:46:28 2008
New Revision: 99482
URL: http://svn.digium.com/view/asterisk?view=rev&rev=99482
Log:
Small fixes
Modified:
trunk/doc/siptls.txt
Change Statistics:
trunk/doc/siptls.txt | 17 +++++++++--------
1 file changed, 9 insertions(+), 8 deletions(-)
Modified: trunk/doc/siptls.txt
URL: http://svn.digium.com/view/asterisk/trunk/doc/siptls.txt?view=diff&rev=99482&r1=99481&r2=99482
==============================================================================
--- trunk/doc/siptls.txt (original)
+++ trunk/doc/siptls.txt Tue Jan 22 03:46:28 2008
@@ -4,17 +4,17 @@
When using TLS the client will typically check the validity of the
certificate chain. So that means you either need a certificate that is
signed by one of the larger CAs, or if you use a self signed certificate
-you must install a copy of your CA on the client.
+you must install a copy of your CA certificate on the client.
So far this code has been test with:
-Asterisk as client and server (TLS and TCP)
-Polycom Soundpoint IP Phones (TLS and TCP)
+- Asterisk as client and server (TLS and TCP)
+- Polycom Soundpoint IP Phones (TLS and TCP)
Polycom phones require that the host (ip or hostname) that is
configured match the 'common name' in the certificate
-Minisip Softphone (TLS and TCP)
-Cisco IOS Gateways (TCP only)
-SNOM 360 (TLS only)
-Zoiper Biz Softphone (TLS and TCP)
+- Minisip Softphone (TLS and TCP)
+- Cisco IOS Gateways (TCP only)
+- SNOM 360 (TLS only)
+- Zoiper Biz Softphone (TLS and TCP)
sip.conf options
@@ -26,7 +26,7 @@
Specify IP address to bind TLS server to, default is 0.0.0.0
tlscertfile=</path/to/certificate>
- The server's certificate file. Should include the key and
+ The server's certificate file. Should include the key and
certificate. This is mandatory if your going to run a TLS server.
tlscafile=</path/to/certificate>
@@ -56,6 +56,7 @@
asterisk servers. With server_a registering to server_b
On server_a:
+
[general]
tlsenable=yes
tlscertfgile=/etc/asterisk/asterisk.pem
More information about the asterisk-commits
mailing list