SIP TLS - Certificate Revocation List (CRL checks)

[Weber, Thomas]

Hi

We have configured FreeSWITCH to use TLS (SIPS/SRTP). This works fine except that no CRL checks seem to be performed on certificates.

There does not seem to be a way to turn on CRL checks. Is this correct?
If so, is there a specific reason why this has not been implemented?
The TLS implementation is based on OpenSSL, so support for CRL checking should be relatively easy.

Thanks for your help
Thomas

Wichtiger Hinweis: Diese E-Mail kann Betriebs- oder Geschäftsgeheimnisse oder sonstige vertrauliche Informationen enthalten. Sollten Sie diese E-Mail irrtümlich erhalten haben, ist Ihnen eine Kenntnisnahme des Inhalts, eine Vervielfältigung oder Weitergabe der E-Mail ausdrücklich untersagt. Bitte benachrichtigen Sie uns und vernichten Sie die empfangene E-Mail. Vielen Dank.

Important Note: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal. Thank you for your cooperation.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20220504/10db14ab/attachment-0001.html>