UPDATE ......From Tuesday 8 April 2025 we have changed the way that Single Sign-on works on this wiki. Please see here for more information:
Update
Wiki Markup |
---|
h1. Goal (short description) Routing of inter domain sessions over a TLS encrypted link between a SER and an OpenSER proxy h1. Applicability Inter-domain SIP routing over TLS h1. Prerequisites (OS, dependencies on other software) Both proxies should have TLS enabled between itself and connected UAs. SER proxy: see OpenSER proxy: see h1. OS specific help In /usr/local/etc/openser/openser.cfg, add routing to the other domain: \\ bq. # check for requests targeted out of our domain bq. if (\!uri==myself) { bq. # mark routing logic in request bq. append_hf("P-hint: outbound\r\n"); bq. # if you have some interdomain connections via TLS bq. if(uri=~"@sipx1.ces.net")~ { bq. t_relay("tls:sipx1.ces.net:5061"); bq. xlog("L_INFO", "Time \[%Tf\] Route to ces.net :%rm RURI:%ru %ru FROM:%fu TO:%tu \n buffer %mb \n flags \n %mf \n"); bq. exit; bq. } else if(uri=~"@sipx.ten.cz") { t_relay("tls:sipx.ten.cz:5061"); bq. xlog("L_INFO", "Time \[%Tf\] Route to ten.cz :%rm bq. RURI:%ru FROM:%fu TO:%tu \n buffer %mb \n flags \n %mf \n"); exit; bq. } route(1); \\ }; h1. Validation, confirmation tests In MS Windows Messenger 5.1 choose: Tools \-> Options \-> Accounts tab \-> enable 'my contacts include users of a SIP communications service' and fill in under 'sign-in name:' <username>@<domain> 0 comments \| Add Comment} bq. route(1); bq. }; \\ |