[Freeswitch-users] Updating TLS

[Privus 007]

Anyone have any thoughts or hints on this?
Am I the only one interested in upgrading the security aspects of FS?

Don't mean to be a pain, but I'm surprised at the apparent lack of interest.


On Wed, Sep 11, 2013 at 8:09 PM, privs <privus007 at gmail.com> wrote:

> Hi,
>
> Given the recent revelations regarding the state of the net's (in)security,
> and as a longtime user of TLS with SRTP in FS, I think it would be prudent
> to update the TLS version and ciphers that FS can negotiate.
>
> Currently FS only supports TLS 1.0 (correct me if I'm wrong), which has
> some worrying security issues
> <http://www.wired.co.uk/news/archive/2013-02/05/weakness-in-tsl-protocol>
>  .
> Is it possible to upgrade to TLS 1.1 (or even better, 1.2)? I'd like to use
> AES in the 256 key length instead of the standard 128.
>
> Anyone know if this is on the agenda and/or where I can have a closer look
> at the cipher order presented by FS?
>
> Thanks
>
>
>
> --
> View this message in context:
> http://freeswitch-users.2379917.n2.nabble.com/Updating-TLS-tp7594774.html
> Sent from the freeswitch-users mailing list archive at Nabble.com.
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20130913/581c7d07/attachment.html