[Freeswitch-docs] TLS1.2 in OS X

Mario mario_fs at mgtech.com
Thu Oct 1 19:27:53 MSD 2015


All browsers tested on OS X and reported by other people as well. So using the non-TLS 2 OS X systems now for FS is not worth the hassle considering special GCC, Xcode, etc. issues. I will update the wiki in the next couple of days.
Mario G


> On Sep 30, 2015, at 8:31 PM, Michael Jerris <mike at jerris.com> wrote:
> 
> Safari or all browsers? either way, not much will be done to resolve that.  
> 
> On Wednesday, September 30, 2015, Mario <mario_fs at mgtech.com <mailto:mario_fs at mgtech.com>> wrote:
> I will add your comments to the OS X wiki updates when I get to them. Will do once I have FS installed on El Capitan, working on it now. There is still a problem though… No browser on these old OS Xs can connect to FS wiki, etc. to look at doc anyway.
> Mario G
> 
>> On Sep 30, 2015, at 1:01 PM, Michael Jerris <mike at jerris.com <javascript:_e(%7B%7D,'cvml','mike at jerris.com');>> wrote:
>> 
>> we are going to see issues on this... in some cases, I just don't care (i.e. Centos 6)... in others, we need to make recommendations.  So far the workarounds are: 
>> 1. use ssh for git; need link for how to do that
>> 2. use release tarballs
>> 3. use our packages
>> 4. report the lack of tls 1.2 support in git to your distro.
>> 
>> We are going to have to wait this out a bit and see how it all works out, but its unlikely to change, so we need to make sure to doc this clearly, report upstream where necessary, etc.
>> 
>> 
>>> On Sep 30, 2015, at 3:50 PM, Bote Man <bote_radio at botecomm.com <javascript:_e(%7B%7D,'cvml','bote_radio at botecomm.com');>> wrote:
>>> 
>>> Forwarded for reference.
>>>  
>>> Bote
>>>  
>>>  
>>> From: freeswitch-users-bounces at lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces at lists.freeswitch.org');> [mailto:freeswitch-users-bounces at lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces at lists.freeswitch.org');>] On Behalf Of Mario
>>> Sent: Wednesday, 30 September, 2015 12:56
>>> To: FreeSWITCH Users Help
>>> Subject: Re: [Freeswitch-users] unable to clone master " git clone https://freeswitch.org/stash/scm/fs/freeswitch.git <https://freeswitch.org/stash/scm/fs/freeswitch.git>"
>>>  
>>> Just to add to this topic…. Today I was going to do one last FreeSwitch build and test on OS X 10.6 and 10.7 to update the wiki before retiring those wiki pages. I could not git clone and I could not even access freeswitch.org <http://freeswitch.org/>. After research and seeing this thread I found TLS 1.2 is missing from not only 10.6 and 10.7 but also 10.8. After some research I found there is no way to add TLS 1.2 to 10.8 so I will be retiring that as well. So this makes my wiki updates a little easier!
>>> Mario G
>>>  
>>>  
>>>> On Sep 29, 2015, at 3:07 AM, Shabbir abbasi <shabbirabbasi92 at gmail.com <javascript:_e(%7B%7D,'cvml','shabbirabbasi92 at gmail.com');>> wrote:
>>>>  
>>>> i have created my account on  https://freeswitch.org/jira <https://freeswitch.org/jira>
>>>> then i have used that details to login on   https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse <https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse>
>>>> after login goto manage my account setting  and aded ssh keys 
>>>> https://freeswitch.org/stash/plugins/servlet/ssh/account/keys <https://freeswitch.org/stash/plugins/servlet/ssh/account/keys>
>>>> after that  in terminal  git clone   ssh://git@freeswitch.org:7999/fs/freeswitch.git <http://git@freeswitch.org:7999/fs/freeswitch.git>  is working for me
>>>>  
>>>> On Tue, Sep 29, 2015 at 1:04 PM, Vikas Kumar <Vikas.Kumar1 at timesinternet.in <javascript:_e(%7B%7D,'cvml','Vikas.Kumar1 at timesinternet.in');>> wrote:
>>>> What were the steps you followed while cloning using ssh.
