From 0f883c98479a15ae71d4e8d9f7c56f44fdda3ea6 Mon Sep 17 00:00:00 2001 From: jamie prince Date: Fri, 21 Aug 2026 03:22:04 +0100 Subject: [PATCH] Wear SIP: switch transport to TLS:5062 (verify disabled, mTLS pending) - accounts: outbound transport=tls on port 5062. - config.static: tls_verify no + tls_selfsigned yes (server cert is an expired Asterisk Private CA; verification disabled for now; mTLS client cert support planned but not yet enabled). - Registration over TLS verified working on Galaxy Watch (Android 16). Note: TLS transport is independent of the self-managed incoming-call UI path (verified earlier over UDP), so lock-screen answer/decline + audio carry over unchanged. --- wear/src/main/assets/accounts | 2 +- wear/src/main/assets/config.static | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/wear/src/main/assets/accounts b/wear/src/main/assets/accounts index ed927e3d..79038225 100644 --- a/wear/src/main/assets/accounts +++ b/wear/src/main/assets/accounts @@ -1,2 +1,2 @@ -;auth_user="01273961147";auth_pass="cisco55555";outbound="sip:mail.txt3.net:5761;transport=udp";regint=60;regq=0.5;pubint=0;check_origin=no;mwi=no;sipnat=outbound;natpinhole=yes +;auth_user="01273961147";auth_pass="cisco55555";outbound="sip:mail.txt3.net:5062;transport=tls";regint=60;regq=0.5;pubint=0;check_origin=no;mwi=no;sipnat=outbound;natpinhole=yes diff --git a/wear/src/main/assets/config.static b/wear/src/main/assets/config.static index 66b05483..acad5aa2 100644 --- a/wear/src/main/assets/config.static +++ b/wear/src/main/assets/config.static @@ -40,3 +40,8 @@ opus_cbr no opus_inbandfec yes opus_application voip dtls_srtp_use_ec prime256v1 +# TLS transport (inbound/outbound SIP over TLS). Server cert is an expired +# Asterisk Private CA cert, so verification is disabled for now; mTLS client +# cert support is planned but not yet enabled. +tls_verify no +tls_selfsigned yes