[Asterisk-Users] no plain text passwords in iax.conf

Adam Hart adam at teragen.com.au
Mon Nov 29 17:09:42 MST 2004


Bastian Schern wrote:
> Hello Asterisk friends,
> 
> is it possible to avoid plain text passwords in the iax.conf or the 
> iaxfriends MySQL database table?
> 

Asterisk needs the plain text password to authenicate. You could wrap a 
base64 decode when reading the passwords, but this is obsecurity, yet 
simple to implement & should prevent the casual browser. I guess a more 
secure method would public key crypto and give asterisk the key at 
runtime (obviously not 100% secure either)

-Adam



More information about the asterisk-users mailing list