[asterisk-users] Cannot configure PJSIP TLS

[Nick Awesome]

by removed line ca_list_file=/pbx/keys/ca.key 
ERROR[3301]: pjsip:0 <?>: ssl0x7fc8e40f8 Error loading CA list file '/pbx/keys/ca.key
gone.

But still cannot handle SRTP, phone says 488 error if I set media_encryption=sdes on an endpoint,

how do I check if srtp actually work on asterisk?
  
> On 03 Mar 2015, at 20:14, Nick Awesome <jleed at me.com> wrote:
> 
> Hey guys,tried to make tls work with pjsip on asterisk 13.2.0
> 
> have compiled pjsip with ssl,
> 
> added transport
> 
> [tls]
> type=transport
> cert_file=/pbx/keys/server.crt
> ca_list_file=/pbx/keys/ca.key
> priv_key_file=/pbx/keys/server.key
> protocol=tls
> bind=192.168.1.4:5061
> local_net=192.168.1.0/24
> external_media_address=77.77.77.77
> external_signaling_address=77.77.77.77 
> 
> have configured Grandstream GXP1400 to use tis and srtp, server.crt and server.key uploaded to phone
> 
> ubuntu*CLI> pjsip show transports
> Transport:  tls                       tls      0      0  192.168.1.4:5061
> 
> so transport exist, have set endpoint transport to tls,
> 
> but for some reason phone getting timeout 408. tried from local network and behind the nat, nothing. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20150304/36805ccb/attachment.html>