Setup SIP-over-TLS + SRTP for voip.ms

Security and Privacy
9

When I do this:

  • Create a SIP account following this post
  • Follow the Jami wiki on voip.ms for the basic configuration.
  • Go to the security options of the SIP account
  • Activate: Encrypt media streams (SRTP)
  • Activate: Enable SDES as key exchange protocol
  • Activate: Use TLS Transport

result:

  • On Jami, the account is online.
  • On the portal, it is registered, but no secure transport
  • I can receive incoming calls.
  • Echo test works.

If I add:

  • Activate: Use TLS Transport
  • Permutate between 5061 (voip.ms TLS port) and the default value for whatever port options available.

result:

  • On Jami, the account is online.
  • On the portal, it is registered with secure transport
  • I cannot receive incoming calls.
  • Echo test works.

It must be something related to TLS configuration in Jami.
There are many TLS options underneath “Use TLS Transport”. I don’t know how to set these options to make encrypted voip work properly.

Among the TLS options, there are 3 which have red exclamation marks:

  • Certification Authorities
  • Certificate File
  • Private Key File

Regarding SMS:

  • Messages sent from Jami SIP (encrypted) is not received on the voip.ms portal.
  • Messages sent to Jami SIP (encrypted) is not received.
  • Messages sent from Jami SIP (unencrypted) is received on the voip.ms portal.
  • Messages sent to Jami SIP (unencrypted) is not received.
1 Like