MD5 authentication, TLS

[iiordanov]

Hi,

Does FPL support any sort of securty like MD5 hashing of the user/realm/password? If so, how do we go about configuring our asterisk servers to authenticate using an MD5 hash?

Also, is there any support for TLS? If so, how do we configure Asterisk?

Thanks!
Iordan

[FONGO_kris]

I would redirect those questions towards the Toronto Asterisk Users Group.

We don't use MD5 Hashing on passwords, you can configure an Asterisk PBX to user standard SIP protocols as well.

If you're thinking that you want to encrypt or "secure" your voice packets, it's pretty unreliable. You would need to encrypt / decrypt on release and retrieval of the packets which would provide you with nothing but latency.

[iiordanov]

Hi,

Quite the opposite, I do not want to encrypt the voice packets. I'd like to encrypt the SIP password so that there is no chance of anybody stealing it and using my account (and capturing my calls).

Cheers!
Iordan

[FONGO_kris]

Oh! Okay,

This is pretty simple in fact. First off, do you have our configuration file?

If you notice, our SIP passwords are alphanumeric, as well as case sensitive.

[ogammo]

in addition to what the admin said,
you need the password only once when you setup your ata , and it is there and no one can hack or steel it in any way.
so no need to encrypt it.