Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Goal

...

Routing of inter domain sessions over a TLS encrypted link between a SER and an OpenSER proxy 

...

      User Agent A   ->   proxy domainA   ->   proxy domainB   ->   User Agent B

Prerequisites

...

  • Both proxies should have TLS enabled between themselves and connected UAs. 
  • TLS is enabled for the SER proxy: see 3.16. TLS for SER (UA-Proxy)
  • TLS is enabled for the OpenSER proxy: see 3.17. TLS for OpenSER (UA-Proxy)
  • A PKI certificate is available that contains the full DNS name of the SIP proxy in the CN field (in this example "sipserver.domainA.net") and a corresponding certificate chain. Using out-of-the-box certificates that come as an example with the default installation of (Open)SER cannot be trusted.

Configuration  

OpenSER proxy configuration:

...