<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">You will find this in /etc/ngcp-config/config.yml under the lb: part…<div class=""><br class=""></div><div class=""><div class="">    tls:</div><div class="">      enable: yes</div><div class="">      port: '5061'</div><div class="">      sslcertfile: /etc/letsencrypt/live/your.domain.here/fullchain.pem</div><div class="">      sslcertkeyfile: /etc/letsencrypt/live/your.domain.here/privkey.pem</div><div class="">    udp_children: '8'</div><div class="">    use_dns_cache: on</div><div class=""><br class=""></div><div class="">This is the only thing you need for TLS…</div><div class=""><br class=""></div><div class="">My ownership of the files under /etc/letsencrypt are</div><div class=""><br class=""></div><div class="">drwxr-x---   9 kamailio ssl-cert   4096 Feb  6 06:00 letsencrypt</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">and this is in my /etc/group for ssl-cert</div><div class=""><br class=""></div><div class="">ssl-cert:x:112:prosody,www-data,kamailio</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="346" style="font-family: Helvetica; letter-spacing: normal; text-indent: 0px; text-transform: none; word-spacing: 0px; -webkit-text-stroke-width: 0px; width: 259.8pt;"><tbody class=""><tr class=""><td valign="top" style="padding: 0cm;" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman";" class=""><br class=""></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman";" class="">Warmest Regards,</div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman";" class=""><span style="color: purple; text-decoration: none;" class=""><a href="https://myrepublic.com.sg/" target="_blank" style="color: purple;" class=""><br class="Apple-interchange-newline"><img border="0" width="140" height="92" id="_x0000_i1027" src="https://myrepublic.com.sg/resources/email-signature.png" class=""></a></span><o:p class=""></o:p></div></td><td style="padding: 0cm;" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman";" class=""><b class=""><span style="font-size: 10pt; font-family: Arial; color: rgb(127, 43, 153);" class="">Walter Klomp</span></b><o:p class=""></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman";" class=""><span style="font-size: 8.5pt; font-family: Arial; color: rgb(77, 77, 77);" class="">Head of Voice & Systems</span><o:p class=""></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman";" class=""><span style="font-size: 8.5pt; font-family: Arial; color: rgb(77, 77, 77);" class="">MyRepublic Limited</span><o:p class=""></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman";" class=""><span style="font-size: 8.5pt; font-family: Arial; color: rgb(77, 77, 77);" class="">T: +65 6816 1120</span><o:p class=""></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman";" class=""><span style="font-size: 8.5pt; font-family: Arial; color: rgb(77, 77, 77);" class="">F: +65 6717 2031</span></div></td></tr><tr class=""><td width="333" colspan="2" style="width: 249.75pt; padding: 0cm;" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman";" class=""> <o:p class=""></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman";" class=""><span style="font-size: 8.5pt; font-family: Arial; color: rgb(77, 77, 77);" class="">MyRepublic Limited</span><o:p class=""></o:p></div><div style="font-family: arial, sans-serif; font-size: 16px; margin: 0in 0in 0.0001pt;" class=""><font color="#4d4d4d" face="Arial, sans-serif" class=""><span style="font-size: 11.3333px;" class="">11 Lorong 3 Toa Payoh Block B Jackson Square</span></font></div><div style="font-family: arial, sans-serif; font-size: 16px; margin: 0in 0in 0.0001pt;" class=""><font color="#4d4d4d" face="Arial, sans-serif" class=""><span style="font-size: 11.3333px;" class="">#04-11/15 Singapore 319579</span></font></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman";" class=""><span style="font-size: 8.5pt; font-family: Arial; color: rgb(77, 77, 77);" class=""><br class=""></span><span style="color: rgb(77, 77, 77);" class=""><a href="https://myrepublic.com.sg/" target="_blank" style="color: purple;" class=""><span style="font-size: 8.5pt; font-family: Arial; color: rgb(77, 77, 77);" class="">myrepublic.com.sg</span></a></span><o:p class=""></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman";" class=""><span style="font-size: 8.5pt; font-family: Arial; color: rgb(77, 77, 77);" class="">Follow us on: <a href="https://twitter.com/myrepublic" target="_blank" style="color: purple;" class=""><span style="color: rgb(77, 77, 77);" class="">Twitter</span></a> | <a href="https://facebook.com/myrepublicsg" target="_blank" style="color: purple;" class=""><span style="color: rgb(77, 77, 77);" class="">Facebook</span></a> | <a href="https://www.linkedin.com/company/myrepublic" style="color: purple;" class=""><span style="color: rgb(5, 99, 193);" class="">LinkedIn</span></a></span></div></td></tr></tbody></table><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><table class="x_MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="400" style="font-family: Helvetica; letter-spacing: normal; text-indent: 0px; text-transform: none; word-spacing: 0px; -webkit-text-stroke-width: 0px; width: 259.8pt;"><tbody class=""><tr class=""><td valign="top" class="" style="padding: 0in;"><br class=""></td></tr></tbody></table></div></div></div>
