<div dir="ltr"><div class="gmail_extra">Hi Daniel,<br><div class="gmail_quote">On 13 November 2014 at 12:15, Daniel Ivanov <span dir="ltr"><<a href="mailto:sertys@gmail.com" target="_blank">sertys@gmail.com</a>></span> wrote:<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">Thanks, Brian. Precise as always. And yet how do i enable perfect forward secrecy?</p></blockquote><div><br></div><div>Do you get PFS to work for you?</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr"> </p>
<div class="gmail_quote">13 нояб. 2014 г. 18:20 пользователь "Brian West" <<a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a>> написал:<div><div class="h5"><br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">in a sofia profile:<div><br></div><div>
<p><span> </span><span><!-- TLS version default: tlsv1,tlsv1.1,tlsv1.2 --></span><span> </span></p>
<p><span> <</span><span>param</span><span> </span><span>name</span><span>=</span><span>"tls-version"</span><span> </span><span>value</span><span>=</span><span>"$${sip_tls_version}"</span><span>/> </span></p>
<p><span> </span></p>
<p><span> </span><span><!-- TLS </span><span>cip</span><span>hers default: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH --></span><span> </span></p>
<p><span> <</span><span>param</span><span> </span><span>name</span><span>=</span><span>"tls-ciphers"</span><span> </span><span>value</span><span>=</span><span>"$${sip_tls_ciphers}"</span><span>/> </span></p>
<p><span> </span></p><p><span><br></span></p></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Nov 13, 2014 at 8:55 AM, Daniel Ivanov <span dir="ltr"><<a href="mailto:sertys@gmail.com" target="_blank">sertys@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">What are the options to enable PFS on TLS support, i found the ability added in a changelog from feb,2014, but can't find the corresponding config file params.<div>Also can i specify a list of allowed ciphers?</div></div>
<br></blockquote></div><div><br></div>-- <br><div><div dir="ltr">
<p><font face="courier new, monospace"><b><i><font size="4">Brian West</font></i></b><br><span style="font-size:x-small"><a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a></span></font></p></div></div>
</div>
<br></blockquote></div></div></div></blockquote></div>-- <br><div class="gmail_signature">-------<br>inum: 883510009027723<br>sip: <a href="mailto:jungleboogie@sip2sip.info" target="_blank">jungleboogie@sip2sip.info</a><br>xmpp: <a href="mailto:jungle-boogie@jit.si" target="_blank">jungle-boogie@jit.si</a></div>
</div></div>