VoIP: SIP-over-TLS and sRTP: Jami

Formerly SFLphone, GNU Ring, and now Jami.

Last tested version

2019-10-31
retested in May 2020 with 2020-05-11

Configuration

SIP-URI Host: to avoid incomplete registration, enter that value in the end
SIP-URI User: (Button) Advanced → Add a new SIP account → Username
SIP-over-TLS: Advanced settings → (Security) Encrypt negotiation
… CA certificate
… TLS protocol method: Default (to enable TLS 1.3)
… Verify incoming certificates
SDES-sRTP: … Encrypt media streams
… SDES for key exchange protocol
… Fallback on RTP on encryption failure
which is RTP/SAVP, 488, RTP/AVP (re-test required)
SIP-URI Host: (Button) General → SIP server

Software Bugs

Incoming Calls: do not work via TLS (re-test required)
SHA-2 Digest: does not pick MD5, continues without header Authorization, therefore is not able to register; therefore incompatible with Linphone
AES-256 sRTP: accepted although not supported; therefore no audio

Security

Bugs: SIP-over-TLS without authentication (re-test required)

back to the other (soft) phones.