<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">I just reviewed the code. Looks like we disable it all on verto, but not on sofia. should get me a Jira on this (I was just told one just got made)… we should fix that. That being said, the sofia web socket support was basically a demo to prove we could do it before we finished verto, there is little reason to use sip over websockets and I never recommend it. Also, using years old development code should be considered a massive security vulnerability and I would STRONGLY recommend against it. <div class=""><br class=""><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Jun 20, 2017, at 11:55 AM, Agustí Ubalde Bellot <<a href="mailto:agubbe@gmail.com" class="">agubbe@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div class=""><div class="">Hi Michael,<br class=""><br class="">Yes, the version I am using is a development version (1.5.14). In any case, I have performed the same tests in version 1.6 and have the same behavior.<br class="">Instead, the verto module does block the sslv3 protocol.<br class=""><br class=""><br class=""></div>Thanks,<br class=""></div>Agustí<br class=""></div><div class="gmail_extra"><br class=""><div class="gmail_quote">2017-06-20 10:45 GMT+02:00 Agustí Ubalde Bellot <span dir="ltr" class=""><<a href="mailto:agubbe@gmail.com" target="_blank" class="">agubbe@gmail.com</a>></span>:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr" class="">Hi Michael,<br class=""><br class="">I have performed several connection tests forcing the sslv3 protocol over secure web sockets and the connection is established. Instead, the same test connecting to the TLS listening port, the connection is not set. The protocol is successfully disabled in the configuration.<br class="">The version of FreeSWITCH I'm testing is 1.5.14. Is there any way to prove that the sslv3 protocol is actually disabled in this release?<br class=""><br class=""><br class="">Thanks,<br class="">Agustí<br class=""></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br class=""><div class="gmail_quote">2017-06-15 10:07 GMT+02:00 Agustí Ubalde Bellot <span dir="ltr" class=""><<a href="mailto:agubbe@gmail.com" target="_blank" class="">agubbe@gmail.com</a>></span>:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr" class=""><div class=""><div class=""><div class="">Hi Brian,<br class=""><br class=""></div>Is possible to disable for web socket secure connections too?<br class=""><br class=""><br class=""></div>Thanks,<br class=""></div>Agustí<br class=""></div><div class="m_5541221548792963090HOEnZb"><div class="m_5541221548792963090h5"><div class="gmail_extra"><br class=""><div class="gmail_quote">2017-06-13 13:24 GMT+02:00 Agustí Ubalde Bellot <span dir="ltr" class=""><<a href="mailto:agubbe@gmail.com" target="_blank" class="">agubbe@gmail.com</a>></span>:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr" class=""><div class=""><div class="">Hi all,<br class=""><br class=""><span id="m_5541221548792963090m_8377923263370790484m_-7487048847402092947gmail-result_box" class="m_5541221548792963090m_8377923263370790484m_-7487048847402092947gmail-" lang="en"><span class="m_5541221548792963090m_8377923263370790484m_-7487048847402092947gmail-">Is there a FreeSWITCH update where sslv3 support is disabled?<br class=""></span></span></div></div></div></blockquote></div></div></div></div></blockquote></div></div></div></div></blockquote></div></div></div></blockquote></div><br class=""></div></div></body></html>