Encryption settings (SRTP/TLS)

[falseinteger]

Overview

Add encryption configuration for secure VoIP calls.

Features

Transport Encryption (TLS)

• TLS for SIP signaling (already partially supported via transport setting)
• Certificate validation options
• Custom CA certificates

Media Encryption (SRTP)

• SRTP mode selection:
  • Disabled
  • Optional (SAVP/AVP fallback)
  • Required (SAVP only)
• SRTP key exchange:
  • SDES (SDP Security Descriptions)
  • DTLS-SRTP
• Encryption indicator in call UI

Account Settings (Advanced Mode)

• Media Encryption - Off / Optional / Required
• Key Exchange - SDES / DTLS-SRTP
• TLS Verification - Strict / Permissive

UI/UX

• Show lock icon during encrypted calls
• Warning indicator for unencrypted calls (if encryption preferred)
• Clear labeling of encryption status

Technical

• Configure baresip SRTP module
• Handle encryption negotiation failures gracefully
• Support oflcient cipher suites

Related Issues

• Settings screen with Basic/Advanced modes #32 - Settings screen