<div dir="ltr">in a sofia profile:<div><br></div><div>







<p class=""><span class="">    </span><span class="">&lt;!-- TLS version default: tlsv1,tlsv1.1,tlsv1.2 --&gt;</span><span class="">                                                                                                         </span></p>
<p class=""><span class="">    &lt;</span><span class="">param</span><span class=""> </span><span class="">name</span><span class="">=</span><span class="">&quot;tls-version&quot;</span><span class=""> </span><span class="">value</span><span class="">=</span><span class="">&quot;$${sip_tls_version}&quot;</span><span class="">/&gt;                                                                                                     </span></p>
<p class=""><span class="">                                                                                                                                                                </span></p>
<p class=""><span class="">    </span><span class="">&lt;!-- TLS </span><span class="">cip</span><span class="">hers default: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH  --&gt;</span><span class="">                                                                                            </span></p>
<p class=""><span class="">    &lt;</span><span class="">param</span><span class=""> </span><span class="">name</span><span class="">=</span><span class="">&quot;tls-ciphers&quot;</span><span class=""> </span><span class="">value</span><span class="">=</span><span class="">&quot;$${sip_tls_ciphers}&quot;</span><span class="">/&gt;                                                                                                     </span></p>
<p class=""><span class="">                                                               </span></p><p class=""><span class=""><br></span></p></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Nov 13, 2014 at 8:55 AM, Daniel Ivanov <span dir="ltr">&lt;<a href="mailto:sertys@gmail.com" target="_blank">sertys@gmail.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">What are the options to enable PFS on TLS support, i found the ability added in a changelog from feb,2014, but can&#39;t find the corresponding config file params.<div>Also can i specify a list of allowed ciphers?</div></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr">







<p><font face="courier new, monospace"><b><i><font size="4">Brian West</font></i></b><br><span style="font-size:x-small"><a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a></span></font></p>
<p><font size="1" face="courier new, monospace"><img src="http://billing.freeswitch.org/templates/default/img/whmcslogo.png"><br></font></p><p><font face="courier new, monospace"><b><i>Twitter: @FreeSWITCH , @briankwest</i></b><br><a href="http://www.freeswitchbook.com" target="_blank">http://www.freeswitchbook.com</a><br><a href="http://www.freeswitchcookbook.com" target="_blank">http://www.freeswitchcookbook.com</a></font></p>
<p><font face="courier new, monospace"><b>T:</b>+19184209001 | <b>F:</b>+19184209002 | <b>M:</b>+1918424WEST (9378)<br><b>iNUM:</b>+883 5100 1420 9001 | <b>ISN:</b>410*543 | <b>Skype:</b>briankwest</font></p></div></div>
</div>