v15: Secure SIP Guide

Discussion in '3CX Phone System - General' started by jens.hartmann, Nov 29, 2016.

Thread Status:
Not open for further replies.
  1. jens.hartmann

    Joined:
    Nov 29, 2016
    Messages:
    6
    Likes Received:
    0
    Where can we find a guide for Secure SIP? Which certificates are supported or can we generate a private one? We saw that 3CX provides custom Snom firmware with Let's encrypt support? How can we use Let's encrypt for secure SIP? Secure SIP should be the default setting..
     
  2. ian.watts

    ian.watts Active Member

    Joined:
    Apr 8, 2011
    Messages:
    532
    Likes Received:
    0
    Google much?..

    You can generate whatever you want.. but if you want your endpoints to trust yours, implement PKI. You could pull the cert/key pair from the Let's Encrypt section and use it I suppose, though you'd have to copypasta every 90 days.

    Unless you know what you are doing with TLS, Secure SIP is not for you..
     
  3. jens.hartmann

    Joined:
    Nov 29, 2016
    Messages:
    6
    Likes Received:
    0
    I know how to handle PKI Infrastructure but secure sip makes less sense when the Root CA's are not trusted at the device level and I wanted to know why 3CX provides a Let's Encrypt firmware for the hardware phones.
     
Thread Status:
Not open for further replies.