<div dir="ltr"><pre style="color:rgb(0,0,0)"><font face="verdana, sans-serif">Agreed ! TLS/SSL seems to be not so important unless FS is capable of providing security implementation in some form atleast. This is great, when you JUST have to secure your communication.</font></pre>
<pre style="color:rgb(0,0,0)"><font face="verdana, sans-serif">but, NOT , when security is the only concern. I have been trying to mature the TLS handshake on SUITE-B standard, but yet unsuccessful acquiring so. </font></pre>
<pre style="color:rgb(0,0,0)"><font face="verdana, sans-serif">I believe that FS use openSSL for dealing with encryption methods and therefore, I have taken it to the version 1.0.1e, which supports TLS1.1 , 1.2 . But , FS doesnt verfiy those Cipher [TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256].</font></pre>
<pre style="color:rgb(0,0,0)"><font face="verdana, sans-serif"><br></font></pre><pre style="color:rgb(0,0,0)"><font face="verdana, sans-serif">I have already a jira ticket opened here: </font></pre><pre style="color:rgb(0,0,0)">
<font face="verdana, sans-serif"><a href="http://jira.freeswitch.org/browse/FS-5719">http://jira.freeswitch.org/browse/FS-5719</a></font></pre></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Sep 13, 2013 at 3:54 PM, Privus 007 <span dir="ltr"><<a href="mailto:privus007@gmail.com" target="_blank">privus007@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Anyone have any thoughts or hints on this?<br>Am I the only one interested in upgrading the security aspects of FS?<br>
<br></div>Don't mean to be a pain, but I'm surprised at the apparent lack of interest.<br>
</div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Sep 11, 2013 at 8:09 PM, privs <span dir="ltr"><<a href="mailto:privus007@gmail.com" target="_blank">privus007@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
Given the recent revelations regarding the state of the net's (in)security,<br>
and as a longtime user of TLS with SRTP in FS, I think it would be prudent<br>
to update the TLS version and ciphers that FS can negotiate.<br>
<br>
Currently FS only supports TLS 1.0 (correct me if I'm wrong), which has<br>
some worrying security issues<br>
<<a href="http://www.wired.co.uk/news/archive/2013-02/05/weakness-in-tsl-protocol" target="_blank">http://www.wired.co.uk/news/archive/2013-02/05/weakness-in-tsl-protocol</a>> .<br>
Is it possible to upgrade to TLS 1.1 (or even better, 1.2)? I'd like to use<br>
AES in the 256 key length instead of the standard 128.<br>
<br>
Anyone know if this is on the agenda and/or where I can have a closer look<br>
at the cipher order presented by FS?<br>
<br>
Thanks<br>
<br>
<br>
<br>
--<br>
View this message in context: <a href="http://freeswitch-users.2379917.n2.nabble.com/Updating-TLS-tp7594774.html" target="_blank">http://freeswitch-users.2379917.n2.nabble.com/Updating-TLS-tp7594774.html</a><br>
Sent from the freeswitch-users mailing list archive at Nabble.com.<br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</blockquote></div><br></div>
</div></div><br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div><br></div>