MyPBX Standard V6/V7 Administrator's Guide
www.yeastar.com Page 192
Set this parameter as ―No‖, then common name must be the same with IP or
domain name.
·
TLS Client Method
When using MyPBX as a TLS client, specify the protocol for outbound TLS
connections. You can select it as tlsv1, sslv2 or sslv3.
Figure J-2
Note:
1.
For security reason, we recommend enabling ―TLS Verify Client‖ and
disabling ―TLS Ignore Common Name‖, in which case, MyPBX will verify IP
phone‘s Certificate, the common name inside CA should be the same as its IP
or domain name.
2.
TLS Client Method: it‘s the TLS method of IP phone; you can contact the
manufacturer of the IP phone to get that.
3.
You need to reboot MyPBX to take effect after enabling TLS.
2. Prepare the whole certificates for TLS
Here are the certificates of MyPBX and IP phones for TLS registry as the screen
shot above:
MyPBX‘s CA: CA.crt.
MyPBX‘s server certificate: asterisk.pem.
IP phone‘s CA: CA.crt or CA.csr.
IP phone‘s server certificate: client.pem.
The certificate is generated via the toolkit OpenSSL, you can compile the source
package from
http://www.openssl.org/
, or download the tool used here,
download link:
www.yeastar.com/download/tools/TLS_CA_Tool.rar
Summary of Contents for MyPBX Standard V6
Page 1: ...Standard V6 V7 Administrator s Guide Version 20 19 0 23 Yeastar Technology Co Ltd...
Page 189: ...MyPBX Standard V6 V7 Administrator s Guide www yeastar com Page 189 Figure H 3...
Page 195: ...MyPBX Standard V6 V7 Administrator s Guide www yeastar com Page 195 Figure J 5...
Page 204: ...MyPBX Standard V6 V7 Administrator s Guide www yeastar com Page 204 Figure J 17...
Page 212: ...MyPBX Standard V6 V7 Administrator s Guide www yeastar com Page 212 Figure J 31...
