[Freeswitch-docs] TLS1.2 in OS X

Thu Oct 1 00:01:35 MSD 2015

we are going to see issues on this... in some cases, I just don't care (i.e. Centos 6)... in others, we need to make recommendations.  So far the workarounds are: 
1. use ssh for git; need link for how to do that
2. use release tarballs
3. use our packages
4. report the lack of tls 1.2 support in git to your distro.

We are going to have to wait this out a bit and see how it all works out, but its unlikely to change, so we need to make sure to doc this clearly, report upstream where necessary, etc.

> On Sep 30, 2015, at 3:50 PM, Bote Man <bote_radio at botecomm.com> wrote:
> 
> Forwarded for reference.
>  
> Bote
>  
>  
> From: freeswitch-users-bounces at lists.freeswitch.org <mailto:freeswitch-users-bounces at lists.freeswitch.org> [mailto:freeswitch-users-bounces at lists.freeswitch.org <mailto:freeswitch-users-bounces at lists.freeswitch.org>] On Behalf Of Mario
> Sent: Wednesday, 30 September, 2015 12:56
> To: FreeSWITCH Users Help
> Subject: Re: [Freeswitch-users] unable to clone master " git clone https://freeswitch.org/stash/scm/fs/freeswitch.git <https://freeswitch.org/stash/scm/fs/freeswitch.git>"
>  
> Just to add to this topic…. Today I was going to do one last FreeSwitch build and test on OS X 10.6 and 10.7 to update the wiki before retiring those wiki pages. I could not git clone and I could not even access freeswitch.org <http://freeswitch.org/>. After research and seeing this thread I found TLS 1.2 is missing from not only 10.6 and 10.7 but also 10.8. After some research I found there is no way to add TLS 1.2 to 10.8 so I will be retiring that as well. So this makes my wiki updates a little easier!
> Mario G
>  
>  
>> On Sep 29, 2015, at 3:07 AM, Shabbir abbasi <shabbirabbasi92 at gmail.com <mailto:shabbirabbasi92 at gmail.com>> wrote:
>>  
>> i have created my account on  https://freeswitch.org/jira <https://freeswitch.org/jira>
>> then i have used that details to login on   https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse <https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse>
>> after login goto manage my account setting  and aded ssh keys 
>> https://freeswitch.org/stash/plugins/servlet/ssh/account/keys <https://freeswitch.org/stash/plugins/servlet/ssh/account/keys>
>> after that  in terminal  git clone   ssh://git@freeswitch.org:7999/fs/freeswitch.git <http://git@freeswitch.org:7999/fs/freeswitch.git>  is working for me
>>  
>> On Tue, Sep 29, 2015 at 1:04 PM, Vikas Kumar <Vikas.Kumar1 at timesinternet.in <mailto:Vikas.Kumar1 at timesinternet.in>> wrote:
>> What were the steps you followed while cloning using ssh.
>>  
>> From: freeswitch-users-bounces at lists.freeswitch.org <mailto:freeswitch-users-bounces at lists.freeswitch.org> [mailto:freeswitch-users-bounces at lists.freeswitch.org <mailto:freeswitch-users-bounces at lists.freeswitch.org>] On Behalf Of Shabbir abbasi
>> Sent: 28 September 2015 11:29
>> To: FreeSWITCH Users Help
>> 
>> Subject: Re: [Freeswitch-users] unable to clone master " git clone https://freeswitch.org/stash/scm/fs/freeswitch.git <https://freeswitch.org/stash/scm/fs/freeswitch.git>"
>>  
>>  
>> got success  via  ssh 
>>  
>> On Mon, Sep 28, 2015 at 10:27 AM, Michael Giagnocavo <mgg at giagnocavo.net <mailto:mgg at giagnocavo.net>> wrote:
>> Or… re-enable TLS1 and 1.1 with downgrade protection and problem solved with no security issues?
>>  
>> From: freeswitch-users-bounces at lists.freeswitch.org <mailto:freeswitch-users-bounces at lists.freeswitch.org> [mailto:freeswitch-users-bounces at lists.freeswitch.org <mailto:freeswitch-users-bounces at lists.freeswitch.org>] On Behalf Of Ken Rice
>> Sent: Sunday, September 27, 2015 12:37 PM
>> To: FreeSWITCH Users Help <freeswitch-users at lists.freeswitch.org <mailto:freeswitch-users at lists.freeswitch.org>>
>> Subject: Re: [Freeswitch-users] unable to clone master " git clone https://freeswitch.org/stash/scm/fs/freeswitch.git <https://freeswitch.org/stash/scm/fs/freeswitch.git>"
>>  
>> Upgrate to debian 8 or centos 7, or clone over ssh (you'll need to create an account for the later)
>> 
>> Sent from my iPhone
>> 
>> On Sep 27, 2015, at 1:25 PM, Shabbir abbasi <shabbirabbasi92 at gmail.com <mailto:shabbirabbasi92 at gmail.com>> wrote:
>> 
>>> any solution ?
>>>  
>>> On Sun, Sep 27, 2015 at 11:17 PM, Michael Jerris <mike at jerris.com <mailto:mike at jerris.com>> wrote:
>>>> cent 6 might not have TLS 1.2 support.
>>>> 
>>>> 
>>>> On Sunday, September 27, 2015, Shabbir abbasi <shabbirabbasi92 at gmail.com <mailto:shabbirabbasi92 at gmail.com>> wrote:
>>>>> Dear michael,
>>>>> CentOS release 6.7 (Final)
>>>>> Linux localhost.localdomain 3.10.40-1.el6.elrepo.i686
>>>>> after   Yum update 
>>>>> export GIT_CURL_VERBOSE=1
>>>>> now error is
>>>>> git  clone    https://freeswitch.org/stash/scm/fs/freeswitch.git <https://freeswitch.org/stash/scm/fs/freeswitch.git>
>>>>> Initialized empty Git repository in /usr/src/freeswitch/.git/
