= Configuring PJSIP with TLS =

== Requirements ==

The TLS support in PJSIP requires OpenSSL development kit (headers and libs) to be installed. Please see [http://www.pjsip.org/using.htm Getting Started] page for more info.

== Build PJSIP with TLS Support ==

Add this in {{{config_site.h}}}:
{{{
#define PJSIP_HAS_TLS_TRANSPORT 1
}}}

And rebuild PJSIP.

== Running pjsua as TLS Server ==

 1. Run pjsua:
  {{{
$ ./pjsua --use-tls --tls-ca-file root.pem --tls-cert-file server-cert.pem --tls-privkey-file privkey.pem

  }}}

== Running pjsua as TLS Client ==

To make call to SERVER using TLS:

{{{
$ ./pjsua --use-tls sip:SERVER;transport=tls
}}}


== Configuring Other User Agents ==

=== !EyeBeam ===

Install CACert certificate of authority:

 1. Run Internet Explorer browser
 1. Open https://www.cacert.org/index.php?id=3
 1. Click the link in the page that says to install certificate with IE

Restart !EyeBeam

Notes:
 1. !EyeBeam verifies the server name against commonName field of the certificate, so make sure commonName matches the hostname being contacted by !EyeBeam