SIP Security in Yate
From Yate Documentation
(Difference between revisions)
| Line 6: | Line 6: | ||
=== How to set a TLS listener === | === How to set a TLS listener === | ||
| − | In ysipchan.conf: | + | In [[SIP Configuration File#Configuration File|ysipchan.conf]]: |
[listener listener-tls] | [listener listener-tls] | ||
| Line 16: | Line 16: | ||
=== Configure a SSL server context=== | === Configure a SSL server context=== | ||
| − | In openssl.conf | + | In [[OpenSSL#Configuration|openssl.conf]] |
[server_context] | [server_context] | ||
Revision as of 16:39, 14 November 2012
Yate can bind on UDP, TCP and TLS. This is done using a listener that it is a specific section in ysipchan.conf.
SIP secure it is done by building a TLS listener. Yate will bind on TLS with SRTP.
How to set a TLS listener
In ysipchan.conf:
[listener listener-tls] type=tls addr=x.x.x.x port=5061 sslcontext=server_context
Configure a SSL server context
In openssl.conf
[server_context] enable=yes certificate=name.crt key=name.key
The files name.crt and name.key have to be in the same place as the configuration file in this example.
SRTP Cryptographic Contexts
Each SRTP stream requires the sender and receiver to maintain cryptographic state information. This information is called the "cryptographic context".
SRTP uses two types of keys:
- session keys(e.g., encryption or message authentication)
- master keys - a random bit string (given by the key management protocol)
