v15: Secure SIP Guide

[jens.hartmann]

Where can we find a guide for Secure SIP? Which certificates are supported or can we generate a private one? We saw that 3CX provides custom Snom firmware with Let's encrypt support? How can we use Let's encrypt for secure SIP? Secure SIP should be the default setting..

 

[ian.watts]

Google much?..

You can generate whatever you want.. but if you want your endpoints to trust yours, implement PKI. You could pull the cert/key pair from the Let's Encrypt section and use it I suppose, though you'd have to copypasta every 90 days.

Unless you know what you are doing with TLS, Secure SIP is not for you..

 

[jens.hartmann]

I know how to handle PKI Infrastructure but secure sip makes less sense when the Root CA's are not trusted at the device level and I wanted to know why 3CX provides a Let's Encrypt firmware for the hardware phones.