Module: kamailio
Branch: master
Commit: 6faf0470d0fab1594249e43d91000f324c5e25a7
URL: 
https://github.com/kamailio/kamailio/commit/6faf0470d0fab1594249e43d91000f324c5e25a7

Author: Nicolas Chapleau <nicc...@outlook.com>
Committer: Henning Westerholt <h...@gilawa.com>
Date: 2025-06-23T10:42:09Z

tls: use SSL_CTX_set_ciphersuites() when using openSSL 1.1.1

---

Modified: src/modules/tls/tls_domain.c

---

Diff:  
https://github.com/kamailio/kamailio/commit/6faf0470d0fab1594249e43d91000f324c5e25a7.diff
Patch: 
https://github.com/kamailio/kamailio/commit/6faf0470d0fab1594249e43d91000f324c5e25a7.patch

---

diff --git a/src/modules/tls/tls_domain.c b/src/modules/tls/tls_domain.c
index 6527b16a9fa..c7f35df63ee 100644
--- a/src/modules/tls/tls_domain.c
+++ b/src/modules/tls/tls_domain.c
@@ -737,11 +737,27 @@ static int set_cipher_list(tls_domain_t *d)
                return 0;
        procs_no = get_max_procs();
        for(i = 0; i < procs_no; i++) {
+#if OPENSSL_VERSION_NUMBER < 0x030000000L
                if(SSL_CTX_set_cipher_list(d->ctx[i], cipher_list) == 0) {
                        ERR("%s: Failure to set SSL context cipher list 
\"%s\"\n",
                                        tls_domain_str(d), cipher_list);
                        return -1;
                }
+#else
+               if(d->method == TLS_USE_TLSv1_3 || d->method == 
TLS_USE_TLSv1_3_PLUS) {
+                       if(SSL_CTX_set_ciphersuites(d->ctx[i], cipher_list) == 
0) {
+                               ERR("%s: Failure to set SSL context cipher 
suites \"%s\"\n",
+                                               tls_domain_str(d), cipher_list);
+                               return -1;
+                       } else {
+                               if(SSL_CTX_set_cipher_list(d->ctx[i], 
cipher_list) == 0) {
+                                       ERR("%s: Failure to set SSL context 
cipher list \"%s\"\n",
+                                                       tls_domain_str(d), 
cipher_list);
+                                       return -1;
+                               }
+                       }
+               }
+#endif
 #if !defined(OPENSSL_NO_ECDH) && OPENSSL_VERSION_NUMBER < 0x10100000L
                setup_ecdh(d->ctx[i]);
 #endif

_______________________________________________
Kamailio - Development Mailing List -- sr-dev@lists.kamailio.org
To unsubscribe send an email to sr-dev-le...@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the 
sender!

Reply via email to