Put your mouse cursor over that TLS icon and you will see why the icon is not "golden". TLS is based on certificates and server certificates are created for a special domain. But you connect directly to an IP address. That IP address doesn't match with the name (CN) within the server certificate. Thats the reason for the different color of the icon.
This white/grayed icon doesn't mean that the encryption is less secure - it just tells that the remote party is not the same as it tells within the certificate.

You would need a server certificate where the CN is the IP address of that PC.
But if you don't like the why how PhonerLite is handling that - feel free to use any other softphone.

You have to use a real server certificate. If you export such certificate in text format (.pem) you will get the right format. But if you create a self signed certificate you have the problem that others doesn't see that certificate as valid, as long they doesn't trust the same certificate authority (CA).
All that certificate stuff is very complicated. Therefore PhonerLite has a built in certificate to use TLS out of the box. Only if you are familiar with creating certificates you should change any certificate setting in PhonerLite.

@Tom22
I didn't interpret this as criticism. I just wanted to tell, that PhonerLite is a hobby project and I don't have time to implement all theoretical stuff. I just wanted to understand how ZRTP is working and used therefore my own implementation for that - that is even compatible to ZFone & Co.
I don't like to document things - that is my fault, I know. But writing documentations is no fun for me. Hopefully you understand.

TLS is not working stably with Freeswitch. Every other client is working fine with the same Freeswitch.
Phonerlite registers, but sometime later stops and tries to register.

Also the debug option seems to have vanished, I have debug selected in the menu, but I am unable to see the debug tab/window. 

Recently also when I press save button, phonerlite hangs for a few seconds (not really hangs, but freezes). 

Is there any change in SAVP ? Earlier phonerlite SRTP use to work without SAVP, but now it is not working without SAVP. 
Also does ZRTP require SAVP ?

"Do you have an installation where public access is possible? So where can I try to register and try for my own? I don't want to install and configure Freeswitch for my own."

Unfortunately I don't have one. Installation is fairly straightforward and is there on the install wiki. If you have a VM or machine I can access, I can install. You can make a VM so you don't have to worry.

---------

The save button freezing for few moments is consistent and happens EVERY time. It freezes for about 2 seconds. Its not a big deal compared to TLS, ZRTP kind of things, but is observable. This with latest version

-----------

"If you disable "Debug" in the Options menu, there is no debug output at all. So "Debug" must be enabled in Options menu. Then you can switch the visibility of debug in the help menu."

Of course. With it enabled only I can't see it. 

------------------------

I know the switch for SAVP of course. What I am saying is that did SAVP implementation change between phonerlite versions ? 

Earlier phonerlite SRTP use to work without SAVP, but now it is not working without SAVP.
Also does ZRTP require SAVP ? 

botyhc wrote on 30. Jan 2012 at 01:32:


Hi!
I faced the same issue with freeswitch. And I solved it by changing param name="tls-verify-depth" to value="1" (by default "2") in ../sip_profiles/internal.xml
After that PhonerLite successfully registered and start to work.

Hi! Sorry, I was wrong, any changes to tls-verify-depth had no effect. It was just coincidence. I tried with and without Client certificate - nothing help.

PL -> REGISTER -> FS
PL <- UNATHORIZED <- FS
PL -> REGISTER w/Authorization field -> FS
PL <- 200 OK <- FS (PhonerLite ignore it and send reg. again)
PL -> REGISTER w/Authorization field -> FS
In att you can find debug output from phonerlite.

Please, advise.