Configuring PJSIP with TLS

Requirements

The TLS support in PJSIP requires OpenSSL development kit (headers and libs) to be installed. Please see ​Getting Started page for more info.

Build PJSIP with TLS Support

Add this in config_site.h:

#define PJSIP_HAS_TLS_TRANSPORT 1

And rebuild PJSIP.

Running pjsua as TLS Server

1. You will need to have all three PEM files:
   1. The root certificate
   2. The server certificate
   3. The private key
2. Run pjsua:

   $ ./pjsua --use-tls --tls-ca-file root.pem --tls-cert-file server-cert.pem --tls-privkey-file privkey.pem
   
   

3. To see more TLS options, run ./pjsua --help.

Running pjsua as TLS Client

To make call to SERVER using TLS:

$ ./pjsua --use-tls sip:SERVER;transport=tls

To see more TLS options, run ./pjsua --help.