SipTlsSettings
TLS certificate settings for a SIP node’s TLS transport. The node uses these
both as a TLS server (inbound / registered lines) and as a client (outbound
to a sips: far end). Omit the certificate and key to present an ephemeral
self-signed certificate, which is enough for a client whose certificate the
far end does not verify.
Field |
Type |
Repeated |
Description |
cert_file |
PEM certificate the node presents. Empty = ephemeral self-signed. |
||
privkey_file |
PEM private key for cert_file. Empty = ephemeral self-signed. |
||
password |
Passphrase for an encrypted private key. Empty = none. |
||
ca_file |
PEM CA bundle to verify the far end’s certificate against. Empty = none. |
||
verify_server |
Verify the far end’s certificate. Resolved by the SDK: true when a CA file is given (verify against it), false otherwise (accept any certificate). |