Skip to main content

Enabling / using TLS / SRTP with Thirdlane?

Posted by netriplex on Wed, 04/22/2015

I just installed the most recent demo of Thirdlane Business Edition.

I do not see anyway to enable TLS or SRTP.

I do not have an issue enabling TLS manually in the config file, however, we would want to enable SRTP on an extension by extension basis. Currently, the list of options does not show an "encryption" option. Am I missing something? Is there a way to type in your setting name?

One thing I did notice is that the encryption option is available on the "default" phone settings options page, so I guess a workaround is setting the default to include the encryption tag so you only need to modify it in the extension. However, this should be added to edit extension functionality for better usability.


Submitted by innovot on Wed, 05/06/2015 Permalink

Seconded. We are keen to evaluate ThirdLane again but this would be one showstopper as we are already using SRTP.

Submitted by netriplex on Tue, 05/12/2015 Permalink

Update, even when the encrypted option is configured as the default for extensions created on the system, since it is not available on the edit extension screen, the setting disappears if you ever edit an extension and there is no way to get it back without deleting the extensions and recreating it.

Submitted by thirdlane on Tue, 05/12/2015 Permalink

We were just discussing the best way to generate and manage certificates and how to manage encryption on an extension level. All this will be available very soon.

Submitted by netriplex on Fri, 05/15/2015 Permalink

Even if it is first implemented that certificates are only generated on a company level, that would be fine. I am sure the broader solution that you are talking about more aptly applies to the Multi-tenant edition, however, for the single tenant edition for which we are evaluating now and the customer has a hard requirement for TLS/SRTP, a single certificate to use company wide will suffice. If simply the option for encryption yes/no was allowed in the extension configuration screen, we could manually configure the TLS settings and certificates in the configuration file which would allow them to use the Thirdlane solution. However, they have a 6/1/2015 deadline for picking a solution, so not sure if they will be able to go the Thirdlane route as that is a short timeline for a temp fix.

Submitted by innovot on Wed, 07/22/2015 Permalink

Have just installed a beta for the Asterisk v11 release and was looking for SRTP. We are completely SRTP so this is quite a blocker for us considering moving forward with the Multi-Tenant offering.

Submitted by factsandit on Fri, 10/14/2016 Permalink

Hi,
Is there any update on supporting SRTP on thirdlane?
I got a curstomer that is interested on having it on their existing thirdlane 7

Thanks in advance

Submitted by eugene.voityuk on Mon, 10/17/2016 Permalink

Thirdlane supports DTLS SRTP configuration via UI using "other options" since 7.5.2.1. Are you on the older version, or you are missing some specific configuration fields there?