# # $Id$ # # Example Kamailio TLS Configuration File # # This is the default server domain, settings # in this domain will be used for all incoming # connections that do not match any other server # domain in this configuration file. # # We do not enable anything else than TLSv1 # over the public internet. Clients do not have # to present client certificates by default. # [server:default] method = TLSv1 verify_certificate = no require_certificate = no private_key = /etc/letsencrypt/live/do4.callcenterflex.com.br/privkey.pem certificate = /etc/letsencrypt/live/do4.callcenterflex.com.br/cert.pem #ca_list = /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem #ca_list = /etc/ssl/certs/ca-bundle.crt #crl = ./modules/tls/crl.pem # This is the default client domain, settings # in this domain will be used for all outgoing # TLS connections that do not match any other # client domain in this configuration file. # We require that servers present valid certificate. # [client:default] verify_certificate = no require_certificate = no # This is an example server domain for TLS connections # received from the loopback interface. We allow # the use of SSLv2 and SSLv3 protocols here, we do # not require that clients present client certificates # but if they present it it must be valid. We also use # a special certificate and CA list for loopback # interface. # #[server:127.0.0.1:5061] #method = SSLv23 #verify_certificate = yes #require_certificate = no #private_key = ./modules/tls/local_key.pem #certificate = ./modules/tls/local_cert.pem #verify_depth = 3 #ca_list = local_ca.pem #crl = local_crl.pem # Special settings for the iptel.org public SIP # server. We do not verify the certificate of the # server because it can be expired. The server # implements authentication using SSL client # certificates so configure the client certificate # that was given to use by iptel.org staff here. # #[client:195.37.77.101:5061] #verify_certificate = no #certificate = ./modules/tls/iptel_client.pem #private_key = ./modules/tls/iptel_key.pem #ca_list = ./modules/tls/iptel_ca.pem #crl = ./modules/tls/iptel_crl.pem