>>>>> * Couldn't find host freeswitch.org <http://freeswitch.org/> in the .netrc file; using defaults
>>>>> * About to connect() to freeswitch.org <http://freeswitch.org/> port 443 (#0)
>>>>> *   Trying 209.105.235.6... * Connected to freeswitch.org <http://freeswitch.org/> (209.105.235.6) port 443 (#0)
>>>>> * Initializing NSS with certpath: sql:/etc/pki/nssdb
>>>>> * NSS error -12190
>>>>> * Expire cleared
>>>>> * Closing connection #0
>>>>> * Couldn't find host freeswitch.org <http://freeswitch.org/> in the .netrc file; using defaults
>>>>> * About to connect() to freeswitch.org <http://freeswitch.org/> port 443 (#0)
>>>>> *   Trying 209.105.235.6... * Connected to freeswitch.org <http://freeswitch.org/> (209.105.235.6) port 443 (#0)
>>>>> * NSS error -12190
>>>>> * Expire cleared
>>>>> * Closing connection #0
>>>>> error:  while accessing https://freeswitch.org/stash/scm/fs/freeswitch.git/info/refs <https://freeswitch.org/stash/scm/fs/freeswitch.git/info/refs>
>>>>> 
>>>>> fatal: HTTP request failed
>>>>>  
>>>>> 
>>>>>  
>>>>> On Sun, Sep 27, 2015 at 10:18 PM, Michael Jerris <mike at jerris.com <mailto:mike at jerris.com>> wrote:
>>>>>> what operating system is this?  
>>>>>> 
>>>>>> 
>>>>>> On Sunday, September 27, 2015, Shabbir abbasi <shabbirabbasi92 at gmail.com <mailto:shabbirabbasi92 at gmail.com>> wrote:
>>>>>>>  git clone https://freeswitch.org/stash/scm/fs/freeswitch.git <https://freeswitch.org/stash/scm/fs/freeswitch.git>
>>>>>>> 
>>>>>>> Initialized empty Git repository in /usr/src/freeswitch/.git/
>>>>>>> error: SSL write: error -5938 while accessing https://freeswitch.org/stash/scm/fs/freeswitch.git/info/refs <https://freeswitch.org/stash/scm/fs/freeswitch.git/info/refs>
>>>>>>> 
>>>>>>> fatal: HTTP request failed
>>>>>>> 
>>>>>>> any solution  ?
>>>>>> 
>>>>>> 
>>>>>> _________________________________________________________________________
>>>>>> Professional FreeSWITCH Consulting Services:
>>>>>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>>>>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>>>>> 
>>>>>> Official FreeSWITCH Sites
>>>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>>>>> http://www.cluecon.com <http://www.cluecon.com/>
>>>>>> 
>>>>>> FreeSWITCH-users mailing list
>>>>>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>>>  
>>>> 
>>>> 
>>>> _________________________________________________________________________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>>> 
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>>> http://www.cluecon.com <http://www.cluecon.com/>
>>>> 
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>  
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services: 
>>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>> 
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>> http://www.cluecon.com <http://www.cluecon.com/>
>>> 
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>> 
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>> 
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org <http://www.freeswitch.org/>
>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>> http://www.cluecon.com <http://www.cluecon.com/>
>> 
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>  
>> Disclaimer :-
>> The information in this e-mail and any attachments is confidential and may be 
>> legally privileged. It is intended solely for the addressee or addressees. If you are 
>> not an intended recipient, please delete the message and any attachments and 
>> notify the sender of misdelivery. Any use or disclosure of the contents of either is 
>> unauthorised and may be unlawful. All liability for viruses is excluded to the fullest 
>> extent permitted by law. Any views expressed in this message are those of the 
>> individual sender, except where the sender states them, with requisite authority, to 
>> be those of the specific TIMES GROUP company.
>> 
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>> 
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org <http://www.freeswitch.org/>
>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>> http://www.cluecon.com <http://www.cluecon.com/>
>> 
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>  
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services: 
>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>> 
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org <http://www.freeswitch.org/>
>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>> http://www.cluecon.com <http://www.cluecon.com/>
>> 
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>> http://www.freeswitch.org <http://www.freeswitch.org/>
>  
> _______________________________________________
> Freeswitch-docs mailing list
> Freeswitch-docs at lists.freeswitch.org <mailto:Freeswitch-docs at lists.freeswitch.org>
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs <http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-docs/attachments/20150930/ff46a31c/attachment-0001.html 