22 Sep
2010
22 Sep
'10
2:23 p.m.
Hi all, i read about the TLS-RENEGOTIATION vulnerability: http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html http://www.sslshopper.com/article-ssl-and-tls-renegotiation-vulnerability-di... www.phonefactor.com/sslgapdocs/Renegotiating_TLS.pdf Does the FreeSWITCH SIP/TLS implementation suffer from the TLS Renegotiation vulnerability or the TLS-renegotiation it's disabled by default, in how OpenSSL is used? Fabio Pietrosanti