I'm in the process of testing a TLS/SRTP install. My experience is improving with each new challenge, but this one is a great test of my 2 month experience with Asterisk.<br><br>When I dial 6003 from 6001, it takes 35 seconds until I get the error message that 6003 is circuit-busy.<br>
<br>Any help would greatly be appreciated. Below is the error message and the extensions and sip.conf files.<br><br><br><br>*CLI> == Using SIP RTP CoS mark 5<br> -- Executing [6003@myphones:1] Set("SIP/6001-0000000c", "_SIPSRTP_CRYPTO=enable") in new stack<br>
-- Executing [6003@myphones:2] Dial("SIP/6001-0000000c", "SIP/6003") in new stack<br> == Using SIP RTP CoS mark 5<br> -- Called 6003<br> -- SIP/6003-0000000d is circuit-busy<br> == Everyone is busy/congested at this time (1:0/1/0)<br>
-- Auto fallthrough, channel 'SIP/6001-0000000c' status is 'CONGESTION'<br><br><br>extensions.conf<br><br>[myphones]<br><br>;exten => 6001,1,Dial(SIP/6001)<br>;exten => 6001,2,Hangup()<br>exten => 6001,1,Set(_SIPSRTP_CRYPTO=enable)<br>
exten => 6001,2,Dial(SIP/${EXTEN})<br><br>;exten => 6002,1,Dial(SIP/6002)<br>;exten => 6002,2,Hangup()<br>exten => 6002,1,Set(_SIPSRTP_CRYPTO=enable)<br>exten => 6002,2,Dial(SIP/${EXTEN})<br><br>;exten => 6003,1,Dial(SIP/6003)<br>
;exten => 6003,2,Hangup()<br>exten => 6003,1,Set(_SIPSRTP_CRYPTO=enable)<br>exten => 6003,2,Dial(SIP/${EXTEN})<br><br>;exten => 6004,1,Dial(SIP/6004)<br>;exten => 6004,2,Hangup()<br>exten => 6004,1,Set(_SIPSRTP_CRYPTO=enable)<br>
exten => 6004,2,Dial(SIP/${EXTEN})<br><br>exten => 6005,1,Dial(SIP/6005)<br>exten => 6005,2,Hangup()<br>;exten => 6005,1,Set(_SIPSRTP_CRYPTO=enable)<br>;exten => 6005,2,Dial(SIP/${EXTEN})<br><br>exten => 6006,1,Dial(SIP/6005)<br>
exten => 6006,2,Hangup()<br>;exten => 6006,1,Set(_SIPSRTP_CRYPTO=enable)<br>;exten => 6006,2,Dial(SIP/${EXTEN})<br><br><br>exten => 600,1,NoOp( start)<br>exten => 600,n,NOOp( SECURE SIGNALING ${CHANNEL(secure_signaling)} )<br>
exten => 600,n,NOOp( SECURE media ${CHANNEL(secure_media)} )<br>exten => 600,n,Answer()<br>exten => 600,n,Playback(demo-echotest)<br>exten => 600,n,Echo()<br><br><br>exten => _X.,1,Dial(SIP/CM8/${EXTEN:0},30,rt)<br>
<br><br>[general]<br><br>tlsenable=yes<br>tlsbindaddr=172.16.200.60<br>;tlsprivatekey=/usr/local/ssl/misc/asteriskkey.pem<br>;tlscertfile=/usr/local/ssl/misc/asteriskcert.pem<br>tlscertfile=/etc/asterisk/keys/asterisk.pem<br>
tlscafile=/etc/asterisk/keys/ca.crt<br>tlscipher=ALL<br>;tlscafile=/usr/local/ssl/misc/demoCA/cacert.pem<br>tlsclientmethod=tlsv1<br><br>[6001]<br>type=friend<br>secret=erasmus123<br>callerid="Mitch-MacBook" <6001><br>
;nat=yes<br>host=dynamic<br>;canreinvite=no<br>context=myphones<br>allow=ulaw<br>allow=gsm<br>allow=g726<br>;transport=udp<br>transport=tls<br>encryption=yes<br>port=5061<br>regexten=6001<br><br>[6002]<br>type=friend<br>secret=erasmus123<br>
callerid="Tami" <6002><br>host=dynamic<br>canreinvite=no<br>context=myphones<br>allow=ulaw<br>allow=gsm<br>allow=g726<br>;transport=udp<br>transport=tls<br>encryption=yes<br>port=5061<br>regexten=6002<br><br>
[6003]<br>type=friend<br>secret=erasmus123<br>callerid="iPad" <6003><br>host=dynamic<br>;canreinvite=no<br>;nat=yes<br>context=myphones<br>allow=ulaw<br>allow=gsm<br>allow=g726<br>;transport=udp<br>transport=tls<br>
encryption=yes<br>port=5061<br>regexten=6003<br><br>[6004]<br>type=friend<br>secret=erasmus123<br>callerid="iPhone-Mitch" <6004><br>;nat=yes<br>host=dynamic<br>;canreinvite=no<br>context=myphones<br>allow=ulaw<br>
allow=gsm<br>allow=g726<br>;transport=udp<br>transport=tls<br>encryption=yes<br>port=5061<br>regexten=6004<br><br>[6005]<br>type=friend<br>secret=erasmus123<br>callerid="SNOM" <6005><br>host=dynamic<br>;canreinvite=no<br>
context=myphones<br>allow=ulaw<br>allow=gsm<br>allow=g726<br>transport=udp<br>;transport=tls<br>;encryption=yes<br>;port=5061<br>regexten=6005<br><br>[6006]<br>type=friend<br>secret=erasmus123<br>callerid=" <6006><br>
host=dynamic<br>;canreinvite=no<br>context=myphones<br>allow=ulaw<br>allow=gsm<br>allow=g726<br>transport=udp<br>;transport=tls<br>;encryption=yes<br>;port=5061<br>regex<br><br>[CM8]<br>type=friend<br>host=172.16.200.100<br>
;canreinvite=yes<br>;disallow=all<br>allow=ulaw<br>allow=ulaw<br>;qualify=yes<br>;nat=no<br>context=myphones<br><br><br><br><br>