On Jun 21, 2017, at 12:28 PM, Agustí Ubalde Bellot <agubbe@gmail.com> wrote:

Hi Michael,

The issue has been closed without any patch attached. Will any solution be implemented?

2017-06-21 9:30 GMT+02:00 Agustí Ubalde Bellot <agubbe@gmail.com>:

Hi Michael,

I've created this ISSUE: https://freeswitch.org/jira/browse/FS-10406.

2017-06-20 17:55 GMT+02:00 Agustí Ubalde Bellot <agubbe@gmail.com>:

Hi Michael,

Yes, the version I am using is a development version (1.5.14). In any case, I have performed the same tests in version 1.6 and have the same behavior.
Instead, the verto module does block the sslv3 protocol.

2017-06-20 10:45 GMT+02:00 Agustí Ubalde Bellot <agubbe@gmail.com>:

Hi Michael,

I have performed several connection tests forcing the sslv3 protocol over secure web sockets and the connection is established. Instead, the same test connecting to the TLS listening port, the connection is not set. The protocol is successfully disabled in the configuration.
The version of FreeSWITCH I'm testing is 1.5.14. Is there any way to prove that the sslv3 protocol is actually disabled in this release?

2017-06-15 10:07 GMT+02:00 Agustí Ubalde Bellot <agubbe@gmail.com>:

Hi Brian,

Is possible to disable for web socket secure connections too?

2017-06-13 13:24 GMT+02:00 Agustí Ubalde Bellot <agubbe@gmail.com>:

Hi all,

Is there a FreeSWITCH update where sslv3 support is disabled?