<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">by removed line ca_list_file=/pbx/keys/ca.key <div class="">ERROR[3301]: pjsip:0 <?>: ssl0x7fc8e40f8 Error loading CA list file '/pbx/keys/ca.key</div><div class="">gone.</div><div class=""><br class=""></div><div class="">But still cannot handle SRTP, phone says 488 error if I set media_encryption=sdes on an endpoint,</div><div class=""><br class=""></div><div class="">how do I check if srtp actually work on asterisk?</div><div class=""> <div><blockquote type="cite" class=""><div class="">On 03 Mar 2015, at 20:14, Nick Awesome <<a href="mailto:jleed@me.com" class="">jleed@me.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html charset=us-ascii" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">Hey guys,tried to make tls work with pjsip on asterisk 13.2.0</div><div class=""><br class=""></div><div class="">have compiled pjsip with ssl,</div><div class=""><br class=""></div><div class="">added transport</div><div class=""><br class=""></div><div class="">[tls]</div><div class="">type=transport</div><div class="">cert_file=/pbx/keys/server.crt</div><div class="">ca_list_file=/pbx/keys/ca.key</div><div class="">priv_key_file=/pbx/keys/server.key</div><div class="">protocol=tls</div><div class="">bind=192.168.1.4:5061</div><div class="">local_net=192.168.1.0/24</div><div class="">external_media_address=77.77.77.77</div><div class="">external_signaling_address=77.77.77.77 </div><div class=""><br class=""></div><div class="">have configured Grandstream GXP1400 to use tis and srtp, server.crt and server.key uploaded to phone</div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">ubuntu*CLI> pjsip show transports</div></div><div class=""><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">Transport: tls tls 0 0 192.168.1.4:5061</div></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""><br class=""></div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class="">so transport exist, have set endpoint transport to tls,</div><div style="margin: 0px; font-size: 11px; font-family: Menlo;" class=""><br class=""></div><div class="">but for some reason phone getting timeout 408. tried from local network and behind the nat, nothing. </div></div></div></blockquote></div><br class=""></div></body></html>