Re: [OpenSIPS-Devel] [opensips] TLS: remove support for SSLv2 and SSLv3 (#367)

2014-10-23 Thread Saúl Ibarra Corretgé
 Since support for the old SSL (both v2 and v3) is completely disabled, should 
 we obsolete the SSLv23 keyword and add a different one, something like TLSany?

Lots of software took that from OpenSSL, even if it doesn't necessarily mean 
SSLv2 or SSLv3 are used. I will add an alias for that config option as you 
suggested, looks much nicer in the eyes :-)

---
Reply to this email directly or view it on GitHub:
https://github.com/OpenSIPS/opensips/pull/367#issuecomment-60198661___
Devel mailing list
Devel@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/devel


Re: [OpenSIPS-Devel] [opensips] TLS: remove support for SSLv2 and SSLv3 (#367)

2014-10-23 Thread Saúl Ibarra Corretgé
@razvancrainea added TLSAny alias for tls_method config option.

---
Reply to this email directly or view it on GitHub:
https://github.com/OpenSIPS/opensips/pull/367#issuecomment-60202463___
Devel mailing list
Devel@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/devel


Re: [OpenSIPS-Devel] [opensips] TLS: remove support for SSLv2 and SSLv3 (#367)

2014-10-23 Thread Răzvan Crainea
Merged #367.

---
Reply to this email directly or view it on GitHub:
https://github.com/OpenSIPS/opensips/pull/367#event-182893627___
Devel mailing list
Devel@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/devel


Re: [OpenSIPS-Devel] [opensips] TLS: remove support for SSLv2 and SSLv3 (#367)

2014-10-22 Thread Saúl Ibarra Corretgé
@bogdan-iancu @razvancrainea any comment on this?

---
Reply to this email directly or view it on GitHub:
https://github.com/OpenSIPS/opensips/pull/367#issuecomment-60128079___
Devel mailing list
Devel@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/devel


Re: [OpenSIPS-Devel] [opensips] TLS: remove support for SSLv2 and SSLv3 (#367)

2014-10-22 Thread Răzvan Crainea
openssl 0.9.7 is more than 12 years old and I doubt somebody still uses it, so 
I think removing support for versions older then 0.9.8 is a good idea.
Since support for the old SSL (both v2 and v3) is completely disabled, should 
we obsolete the SSLv23 keyword and add a different one, something like TLSany?

---
Reply to this email directly or view it on GitHub:
https://github.com/OpenSIPS/opensips/pull/367#issuecomment-60133823___
Devel mailing list
Devel@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/devel