How to implement RTP/SRTP

[Centar]

I am tring to set up encryption on my trunk from https://www.divertmycalls.com/en/
they are the same bunch as:

DID Number with Unlimited Channels

Virtual PRI,Unlimited Channel Virtual Number ( DID Number) for Call Center ,Calling Card Operators, starting $ 7.49. Unlimited Incoming Minutes.Use with Asterisk,Softswitches,IPPBX,FREEPBX etc

www.carrymynumber.com

Unlimited Channel | DID Numbers|SIP Trunks

Multi Channel DID Numbers / Unlimited Channel Phone Numbers for Call Centers & Calling Card Provider.Inbound SIP trunks from USA,UK,Canada,Belgium,Ireland and rest of Europe

www.didnumberhub.com

and maybe more...

I sent them this question: Do your trunks support RTP/SRTP?
To which they replied:
Dear Sir,
All three SRTP key negotiation mechanisms are supported - SDES, DTLS and ZRTP.
SRTP media encryption is disabled by default.

What does this mean? Do I need a certificate from them or do I generate my own?
I have searched and read a lot but still don't understand how to set this up.
Can anyone provide a link or some help please?

 

[ostridge]

Do I need a certificate from them or do I generate my own?

I have a Lynksys PAP2T which takes a 'Mini Certificate' for SRTP. From what I understand it is implemented by the phone (or ATA ). In other words you need to find a way to generate a certificate for 'your phone'. I did manage to generate a srtp mini cert for on line on my PAP2T but I never got further than that. The cert for your phone may differ.

There is or was a thread on the PIAF forum - ah @restamp did some work on this Questions concerning Incredible PBX 13-12.2 upgrade

See also the thread: New SIP client for Android

Voip.ms Announces Encryption. Anybody got it to work?

SRTP added to The New Incredible PBX GUI See this thread


Some info about cisco 'genmc' Mini Certificate generator