[Freeswitch-users] TLS versions and PFS settings

[jungle Boogie]

Hi Daniel,
On 13 November 2014 at 12:15, Daniel Ivanov <sertys at gmail.com> wrote:
>
> Thanks, Brian. Precise as always. And yet how do i enable perfect forward
> secrecy?
>

Do you get PFS to work for you?


>  13 нояб. 2014 г. 18:20 пользователь "Brian West" <brian at freeswitch.org>
> написал:
>
> in a sofia profile:
>>
>>     <!-- TLS version default: tlsv1,tlsv1.1,tlsv1.2 -->
>>
>>
>>
>>     <param name="tls-version" value="$${sip_tls_version}"/>
>>
>>
>>
>>
>>
>>
>>
>>     <!-- TLS ciphers default: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH  -->
>>
>>
>>
>>     <param name="tls-ciphers" value="$${sip_tls_ciphers}"/>
>>
>>
>>
>>
>>
>>
>>
>> On Thu, Nov 13, 2014 at 8:55 AM, Daniel Ivanov <sertys at gmail.com> wrote:
>>
>>> What are the options to enable PFS on TLS support, i found the ability
>>> added in a changelog from feb,2014, but can't find the corresponding config
>>> file params.
>>> Also can i specify a list of allowed ciphers?
>>>
>>>
>> --
>>
>> *Brian West*
>> brian at freeswitch.org
>>
>> --
-------
inum: 883510009027723
sip: jungleboogie at sip2sip.info
xmpp: jungle-boogie at jit.si
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20141211/c41ec14a/attachment.html