Re: [OpenSIPS-Devel] [opensips] Feature request #77 fulfilled (#138)
Merged #138. --- Reply to this email directly or view it on GitHub: https://github.com/OpenSIPS/opensips/pull/138___ Devel mailing list Devel@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/devel
Re: [OpenSIPS-Devel] [opensips] Feature request #77 fulfilled (#138)
@secusmartChris , thanks a lot for your patch ! --- Reply to this email directly or view it on GitHub: https://github.com/OpenSIPS/opensips/pull/138#issuecomment-30035356___ Devel mailing list Devel@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/devel
[OpenSIPS-Devel] [opensips] Feature request #77 fulfilled (#138)
We fulfilled our own request for TLSv1.2 features like using elliptic curves. Please use OpenSSL 1.0.1e or newer. You can merge this Pull Request by running: git pull https://github.com/secusmartChris/opensips master Or you can view, comment on it, or merge it online at: https://github.com/OpenSIPS/opensips/pull/138 -- Commit Summary -- * Feature request #77 fulfilled -- File Changes -- M cfg.lex (11) M cfg.y (118) M config.h (4) M tls/doc/tls.sgml (11) M tls/doc/tls_user.sgml (91) M tls/tls_config.c (2) M tls/tls_config.h (7) M tls/tls_domain.h (3) M tls/tls_init.c (116) -- Patch Links -- https://github.com/OpenSIPS/opensips/pull/138.patch https://github.com/OpenSIPS/opensips/pull/138.diff ___ Devel mailing list Devel@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/devel
Re: [OpenSIPS-Devel] [opensips] Feature request #77 fulfilled (#138)
@@ -346,6 +420,11 @@ int verify_callback(int pre_verify_ok, X509_STORE_CTX *ctx) { ssl_methods[TLS_USE_SSLv23_cli - 1] = SSLv23_client_method(); ssl_methods[TLS_USE_SSLv23_srv - 1] = SSLv23_server_method(); ssl_methods[TLS_USE_SSLv23 - 1] = SSLv23_method(); + + ssl_methods[TLS_USE_TLSv1_2_cli - 1] = TLSv1_2_client_method(); Should these be ifdefed in case the OpenSSL version is too old? --- Reply to this email directly or view it on GitHub: https://github.com/OpenSIPS/opensips/pull/138/files#r7923384___ Devel mailing list Devel@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/devel
Re: [OpenSIPS-Devel] [opensips] Feature request #77 fulfilled (#138)
@@ -346,6 +420,11 @@ int verify_callback(int pre_verify_ok, X509_STORE_CTX *ctx) { ssl_methods[TLS_USE_SSLv23_cli - 1] = SSLv23_client_method(); ssl_methods[TLS_USE_SSLv23_srv - 1] = SSLv23_server_method(); ssl_methods[TLS_USE_SSLv23 - 1] = SSLv23_method(); + + ssl_methods[TLS_USE_TLSv1_2_cli - 1] = TLSv1_2_client_method(); You're right saghul. It should be ifdefed. --- Reply to this email directly or view it on GitHub: https://github.com/OpenSIPS/opensips/pull/138/files#r7923849___ Devel mailing list Devel@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/devel