<div dir="ltr"><div class="gmail_default" style="font-family:courier new,monospace">First of all, thanks you and Good morning!.<br><br><br></div><div class="gmail_default" style="font-family:courier new,monospace">Although I'm using:<br><br> <param name="tls-version" value="tlsv1.2"/><br> <param name="tls-ciphers" value="ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4"/><br><br><br></div><div class="gmail_default" style="font-family:courier new,monospace">Im getting:<br><br>New, TLSv1/SSLv3, Cipher is AES256-GCM-SHA384<br>Server public key is 2048 bit<br>Secure Renegotiation IS supported<br>Compression: NONE<br>Expansion: NONE<br>SSL-Session:<br> Protocol : TLSv1.2<br> Cipher : AES256-GCM-SHA384<br><br></div><div class="gmail_default" style="font-family:courier new,monospace">Not bad, but not ECDHE.<br><br></div><div class="gmail_default" style="font-family:courier new,monospace">Compared to our web server:<br><br>New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384<br>Server public key is 2048 bit<br>Secure Renegotiation IS supported<br>Compression: NONE<br>Expansion: NONE<br>SSL-Session:<br> Protocol : TLSv1.2<br> Cipher : ECDHE-RSA-AES256-GCM-SHA384<br><br></div><div class="gmail_default" style="font-family:courier new,monospace"><br></div><div class="gmail_default" style="font-family:courier new,monospace"><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">2015-09-25 9:29 GMT-04:30 Brian West <span dir="ltr"><<a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">tls-cipher param.<div><div class="h5"><br><br>On Friday, September 25, 2015, Victor Medina <<a href="mailto:victor.medina@cibersys.com" target="_blank">victor.medina@cibersys.com</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:courier new,monospace">Hi guys!<br><br></div><div class="gmail_default" style="font-family:courier new,monospace">Is there any parameter that can configure what ciphers are used on the WSS interface? <br><br></div><div class="gmail_default" style="font-family:courier new,monospace">Im am getting...<br> <br><br>WSS interface:<br>SSL-Session:<br> Protocol : TLSv1.2<br> Cipher : AES256-GCM-SHA384<br><br><br></div><div class="gmail_default" style="font-family:courier new,monospace">SIP interface, same channel:<br>Expansion: NONE<br>SSL-Session:<br> Protocol : TLSv1.2<br> Cipher : ECDHE-RSA-AES256-GCM-SHA384<br><br><br></div><div class="gmail_default" style="font-family:courier new,monospace"><br></div>-- <br><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><font size="2"><span style="font-family:courier new,monospace"><br><img src="https://www.cibersys.com/img/logo-cibersys.png"><br><br>Víctor E. Medina M.<br></span></font><div><font size="2"><span style="font-family:courier new,monospace">Platform Architect / Chief Infrastructure<br></span></font></div><font size="2"><span style="font-family:courier new,monospace"><span style="display:inline"><span style="display:inline"><a>+58424 291 4561</a></span></span><br>BB #79A8AFA2<br>@VMCibersys<br></span></font></div><div dir="ltr"><font size="2"><span style="font-family:courier new,monospace"><br></span></font></div></div></div></div></div></div></div></div></div></div>
</div>
</blockquote><br><br></div></div>-- <br><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">
<p><font face="courier new, monospace"><b><i><font size="4">Brian West</font></i></b><br><span style="font-size:x-small"><a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a></span></font></p>
<p><font face="courier new, monospace" size="1"><img src="http://billing.freeswitch.org/templates/default/img/whmcslogo.png"><br></font></p><p><font face="monospace, monospace" size="2"><b><i>Twitter: @FreeSWITCH , @briankwest</i></b><br><a href="http://www.freeswitchbook.com" target="_blank">http://www.freeswitchbook.com</a><br><a href="http://www.freeswitchcookbook.com" target="_blank">http://www.freeswitchcookbook.com</a></font></p><p><font face="monospace, monospace">Got Bugs? Report them <a href="https://freeswitch.org/jira" target="_blank">here</a>! | Reddit: <a href="https://www.reddit.com/r/freeswitch" target="_blank">/r/freeswitch</a></font></p>
<p><font face="monospace, monospace" size="2"><b>T:</b><a href="tel:%2B19184209001" value="+19184209001" target="_blank">+19184209001</a> | <b>F:</b><a href="tel:%2B19184209002" value="+19184209002" target="_blank">+19184209002</a> | <b>M:</b>+1918424WEST (9378)<br><b>iNUM:</b>+883 5100 1420 9001 | <b>ISN:</b>410*543 | <b>Skype:</b>briankwest</font></p></div></div></div></div></div></div></div></div></div><br>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><font size="2"><span style="font-family:courier new,monospace"><br><img src="https://www.cibersys.com/img/logo-cibersys.png"><br><br>Víctor E. Medina M.<br></span></font><div><font size="2"><span style="font-family:courier new,monospace">Platform Architect / Chief Infrastructure<br></span></font></div><font size="2"><span style="font-family:courier new,monospace"><span style="display:inline"><span style="display:inline"><a>+58424 291 4561</a></span></span><br>BB #79A8AFA2<br>@VMCibersys<br></span></font></div><div dir="ltr"><font size="2"><span style="font-family:courier new,monospace"><br></span></font></div></div></div></div></div></div></div></div></div></div>
</div>