>>>>  
>>>> From: freeswitch-users-bounces at lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces at lists.freeswitch.org');> [mailto:freeswitch-users-bounces at lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces at lists.freeswitch.org');>] On Behalf Of Shabbir abbasi
>>>> Sent: 28 September 2015 11:29
>>>> To: FreeSWITCH Users Help
>>>> 
>>>> Subject: Re: [Freeswitch-users] unable to clone master " git clone https://freeswitch.org/stash/scm/fs/freeswitch.git <https://freeswitch.org/stash/scm/fs/freeswitch.git>"
>>>>  
>>>>  
>>>> got success  via  ssh 
>>>>  
>>>> On Mon, Sep 28, 2015 at 10:27 AM, Michael Giagnocavo <mgg at giagnocavo.net <javascript:_e(%7B%7D,'cvml','mgg at giagnocavo.net');>> wrote:
>>>> Or… re-enable TLS1 and 1.1 with downgrade protection and problem solved with no security issues?
>>>>  
>>>> From: freeswitch-users-bounces at lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces at lists.freeswitch.org');> [mailto:freeswitch-users-bounces at lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces at lists.freeswitch.org');>] On Behalf Of Ken Rice
>>>> Sent: Sunday, September 27, 2015 12:37 PM
>>>> To: FreeSWITCH Users Help <freeswitch-users at lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users at lists.freeswitch.org');>>
>>>> Subject: Re: [Freeswitch-users] unable to clone master " git clone https://freeswitch.org/stash/scm/fs/freeswitch.git <https://freeswitch.org/stash/scm/fs/freeswitch.git>"
>>>>  
>>>> Upgrate to debian 8 or centos 7, or clone over ssh (you'll need to create an account for the later)
>>>> 
>>>> Sent from my iPhone
>>>> 
>>>> On Sep 27, 2015, at 1:25 PM, Shabbir abbasi <shabbirabbasi92 at gmail.com <javascript:_e(%7B%7D,'cvml','shabbirabbasi92 at gmail.com');>> wrote:
>>>> 
>>>>> any solution ?
>>>>>  
>>>>> On Sun, Sep 27, 2015 at 11:17 PM, Michael Jerris <mike at jerris.com <javascript:_e(%7B%7D,'cvml','mike at jerris.com');>> wrote:
>>>>>> cent 6 might not have TLS 1.2 support.
>>>>>> 
>>>>>> 
>>>>>> On Sunday, September 27, 2015, Shabbir abbasi <shabbirabbasi92 at gmail.com <javascript:_e(%7B%7D,'cvml','shabbirabbasi92 at gmail.com');>> wrote:
>>>>>>> Dear michael,
>>>>>>> CentOS release 6.7 (Final)
>>>>>>> Linux localhost.localdomain 3.10.40-1.el6.elrepo.i686
>>>>>>> after   Yum update 
>>>>>>> export GIT_CURL_VERBOSE=1
>>>>>>> now error is
>>>>>>> git  clone    https://freeswitch.org/stash/scm/fs/freeswitch.git <https://freeswitch.org/stash/scm/fs/freeswitch.git>
>>>>>>> Initialized empty Git repository in /usr/src/freeswitch/.git/
>>>>>>> * Couldn't find host freeswitch.org <http://freeswitch.org/> in the .netrc file; using defaults
>>>>>>> * About to connect() to freeswitch.org <http://freeswitch.org/> port 443 (#0)
>>>>>>> *   Trying 209.105.235.6... * Connected to freeswitch.org <http://freeswitch.org/> (209.105.235.6) port 443 (#0)
>>>>>>> * Initializing NSS with certpath: sql:/etc/pki/nssdb
>>>>>>> * NSS error -12190
>>>>>>> * Expire cleared
>>>>>>> * Closing connection #0
>>>>>>> * Couldn't find host freeswitch.org <http://freeswitch.org/> in the .netrc file; using defaults
>>>>>>> * About to connect() to freeswitch.org <http://freeswitch.org/> port 443 (#0)
>>>>>>> *   Trying 209.105.235.6... * Connected to freeswitch.org <http://freeswitch.org/> (209.105.235.6) port 443 (#0)
>>>>>>> * NSS error -12190
>>>>>>> * Expire cleared
>>>>>>> * Closing connection #0
>>>>>>> error:  while accessing https://freeswitch.org/stash/scm/fs/freeswitch.git/info/refs <https://freeswitch.org/stash/scm/fs/freeswitch.git/info/refs>
>>>>>>> 
>>>>>>> fatal: HTTP request failed
>>>>>>>  
>>>>>>> 
>>>>>>>  
>>>>>>> On Sun, Sep 27, 2015 at 10:18 PM, Michael Jerris <mike at jerris.com <javascript:_e(%7B%7D,'cvml','mike at jerris.com');>> wrote:
>>>>>>>> what operating system is this?  
