TLS versions and PFS settings
What are the options to enable PFS on TLS support, i found the ability added in a changelog from feb,2014, but can't find the corresponding config file params. Also can i specify a list of allowed ciphers?
in a sofia profile: <!-- TLS version default: tlsv1,tlsv1.1,tlsv1.2 --> <param name="tls-version" value="$${sip_tls_version}"/> <!-- TLS ciphers default: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH --> <param name="tls-ciphers" value="$${sip_tls_ciphers}"/> On Thu, Nov 13, 2014 at 8:55 AM, Daniel Ivanov <sertys@gmail.com> wrote:
What are the options to enable PFS on TLS support, i found the ability added in a changelog from feb,2014, but can't find the corresponding config file params. Also can i specify a list of allowed ciphers?
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
Thanks, Brian. Precise as always. And yet how do i enable perfect forward secrecy? 13 нояб. 2014 г. 18:20 пользователь "Brian West" <brian@freeswitch.org> написал:
in a sofia profile:
<!-- TLS version default: tlsv1,tlsv1.1,tlsv1.2 -->
<param name="tls-version" value="$${sip_tls_version}"/>
<!-- TLS ciphers default: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH -->
<param name="tls-ciphers" value="$${sip_tls_ciphers}"/>
On Thu, Nov 13, 2014 at 8:55 AM, Daniel Ivanov <sertys@gmail.com> wrote:
What are the options to enable PFS on TLS support, i found the ability added in a changelog from feb,2014, but can't find the corresponding config file params. Also can i specify a list of allowed ciphers?
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*Brian West* brian@freeswitch.org
*Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi Daniel, On 13 November 2014 at 12:15, Daniel Ivanov <sertys@gmail.com> wrote:
Thanks, Brian. Precise as always. And yet how do i enable perfect forward secrecy?
Do you get PFS to work for you?
13 нояб. 2014 г. 18:20 пользователь "Brian West" <brian@freeswitch.org> написал:
in a sofia profile:
<!-- TLS version default: tlsv1,tlsv1.1,tlsv1.2 -->
<param name="tls-version" value="$${sip_tls_version}"/>
<!-- TLS ciphers default: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH -->
<param name="tls-ciphers" value="$${sip_tls_ciphers}"/>
On Thu, Nov 13, 2014 at 8:55 AM, Daniel Ivanov <sertys@gmail.com> wrote:
What are the options to enable PFS on TLS support, i found the ability added in a changelog from feb,2014, but can't find the corresponding config file params. Also can i specify a list of allowed ciphers?
--
*Brian West* brian@freeswitch.org
--
inum: 883510009027723 sip: jungleboogie@sip2sip.info xmpp: jungle-boogie@jit.si
Unfortunately not. Still looking for a way to do it. On Fri, Dec 12, 2014 at 1:33 AM, jungle Boogie <jungleboogie0@gmail.com> wrote:
Hi Daniel, On 13 November 2014 at 12:15, Daniel Ivanov <sertys@gmail.com> wrote:
Thanks, Brian. Precise as always. And yet how do i enable perfect forward secrecy?
Do you get PFS to work for you?
13 нояб. 2014 г. 18:20 пользователь "Brian West" <brian@freeswitch.org> написал:
in a sofia profile:
<!-- TLS version default: tlsv1,tlsv1.1,tlsv1.2 -->
<param name="tls-version" value="$${sip_tls_version}"/>
<!-- TLS ciphers default: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH -->
<param name="tls-ciphers" value="$${sip_tls_ciphers}"/>
On Thu, Nov 13, 2014 at 8:55 AM, Daniel Ivanov <sertys@gmail.com> wrote:
What are the options to enable PFS on TLS support, i found the ability added in a changelog from feb,2014, but can't find the corresponding config file params. Also can i specify a list of allowed ciphers?
--
*Brian West* brian@freeswitch.org
--
inum: 883510009027723 sip: jungleboogie@sip2sip.info xmpp: jungle-boogie@jit.si
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (3)
-
Brian West
-
Daniel Ivanov
-
jungle Boogie