提交 1e176093 authored 作者: Brian West's avatar Brian West

more tweaks to the default configs \;\)

git-svn-id: http://svn.freeswitch.org/svn/freeswitch/trunk@9906 d0543943-73ff-0310-b7d9-9358b9ac24b2
上级 a5e1fbb7
...@@ -57,15 +57,15 @@ ...@@ -57,15 +57,15 @@
<!--<param name="enable-3pcc" value="true"/>--> <!--<param name="enable-3pcc" value="true"/>-->
<!-- TLS: disabled by default, set to "true" to enable --> <!-- TLS: disabled by default, set to "true" to enable -->
<param name="tls" value="false"/> <param name="tls" value="$${external_ssl_enable}"/>
<!-- additional bind parameters for TLS --> <!-- additional bind parameters for TLS -->
<param name="tls-bind-params" value="transport=tls"/> <param name="tls-bind-params" value="transport=tls"/>
<!-- Port to listen on for TLS requests. (5061 will be used if unspecified) --> <!-- Port to listen on for TLS requests. (5061 will be used if unspecified) -->
<param name="tls-sip-port" value="5081"/> <param name="tls-sip-port" value="5081"/>
<!-- Location of the agent.pem and cafile.pem ssl certificates (needed for TLS server) --> <!-- Location of the agent.pem and cafile.pem ssl certificates (needed for TLS server) -->
<param name="tls-cert-dir" value="$${base_dir}/conf/ssl"/> <param name="tls-cert-dir" value="$${external_ssl_dir}"/>
<!-- TLS version ("sslv23" (default), "tlsv1"). NOTE: Phones may not work with TLSv1 --> <!-- TLS version ("sslv23" (default), "tlsv1"). NOTE: Phones may not work with TLSv1 -->
<param name="tls-version" value="tlsv1"/> <param name="tls-version" value="$${sip_tls_version}"/>
</settings> </settings>
</profile> </profile>
...@@ -84,15 +84,15 @@ ...@@ -84,15 +84,15 @@
<!--<param name="unregister-on-options-fail" value="true"/>--> <!--<param name="unregister-on-options-fail" value="true"/>-->
<!-- TLS: disabled by default, set to "true" to enable --> <!-- TLS: disabled by default, set to "true" to enable -->
<param name="tls" value="false"/> <param name="tls" value="$${internal_ssl_enable}"/>
<!-- additional bind parameters for TLS --> <!-- additional bind parameters for TLS -->
<param name="tls-bind-params" value="transport=tls"/> <param name="tls-bind-params" value="transport=tls"/>
<!-- Port to listen on for TLS requests. (5061 will be used if unspecified) --> <!-- Port to listen on for TLS requests. (5061 will be used if unspecified) -->
<param name="tls-sip-port" value="5061"/> <param name="tls-sip-port" value="5061"/>
<!-- Location of the agent.pem and cafile.pem ssl certificates (needed for TLS server) --> <!-- Location of the agent.pem and cafile.pem ssl certificates (needed for TLS server) -->
<param name="tls-cert-dir" value="$${base_dir}/conf/ssl"/> <param name="tls-cert-dir" value="$${internal_ssl_dir}"/>
<!-- TLS version ("sslv23" (default), "tlsv1"). NOTE: Phones may not work with TLSv1 --> <!-- TLS version ("sslv23" (default), "tlsv1"). NOTE: Phones may not work with TLSv1 -->
<param name="tls-version" value="tlsv1"/> <param name="tls-version" value="$${sip_tls_version}"/>
<!--If you don't want to pass through timestampes from 1 RTP call to another (on a per call basis with rtp_rewrite_timestamps chanvar)--> <!--If you don't want to pass through timestampes from 1 RTP call to another (on a per call basis with rtp_rewrite_timestamps chanvar)-->
<!--<param name="rtp-rewrite-timestamps" value="true"/>--> <!--<param name="rtp-rewrite-timestamps" value="true"/>-->
......
...@@ -124,3 +124,14 @@ ...@@ -124,3 +124,14 @@
<!-- true or false --> <!-- true or false -->
<X-PRE-PROCESS cmd="set" data="default_provider_register=false"/> <X-PRE-PROCESS cmd="set" data="default_provider_register=false"/>
<X-PRE-PROCESS cmd="set" data="default_provider_contact=5000"/> <X-PRE-PROCESS cmd="set" data="default_provider_contact=5000"/>
<!--
TLS default settings
-->
<X-PRE-PROCESS cmd="set" data="sip_tls_version=tlsv1"/>
<!-- Internal SIP Profile -->
<X-PRE-PROCESS cmd="set" data="internal_ssl_enable=false"/>
<X-PRE-PROCESS cmd="set" data="internal_ssl_dir=$${base_dir}/conf/ssl"/>
<!-- External SIP Profile -->
<X-PRE-PROCESS cmd="set" data="external_ssl_enable=false"/>
<X-PRE-PROCESS cmd="set" data="external_ssl_dir=$${base_dir}/conf/ssl"/>
Markdown 格式
0%
您添加了 0 到此讨论。请谨慎行事。
请先完成此评论的编辑!
注册 或者 后发表评论