TLS encryption

General Help
1

I try to setup the TLS on a brand new FreePBX Distro 10.13.66-20.
I follow https://wiki.freepbx.org/display/PHON/TLS+and+SRTP
I install the LetsEncrypt Certificate,

The guide dont look to be Up to date, because some options is missing or dont have the same name I think…

I try to set it up on a Yealink phone, With PJSIP the register Fail, With Chan Sip it register but I got this error in the Asterisk log:
[2017-05-30 12:31:40] WARNING[11598][C-00000000] chan_sip.c: Ignoring crypto attribute in SDP because RTP transport is insecure
[2017-05-30 12:31:40] WARNING[11598][C-00000000] chan_sip.c: Ignoring crypto attribute in SDP because RTP transport is insecure
[2017-05-30 12:31:40] WARNING[11598][C-00000000] chan_sip.c: Ignoring crypto attribute in SDP because RTP transport is insecure
[2017-05-30 12:31:40] WARNING[11598][C-00000000] chan_sip.c: Matched device setup to use SRTP, but request was not!

I try on a ZOIPER soft phone and I got error 488.

Any help will be appreciate!

2

hi, i am using grandsteam so it might be a little different, but i am doing sip-tls and srtp. for me, the key was understanding that everything had to be configured in the base file. unfortunately, commercial epm does not support tls/srtp for non sangoma phones so, what i had to do was edit the base file and change all the line address’ port number to 5061(my tls port for pjsip). also, the phones need to be told what transport to use (tls instead of udp) and again, this has to be done manually, not in the gui.
so, i would say, take a look at the config template for yealink and find out what needs to be set, then go to the base file and set it manually.

lastly, you might already have done this, but make sure the extension is configured for sip-tls transport and srtp encryption.

hope this helps