Thanks, Brian. Precise as always. And yet how do i enable perfect forward secrecy?

13 нояб. 2014 г. 18:20 пользователь "Brian West" <brian@freeswitch.org> написал:
in a sofia profile:

    <!-- TLS version default: tlsv1,tlsv1.1,tlsv1.2 -->                                                                                                         

    <param name="tls-version" value="$${sip_tls_version}"/>                                                                                                     

                                                                                                                                                                

    <!-- TLS ciphers default: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH  -->                                                                                            

    <param name="tls-ciphers" value="$${sip_tls_ciphers}"/>                                                                                                     

                                                               



On Thu, Nov 13, 2014 at 8:55 AM, Daniel Ivanov <sertys@gmail.com> wrote:
What are the options to enable PFS on TLS support, i found the ability added in a changelog from feb,2014, but can't find the corresponding config file params.
Also can i specify a list of allowed ciphers?

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--

Brian West
brian@freeswitch.org


Twitter: @FreeSWITCH , @briankwest
http://www.freeswitchbook.com
http://www.freeswitchcookbook.com

T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)
iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org