Wear SIP: switch transport to TLS:5062 (verify disabled, mTLS pending)
- accounts: outbound transport=tls on port 5062. - config.static: tls_verify no + tls_selfsigned yes (server cert is an expired Asterisk Private CA; verification disabled for now; mTLS client cert support planned but not yet enabled). - Registration over TLS verified working on Galaxy Watch (Android 16). Note: TLS transport is independent of the self-managed incoming-call UI path (verified earlier over UDP), so lock-screen answer/decline + audio carry over unchanged.
This commit is contained in:
@ -1,2 +1,2 @@
|
|||||||
<sip:01273961147@mail.txt3.net>;auth_user="01273961147";auth_pass="cisco55555";outbound="sip:mail.txt3.net:5761;transport=udp";regint=60;regq=0.5;pubint=0;check_origin=no;mwi=no;sipnat=outbound;natpinhole=yes
|
<sip:01273961147@mail.txt3.net>;auth_user="01273961147";auth_pass="cisco55555";outbound="sip:mail.txt3.net:5062;transport=tls";regint=60;regq=0.5;pubint=0;check_origin=no;mwi=no;sipnat=outbound;natpinhole=yes
|
||||||
|
|
||||||
|
|||||||
@ -40,3 +40,8 @@ opus_cbr no
|
|||||||
opus_inbandfec yes
|
opus_inbandfec yes
|
||||||
opus_application voip
|
opus_application voip
|
||||||
dtls_srtp_use_ec prime256v1
|
dtls_srtp_use_ec prime256v1
|
||||||
|
# TLS transport (inbound/outbound SIP over TLS). Server cert is an expired
|
||||||
|
# Asterisk Private CA cert, so verification is disabled for now; mTLS client
|
||||||
|
# cert support is planned but not yet enabled.
|
||||||
|
tls_verify no
|
||||||
|
tls_selfsigned yes
|
||||||
|
|||||||
Reference in New Issue
Block a user