How to configure TLS. (step by step)

[new-user]

HI
i am a new user. plz dont mind if i ask some basic and silly questions . I need help step by step.
I have one server (asterisk 1.4.21.2, Centos 5.2) and two endpoints.
I want to configure and test TLS.
i used these commands for openssl.
1st Step:
cd /tmp
mkdir -p /opt/openssl
wget http://www.openssl.org/source/openssl-0.9.8k.tar.gz
tar xvzf openssl-0.9.8k.tar.gz
cd openssl-0.9.8k
./config --prefix=/opt/openssl --openssldir=/opt/openssl
make
make test
make install
......................................
2nd step:
and then generated a self signed certificate with these commands.
$ openssl genrsa -out key.pem 1024
..................................
$ openssl req -new -key key.pem -out request.pem

Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company):
Organizational Unit Name (eg, section) []:.
Common Name (eg, YOUR name) []:local.pbx (my server host name)
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
......................................
$ openssl x509 -req -days 30 -in request.pem -signkey key.pem -out certificate.pem
............................................
now what should i do in sip.conf and extension.conf
any free softphone with TLS support??
I have phonerlite. It shows option of TLS but i read that it doesn't support TLS.

Please help me i will be very grateful to you.

 

[jbh]

I think you need asterisk 1.6 to use TLS.

 

[new-user]

thankx jbh