Encrypting voice calls

In Elastix/Asterisk, the SIP calls can be encrypted in two ways: encrypting the SIP protocol signaling and encrypting the RTP voice flow. To encrypt the SIP protocol signal, we will use the Transport Layer Security (TLS) protocol.

How to do it…

  1. Create security keys and certificates. For this example, we will store our keys and certificates in the /etc/asterisk/keys folder.
  2. To create this folder, enter the mkdir /etc/asterisk/keys command.
  3. Change the owner of the folder from the user root to the user asterisk: chown asterisk:asterisk /etc/asterisk/keys
  4. Generate the keys and certificates by going to the following folder:
    cd /usr/share/doc/asterisk-1.8.20.0/contrib/scripts/ ./ast_tls_cert -C 10.20.30.70 -O "Our Company" -d /etc/asterisk/keys ...

Get Elastix Unified Communications Server Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial