[Freeswitch-users] Freeswitch sslv3 support

[Michael Jerris]

Brian pushed fix to tree this morning

commit dcc0bf72ec77042acf38172af262a4a2f35c1f48
Author: Brian West <brian at freeswitch.org>
Date:   Wed Jun 21 08:51:50 2017 -0500

    FS-10406: [mod_sofia] mod_sofia secure websocket connections SSLv3 and tls v1.0 is still not disabled  #resolve



> On Jun 21, 2017, at 12:28 PM, Agustí Ubalde Bellot <agubbe at gmail.com> wrote:
> 
> Hi Michael,
> 
> The issue has been closed without any patch attached. Will any solution be implemented?
> 
> 2017-06-21 9:30 GMT+02:00 Agustí Ubalde Bellot <agubbe at gmail.com <mailto:agubbe at gmail.com>>:
> Hi Michael,
> 
> I've created this ISSUE: https://freeswitch.org/jira/browse/FS-10406 <https://freeswitch.org/jira/browse/FS-10406>.
> 
> 2017-06-20 17:55 GMT+02:00 Agustí Ubalde Bellot <agubbe at gmail.com <mailto:agubbe at gmail.com>>:
> Hi Michael,
> 
> Yes, the version I am using is a development version (1.5.14). In any case, I have performed the same tests in version 1.6 and have the same behavior.
> Instead, the verto module does block the sslv3 protocol.
> 
> 2017-06-20 10:45 GMT+02:00 Agustí Ubalde Bellot <agubbe at gmail.com <mailto:agubbe at gmail.com>>:
> Hi Michael,
> 
> I have performed several connection tests forcing the sslv3 protocol over secure web sockets and the connection is established. Instead, the same test connecting to the TLS listening port, the connection is not set. The protocol is successfully disabled in the configuration.
> The version of FreeSWITCH I'm testing is 1.5.14. Is there any way to prove that the sslv3 protocol is actually disabled in this release?
> 
> 
> 2017-06-15 10:07 GMT+02:00 Agustí Ubalde Bellot <agubbe at gmail.com <mailto:agubbe at gmail.com>>:
> Hi Brian,
> 
> Is possible to disable for web socket secure connections too?
> 
> 
> 2017-06-13 13:24 GMT+02:00 Agustí Ubalde Bellot <agubbe at gmail.com <mailto:agubbe at gmail.com>>:
> Hi all,
> 
> Is there a FreeSWITCH update where sslv3 support is disabled?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20170621/969eba55/attachment.html>