>>>>>>>> 
>>>>>>>> 
>>>>>>>> On Sunday, September 27, 2015, Shabbir abbasi <shabbirabbasi92 at gmail.com <javascript:_e(%7B%7D,'cvml','shabbirabbasi92 at gmail.com');>> wrote:
>>>>>>>>>  git clone https://freeswitch.org/stash/scm/fs/freeswitch.git <https://freeswitch.org/stash/scm/fs/freeswitch.git>
>>>>>>>>> 
>>>>>>>>> Initialized empty Git repository in /usr/src/freeswitch/.git/
>>>>>>>>> error: SSL write: error -5938 while accessing https://freeswitch.org/stash/scm/fs/freeswitch.git/info/refs <https://freeswitch.org/stash/scm/fs/freeswitch.git/info/refs>
>>>>>>>>> 
>>>>>>>>> fatal: HTTP request failed
>>>>>>>>> 
>>>>>>>>> any solution  ?
>>>>>>>> 
>>>>>>>> 
>>>>>>>> _________________________________________________________________________
>>>>>>>> Professional FreeSWITCH Consulting Services:
>>>>>>>> consulting at freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting at freeswitch.org');>
>>>>>>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>>>>>>> 
>>>>>>>> Official FreeSWITCH Sites
>>>>>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>>>>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>>>>>>> http://www.cluecon.com <http://www.cluecon.com/>
>>>>>>>> 
>>>>>>>> FreeSWITCH-users mailing list
>>>>>>>> FreeSWITCH-users at lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users at lists.freeswitch.org');>
>>>>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>>>>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>>>>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>>>>>  
>>>>>> 
>>>>>> 
>>>>>> _________________________________________________________________________
>>>>>> Professional FreeSWITCH Consulting Services:
>>>>>> consulting at freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting at freeswitch.org');>
>>>>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>>>>> 
>>>>>> Official FreeSWITCH Sites
>>>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>>>>> http://www.cluecon.com <http://www.cluecon.com/>
>>>>>> 
>>>>>> FreeSWITCH-users mailing list
>>>>>> FreeSWITCH-users at lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users at lists.freeswitch.org');>
>>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>>>  
>>>>> _________________________________________________________________________
>>>>> Professional FreeSWITCH Consulting Services: 
>>>>> consulting at freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting at freeswitch.org');>
>>>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>>>> 
>>>>> Official FreeSWITCH Sites
>>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>>>> http://www.cluecon.com <http://www.cluecon.com/>
>>>>> 
>>>>> FreeSWITCH-users mailing list
>>>>> FreeSWITCH-users at lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users at lists.freeswitch.org');>
>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>> 
>>>> _________________________________________________________________________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting at freeswitch.org');>
>>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>>> 
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>>> http://www.cluecon.com <http://www.cluecon.com/>
>>>> 
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users at lists.freeswitch.org');>
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>>  
>>>> Disclaimer :-
>>>> The information in this e-mail and any attachments is confidential and may be 
>>>> legally privileged. It is intended solely for the addressee or addressees. If you are 
>>>> not an intended recipient, please delete the message and any attachments and 
>>>> notify the sender of misdelivery. Any use or disclosure of the contents of either is 
>>>> unauthorised and may be unlawful. All liability for viruses is excluded to the fullest 
>>>> extent permitted by law. Any views expressed in this message are those of the 
>>>> individual sender, except where the sender states them, with requisite authority, to 
>>>> be those of the specific TIMES GROUP company.
>>>> 
>>>> _________________________________________________________________________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting at freeswitch.org');>
>>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>>> 
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>>> http://www.cluecon.com <http://www.cluecon.com/>
>>>> 
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users at lists.freeswitch.org');>
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>>  
>>>> _________________________________________________________________________
>>>> Professional FreeSWITCH Consulting Services: 
>>>> consulting at freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting at freeswitch.org');>
>>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>>> 
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>>> http://www.cluecon.com <http://www.cluecon.com/>
>>>> 
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users at lists.freeswitch.org');>
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>  
>>> _______________________________________________
>>> Freeswitch-docs mailing list
>>> Freeswitch-docs at lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','Freeswitch-docs at lists.freeswitch.org');>
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs <http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs>
>> _______________________________________________
>> Freeswitch-docs mailing list
>> Freeswitch-docs at lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','Freeswitch-docs at lists.freeswitch.org');>
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs <http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs>
> 
> _______________________________________________
> Freeswitch-docs mailing list
> Freeswitch-docs at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-docs/attachments/20151001/c8551544/attachment-0001.html 


Join us at ClueCon 2014 Aug 4-7, 2014
More information about the Freeswitch-docs mailing list