Https Example; Sip Call Control Security Using Tls - Dialogic DMG1000 User Manual

get lengthy if the PC/Web Browser needs to communicate with a number of Media Gateway units.
On the other hand, CA signed certificates require time and effort to install since the certificates
must be signed by a CA. However, once you have the signed certificate, the CA root certificate can
be used to communicate with multiple Media Gateway units.
7.2.2

HTTPS Example

An example of how HTTPS is used with a self-signed certificate is described below. In the
example, the Media Gateway has an IP address of 172.16.3.10 and uses a self-signed certificate.
1. Start the Media Gateway.
2. Start Internet Explorer (or any Web browser that supports HTTPS).
3. In the Web browser Address box, enter http://172.16.3.10.
4. At the login screen, enter a User name and Password, and click OK to login to the Media
Gateway.
5. Select the Security Web page > Certificate Management tab > Certificate Usage table >
HTTPS parameter and check that Self Signed is the selected value.
6. Go to the HTTPS table and click on Generate button on the Self Signed row. The Self Signed
Certificate Generation screen will appear.
7. Fill in the text boxes in the Value row of both the Certificate X509 Extensions and Certificate
Subject tables and then click the Generate button. After a short time, the following message
will appear: "Self signed Certificate was created". Click Continue to return to the Certificate
Management Web page.
8. In the HTTPS table, click the Export button in the Action column of the Self Signed row to
download the certificate from the Media Gateway to the PC.
9. Configure this certificate on the PC running the Web browser used to connect to the Media
Gateway via HTTPS. See
page 178 for details.
10. In the Web browser Address box, enter https://172.16.3.10.
11. At the login screen, enter a User name and Password. Then click OK to login to the Media
Gateway. HTTPS is now active.
7.3

SIP Call Control Security using TLS

This section includes the following information about SIP Call Control security using TLS:
• TLS Certificate Configuration
• TLS Feature Configuration
• TLS Examples
SIP is an application protocol used for VoIP call control. SIP messages are used for call setup and
tear down. These messages contain information such as call-party information, call media type,
whether it is a secure call, and if so, what encryption algorithm is used, etc. The SIP protocol can
be carried by UDP, TCP, or TLS transports. Both UDP and TCP transport data in clear text. As a
result, UDP and TCP can easily be monitored by third party hackers. TLS, on the other hand,
®
Dialogic 1000 and 2000 Media Gateway Series User's Guide — September 2007
Dialogic Corporation
Section 7.5, "Installing Certificate Using Internet
Data Security
Explorer", on
173