July 2017
Intermediate to advanced
434 pages
12h 59m
English
Once you've obtained your certificates, you will need to tell FreeSWITCH to use these certificates. To do this, set these variables in /usr/local/freeswitch/conf/vars.xml:
<X-PRE-PROCESS cmd="set" data="sip_tls_version=tlsv1,tlsv1.1,tlsv1.2"/> <X-PRE-PROCESS cmd="set" data="internal_tls_port=3361"/> <X-PRE-PROCESS cmd="set" data="internal_ssl_enable=true"/> <X-PRE-PROCESS cmd="set" data="external_tls_port=3381"/> <X-PRE-PROCESS cmd="set" data="external_ssl_enable=false"/> <X-PRE-PROCESS cmd="set" data="sip_tls_ciphers=ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH"/>
Note that in vars.xml TLS (historically named "ssl") is enabled separately for internal and external profile.
The last line sets the ciphers algorithms to be used. If ...
Read now
Unlock full access