Configuring PJSIP with TLS

Requirements

The TLS support in PJSIP requires OpenSSL development kit (headers and libs) to be installed. Please see ​Getting Started page for more info.

Update (for PJSIP 1.5 onwards):

TLS support on Symbian is implemented natively using CSecureSocket, hence it doesn't require OpenSSL development kit. Please see TLS_on_Symbian for the detailed information.

Build PJSIP with TLS Support

Add this in config_site.h:

#define PJSIP_HAS_TLS_TRANSPORT 1

And rebuild PJSIP.

Update (for PJSIP 1.5 onward):

SIP TLS transport is implemented based on the new PJLIB ​secure socket abstraction, and its availability is based on PJ_HAS_SSL_SOCK macro value. For autoconf build system, the value is automatically detected based on OpenSSL availability. For other platforms, please declare this in your config_site.h:

#define PJ_HAS_SSL_SOCK 1

The PJSIP_HAS_TLS_TRANSPORT default value will be set to PJ_HAS_SSL_SOCK setting.

Running pjsua as TLS Server

1. You will need to have all three PEM files:
   1. The root certificate
   2. The server certificate
   3. The private key
2. Run pjsua:

   $ ./pjsua --use-tls --tls-ca-file root.pem --tls-cert-file server-cert.pem --tls-privkey-file privkey.pem
   
   

3. To see more TLS options, run ./pjsua --help.

Running pjsua as TLS Client

To make call to SERVER using TLS:

$ ./pjsua --use-tls <sip:SERVER;transport=tls>

To see more TLS options, run ./pjsua --help.

Links

• TLS_on_Symbian