From a4a70931504aa5b3f2a036ade9468fdb5e2a3085 Mon Sep 17 00:00:00 2001
From: Brian West <brian@freeswitch.org>
Date: Sat, 30 Aug 2008 18:25:53 +0000
Subject: [PATCH] you have to have this on each profile for TLS to be enabled

git-svn-id: http://svn.freeswitch.org/svn/freeswitch/trunk@9388 d0543943-73ff-0310-b7d9-9358b9ac24b2
---
 conf/sip_profiles/external.xml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/conf/sip_profiles/external.xml b/conf/sip_profiles/external.xml
index 5d5ee9f6ed..637488f511 100644
--- a/conf/sip_profiles/external.xml
+++ b/conf/sip_profiles/external.xml
@@ -39,5 +39,17 @@
     <param name="rtp-timeout-sec" value="300"/>
     <param name="rtp-hold-timeout-sec" value="1800"/>
     <!--<param name="enable-3pcc" value="true"/>-->
+
+    <!-- TLS: disabled by default, set to "true" to enable -->
+    <param name="tls" value="false"/>
+    <!-- additional bind parameters for TLS -->
+    <param name="tls-bind-params" value="transport=tls"/>
+    <!-- Port to listen on for TLS requests. (5061 will be used if unspecified) -->
+    <param name="tls-sip-port" value="5081"/>
+    <!-- Location of the agent.pem and cafile.pem ssl certificates (needed for TLS server) -->
+    <param name="tls-cert-dir" value="$${base_dir}/conf/ssl"/>
+    <!-- TLS version ("sslv23" (default), "tlsv1"). NOTE: Phones may not work with TLSv1 -->
+    <param name="tls-version" value="tlsv1"/>
+
   </settings>
 </profile>