<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p><br>
</p>
<p>We are using Opensips as a dispatcher to Asterisk servers. The call flow for incoming calls to UAC is below (outbound is reversed).</p>
<p><br>
</p>
<p>telco -> opensips1 -> asterisk -> opensips1 -> UAC (SIP phones)</p>
<p><br>
</p>
<p>We are at the planning stages of implementing TLS. Asterisk (1.8.x), Opensips (1.7.1 TLS) and the phones are TLS-capable. Is it possible to have TLS just between Opensips and the phones, and not touch the traffic between Asterisk and Opensips? If TLS on
Asterisk is not enabled, will traffic flow between Opensips and Asterisk (unencrypted)? Both Opensips server and Asterisk servers are at the same location, so it's not really necessary to secure that leg.</p>
<p><br>
</p>
<p>Also, do you recommend upgrading Opensips to 2.1 first and then enabling TLS? I know our version (1.7.1) is pretty old, but it's been very stable for us without TLS. I'm wondering if the TLS module has improved (performance, etc.) since then? (We will do
the upgrade this year - just trying to time it).</p>
<br>
Thanks,<br>
Matt<br>
<br>
</div>
</body>
</html>