Encrypting MRCP v2

MRCPv2 TLS

Encrypting MRCP audio and messages is supported when using MRCPv2. This is done using the SIPS protocol to establish encryption for a new MRCP session using standard TLS methodology. The MRCP messages are encrypted using TLS. The audio traffic is encrypted using the SRTP protocol.

SIPS operates on a different port than standard MRCP; the default value is 5061. See sips_port.

Public key certificates need to be specified for both SIPS and MRCPv2/TLS. By default, self-signed certificates created during installation are used. Alternate certificates should be specified via configuration. See sips_ssl_cert_file and mrcp_tls_cert_file.

If desired, the allowed encryption ciphers can be limited via configuration. See sips_cipher_list and mrcp_tls_cipher_list.