Wear SIP: switch transport to TLS:5062 (verify disabled, mTLS pending)
- accounts: outbound transport=tls on port 5062. - config.static: tls_verify no + tls_selfsigned yes (server cert is an expired Asterisk Private CA; verification disabled for now; mTLS client cert support planned but not yet enabled). - Registration over TLS verified working on Galaxy Watch (Android 16). Note: TLS transport is independent of the self-managed incoming-call UI path (verified earlier over UDP), so lock-screen answer/decline + audio carry over unchanged.
This commit is contained in:
@ -1,2 +1,2 @@
|
||||
<sip:01273961147@mail.txt3.net>;auth_user="01273961147";auth_pass="cisco55555";outbound="sip:mail.txt3.net:5761;transport=udp";regint=60;regq=0.5;pubint=0;check_origin=no;mwi=no;sipnat=outbound;natpinhole=yes
|
||||
<sip:01273961147@mail.txt3.net>;auth_user="01273961147";auth_pass="cisco55555";outbound="sip:mail.txt3.net:5062;transport=tls";regint=60;regq=0.5;pubint=0;check_origin=no;mwi=no;sipnat=outbound;natpinhole=yes
|
||||
|
||||
|
||||
@ -40,3 +40,8 @@ opus_cbr no
|
||||
opus_inbandfec yes
|
||||
opus_application voip
|
||||
dtls_srtp_use_ec prime256v1
|
||||
# TLS transport (inbound/outbound SIP over TLS). Server cert is an expired
|
||||
# Asterisk Private CA cert, so verification is disabled for now; mTLS client
|
||||
# cert support is planned but not yet enabled.
|
||||
tls_verify no
|
||||
tls_selfsigned yes
|
||||
|
||||
Reference in New Issue
Block a user