Setting up TLS on Aastra/Mitel phones

@adolfoc wrote:

This is my first attempt at doing this, so excuse my ignorance.
I've followed the setup on my FreePBX instance and extensions like it would be setup for a Sangoma phone as referenced here: http://wiki.freepbx.org/display/PHON/TLS+and+SRTP

But now I'm a little lost. I noticed EPM didn't make any changes to the .cfg files for the phones.
So I've manually edited the provisioning config to include the following changes:
sip srtp mode: 2
sips trusted certificates: cert.pem
sip transport protocol: 4
sips persistent tls: 1

I also changed my proxy and register ports to 5061
and I copied cert.pem from /etc/asterisk/keys/ to /tftpboot/
But the phone does not register.

Do I need to explicitly set a path for the trusted certificate like tftp://mypbx.com/cert.pem ?
Or am I choosing the wrong certificate as the trusted certificate?
Anything else I could be missing?

I'm running FreePBX 13.0.190.9, using Chan SIP, and I'm testing with a few Aastra 6755i and 6867i phones.
The default certificate is from Let's Encrypt.

Posts: 2

Participants: 2

Read full topic