[OpenSIPS-Users] OpenSIPS 1.11.1 w/TLS <=> Mediaproxy 2.6.1 / question about TLS certificates

[Gary Patton]

Adrian
Thank you for your reply.  I'm a student and still learning about all of this, so your explanation really helps!
Regards
Gary

From: ag at ag-projects.com
Date: Sun, 6 Jul 2014 22:54:17 +0200
To: users at lists.opensips.org
Subject: Re: [OpenSIPS-Users] OpenSIPS 1.11.1 w/TLS <=> Mediaproxy 2.6.1 /	question about TLS certificates

MediaProxy certificates are strictly used for securing the communication between the SIP proxy media dispatcher and the media relay. The TLS certificates used by OpenSIPS are meant to be be used in the context of SIP traffic. For all practical reasons these are completely different certificates, especially the one used by OpenSIPS must be issued by a known certificate authority trusted by the SIP clients. The TLS certificate used by MediaProxy does not need to be signed by any particular CA.
Regards,Adrian
 
On 05 Jul 2014, at 18:40, Gary Patton <gpatton.public at outlook.com> wrote:Hello again everyone!
I want to experiment with integrating OpenSIPS 1.11.1 w/TLS support and Mediaproxy 2.6.1 for NAT transversal.  The Mediaproxy installation docs say that I need to create and add TLS certificates.  But wouldn't Mediaproxy use the OpenSIPS ssl certificates created when installing OpenSIPS to communicate with OpenSIPS.   I noticed that the Mediaproxy needs tls certificates to end in *.pem just like OpenSIPS tls certificates end in *.pem.  Because they will be in the same security realm, all I need to do is copy the tls certificates I created when installing OpenSIPS w/TLS support to the proper directories in the MediaProxy dispatcher and relay, right? 
Or does MediaProxy need it's own tls certificates to communicate w/OpenSIPS?
Thanks.
Regards
Gary
_______________________________________________
Users mailing list
Users at lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

_______________________________________________
Users mailing list
Users at lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20140707/b8c700c7/attachment.htm>