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">On 9 Feb 2019, at 9:48 PM, Brian Pelletier <<a href="mailto:brian.pelletier@aloe-me.net" class="">brian.pelletier@aloe-me.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta content="text/html;charset=UTF-8" http-equiv="Content-Type" class=""><div class=""><div style="font-size:10pt;font-family:Verdana,Arial,Helvetica,sans-serif;color:#00000;" class="">forgot to reply all... but any thoughts on what i see here?  should i be concerned seeing an enter for UDP here?<br class=""><br class=""><div class="">REGISTER <a href="sip:xxxx.xxxxxxx.com;transport=TLS" class="">sip:xxxx.xxxxxxx.com;transport=TLS</a> SIP/2.0<br class=""></div><div class="">              Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bK082f.3c0455a20b09e8e9b7a377e0ef3858de.0;i=fc2<br class=""></div><div class="">              Via: SIP/2.0/TLS 192.168.1.10:47320;received=216.220.237.110;branch=z9hG4bK-524287-1---adb1d6de16d604b3;rport=53283<br class=""></div><br class=""><br class=""><div class=""><br class=""></div><div id="Zm-_Id_-Sgn" class=""><div class=""><span class="size" style="font-size:10pt">Brian Pelletier</span><br class=""></div></div><div class=""><br class=""></div><div class="zmail_extra"><div id="Zm-_Id_-Sgn1" class=""><div class=""><br class=""></div><div class="">---- On Sat, 09 Feb 2019 08:44:50 -0500 <b class="">Brian Pelletier <<a target="_blank" href="mailto:brian.pelletier@aloe-me.net" class="">brian.pelletier@aloe-me.net</a>></b> wrote ----<br class=""></div></div><div class=""><br class=""></div><blockquote style="border-left: 1px solid #cccccc; padding-left: 6px; margin:0 0 0 5px" class=""><div class=""><div style="font-size: 10pt; font-family: Verdana, Arial, Helvetica, sans-serif" class=""><div class="">Thanks for the feedback. That was part of my problem, I couldnt (and still can't) find any options for configuring it on Spce. Though it seems to register just fine using TLS when I tell my end decided to use it.<br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><div class=""><span class="size" style="font-size:10pt">Brian Pelletier</span><br class=""></div></div><div class=""><div class=""><br class=""></div><div class="">---- On Sat, 09 Feb 2019 08:37:32 -0500<b class=""> <a target="_blank" href="mailto:walter@myrepublic.net" class="">walter@myrepublic.net</a> </b> wrote ----<br class=""></div><div class=""><br class=""></div></div></div></div><blockquote style="border-left: 1px solid rgb(204, 204, 204); padding-left: 6px; margin-left: 5px" class=""><div dir="auto" class=""><div class="">Works fine. Just add letsencrypt certificates and enable tls. Just make sure lb can read the certs. Proper rights. <br class=""></div><div class=""><div class=""><br class=""></div><div dir="ltr" class=""><div class="">Yours sincerely,<br class=""></div><div class="">Walter<br class=""></div></div><div dir="ltr" class=""><div class=""><br class=""></div><div class="">On 9 Feb 2019, at 8:13 PM, Brian Pelletier <<a target="_blank" href="mailto:brian.pelletier@aloe-me.net" class="">brian.pelletier@aloe-me.net</a>> wrote:<br class=""></div></div><blockquote class=""><div dir="ltr" class=""><div style="font-size: 10pt; font-family: Verdana, Arial, Helvetica, sans-serif" class=""><div class="">Has anyone had any experience registering deviced to CE using TLS? I can't find any setting or anything in documentation on it, but I have found stuff online about it being added since some version of 2.x.x.<br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><div class=""><span class="size" style="font-size:10pt">Brian Pelletier</span><br class=""></div></div><div class=""><br class=""></div></div><div class=""><br class=""></div></div></blockquote><blockquote class=""><div dir="ltr" class=""><div class=""><span class="">_______________________________________________</span><br class=""></div><div class=""><span class="">Spce-user mailing list</span><br class=""></div><div class=""><span class=""><a target="_blank" href="mailto:Spce-user@lists.sipwise.com" class="">Spce-user@lists.sipwise.com</a></span><br class=""></div><div class=""><span class=""><a target="_blank" href="https://lists.sipwise.com/listinfo/spce-user" class="">https://lists.sipwise.com/listinfo/spce-user</a></span><br class=""></div></div></blockquote></div><div class=""><br class=""></div><div class=""><span class="highlight" style="background-color:rgb(255, 255, 255)"><span class="colour" style="color:rgb(34, 34, 34)"><span class="font" style="font-family:sans-serif"><span class="size" style="font-size:10px"><span class="colour" style="color:rgb(102, 102, 102)"><i class=""><span class="font" style="font-family:Arial">The contents of this email and any attachments are confidential and may also be privileged. You must not disseminate the contents of this email and any attachments without permission of the sender. If you have received this email by mistake, please delete all copies and inform the sender immediately. You may refer to our company's Privacy Policy <a target="_blank" href="https://myrepublic.net/sg/legal/terms-of-use-policies/privacy-policy/" class="">here</a>.</span></i></span></span></span></span></span><br class=""></div></div></blockquote></blockquote></div><div class=""><br class=""></div></div><br class=""></div></div></blockquote></div><br class=""></div></body></html>
<br>
<span style="color:rgb(34,34,34);font-family:sans-serif;background-color:rgb(255,255,255)"><font size="1"><span style="font-family:Arial;color:rgb(102,102,102);font-style:italic;vertical-align:baseline;white-space:pre-wrap">The contents of this email and any attachments are confidential and may also be privileged. You must not disseminate the contents of this email and any attachments without permission of the sender. If you have received this email by mistake, please delete all copies and inform the sender immediately. You may refer to our company's Privacy Policy </span><span style="color:rgb(102,102,102);font-family:Arial;font-style:italic;vertical-align:baseline;white-space:pre-wrap"><a href="https://myrepublic.net/sg/legal/terms-of-use-policies/privacy-policy/" target="_blank">here</a></span><span style="font-family:Arial;color:rgb(102,102,102);font-style:italic;vertical-align:baseline;white-space:pre-wrap">.</span></font></span>