Depends on your configuraion. You can use a Proxy (like eg. Kamailio) and add SSL there and then configure a routing between proxy and asterisk using eg. custom CA certificates. This just one of namy options.
Thank you very much, I have a question, the certificate generates it for a year, is there any way that the certificate generates it for a longer time? Thank you so much
Hi ! Sorry to bother you, if I do not see any SIP protocol in my Wireshark during a call, is this a good thing ? I am able to se UDP / TCP and TLSv1.2 protocols but no SIP ones. Is this normal ? Thank you !
Hi. In the description you'll find a link to our website. At the end of the blog post, there's a link to sample Wireshark file. And yes ... you won't see any SIP traffic. Just TCP/TLS to port 5061 (or whichever you use). hotkey404.com/asterisk-security-using-self-signed-ssl-certificate-for-tls-registration/
Thank you very much sir, I have a question, I have UCM , I create CA TLS by openssl ,my VoIP encrypted , I capture some call but RTP and other details encrypted because of TLS certificate so I need to decrypted and monitoring by Wireshark for example , how can decrypt sir , plz help me?
Hi. Check this article: www.zoiper.com/en/support/home/article/162/How%20to%20decode%20SIP%20over%20TLS%20with%20Wireshark%20and%20Decrypting%20SDES%20Protected%20SRTP%20Stream Maybe I'll also try to record the video on SIP decryption in Wireshark.
hello , thanks alot for this informative video i have tried this at issabel and it worked and i could register the extension even i could register from outside the network and i could make a call but i got a problem which is one way audio - local i can make calls without problem - so any tips about nat problem or explanation thx again
NAT configuration video is scheduled after I finish a few other videos. But general I plan to do a complete guide on NAT, SIP ALG, etc... so stay tuned 😉
Could u tell us how to debug tls sip packets ?
how to using an existing certificate for asterisk? im have ssl on a proxy host!
Depends on your configuraion. You can use a Proxy (like eg. Kamailio) and add SSL there and then configure a routing between proxy and asterisk using eg. custom CA certificates.
This just one of namy options.
Thank you very much, I have a question, the certificate generates it for a year, is there any way that the certificate generates it for a longer time? Thank you so much
Regular certificates got reduced to 1 year for security reasons.
Hi ! Sorry to bother you, if I do not see any SIP protocol in my Wireshark during a call, is this a good thing ? I am able to se UDP / TCP and TLSv1.2 protocols but no SIP ones. Is this normal ?
Thank you !
Hi. In the description you'll find a link to our website. At the end of the blog post, there's a link to sample Wireshark file. And yes ... you won't see any SIP traffic. Just TCP/TLS to port 5061 (or whichever you use).
hotkey404.com/asterisk-security-using-self-signed-ssl-certificate-for-tls-registration/
@@HOTKEY404 Thank you very much ! Your videos helped me to graduate for my HND !
tls just keep giving error 80 fatal internal error from asterisk side
Thank you very much sir, I have a question, I have UCM , I create CA TLS by openssl ,my VoIP encrypted , I capture some call but RTP and other details encrypted because of TLS certificate so I need to decrypted and monitoring by Wireshark for example , how can decrypt sir , plz help me?
Hi. Check this article: www.zoiper.com/en/support/home/article/162/How%20to%20decode%20SIP%20over%20TLS%20with%20Wireshark%20and%20Decrypting%20SDES%20Protected%20SRTP%20Stream
Maybe I'll also try to record the video on SIP decryption in Wireshark.
hello , thanks alot for this informative video
i have tried this at issabel and it worked and i could register the extension even i could register from outside the network and i could make a call but i got a problem which is one way audio - local i can make calls without problem -
so any tips about nat problem or explanation
thx again
NAT configuration video is scheduled after I finish a few other videos. But general I plan to do a complete guide on NAT, SIP ALG, etc... so stay tuned 😉
@HOTKEY404
thx alot ,
waiting for the videos
yeah, why not. lol
Pach kabl