How to enable TCP/TLS and SRTP

Just run configure of CallWeaver with the two extra options and be sure to have libsrtp installed:

--enable-sip-tcp-support --enable-srtp 

To have CallWeaver initiate SRTP in calls add

 Set(_SIP_SRTP_SDES=1) 

before Dial/Answer() or CW will default to passive mode or no SRTP.

Example configuration for a snom phone:

Setup ->Identity ->Login:
Registrar: callweaver-ip
Outbound Proxy: callweaver-ip;transport=tls

Setup ->Identity ->RTP:
RTP Encryption: on
RTP/SAVP: optional OR mandatory

Known issues

The snom phone dont send a TLS Closure alert on Reboot, so the TCP FIN from the snom leads to the SSL_ERROR_SYSCALL/EOF warning. It’s harmless. But snom should fix this.

A bug CLI sip debug peer is deactivating SAVP somehow, see http://www.callweaver.org/ticket/401 so use tcpdump for debugging sip traffic.