Agreed ! TLS/SSL seems to be not so important unless FS is capable of providing security implementation in some form atleast. This is great, when you JUST have to secure your communication.
but, NOT , when security is the only concern. I have been trying to mature the TLS handshake on SUITE-B standard, but yet unsuccessful acquiring so.
I believe that FS use openSSL for dealing with encryption methods and therefore, I have taken it to the version 1.0.1e, which supports TLS1.1 , 1.2 . But , FS doesnt verfiy those Cipher [TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256].
I have already a jira ticket opened here:
http://jira.freeswitch.org/browse/FS-5719
Anyone have any thoughts or hints on this?Don't mean to be a pain, but I'm surprised at the apparent lack of interest.
Am I the only one interested in upgrading the security aspects of FS?
On Wed, Sep 11, 2013 at 8:09 PM, privs <privus007@gmail.com> wrote:
Hi,
Given the recent revelations regarding the state of the net's (in)security,
and as a longtime user of TLS with SRTP in FS, I think it would be prudent
to update the TLS version and ciphers that FS can negotiate.
Currently FS only supports TLS 1.0 (correct me if I'm wrong), which has
some worrying security issues
<http://www.wired.co.uk/news/archive/2013-02/05/weakness-in-tsl-protocol> .
Is it possible to upgrade to TLS 1.1 (or even better, 1.2)? I'd like to use
AES in the 256 key length instead of the standard 128.
Anyone know if this is on the agenda and/or where I can have a closer look
at the cipher order presented by FS?
Thanks
--
View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Updating-TLS-tp7594774.html
Sent from the freeswitch-users mailing list archive at Nabble.com.
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org