[Freeswitch-users] TLS versions and PFS settings

[Daniel Ivanov]

Thanks, Brian. Precise as always. And yet how do i enable perfect forward
secrecy?
13 нояб. 2014 г. 18:20 пользователь "Brian West" <brian at freeswitch.org>
написал:

> in a sofia profile:
>
>     <!-- TLS version default: tlsv1,tlsv1.1,tlsv1.2 -->
>
>
>
>     <param name="tls-version" value="$${sip_tls_version}"/>
>
>
>
>
>
>
>
>     <!-- TLS ciphers default: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH  -->
>
>
>
>     <param name="tls-ciphers" value="$${sip_tls_ciphers}"/>
>
>
>
>
>
>
>
> On Thu, Nov 13, 2014 at 8:55 AM, Daniel Ivanov <sertys at gmail.com> wrote:
>
>> What are the options to enable PFS on TLS support, i found the ability
>> added in a changelog from feb,2014, but can't find the corresponding config
>> file params.
>> Also can i specify a list of allowed ciphers?
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
>
>
> --
>
> *Brian West*
> brian at freeswitch.org
>
>
> *Twitter: @FreeSWITCH , @briankwest*
> http://www.freeswitchbook.com
> http://www.freeswitchcookbook.com
>
> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378)
> *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20141113/a5378fc0/attachment.html