]> git.ipfire.org Git - thirdparty/asterisk.git/commit
sip.conf: tlsclientmethod is using sslv23 as default. 36/3636/2
authorAlexander Traud <pabstraud@compuserve.com>
Thu, 18 Aug 2016 14:21:25 +0000 (16:21 +0200)
committerAlexander Traud <pabstraud@compuserve.com>
Fri, 19 Aug 2016 07:54:10 +0000 (02:54 -0500)
commitb1fe070d0bc26088cddffa5befd64fad7130f0ee
treef952e89c344829a91c58c18f9ce5a55b6f96dc1b
parent5d4ce33e8cfeb4f9e0027fa96e96d17b5f247e64
sip.conf: tlsclientmethod is using sslv23 as default.

When 'tlsclientmethod' is not specified in sip.conf, chan_sip uses the OpenSSL
SSLv23_method. This was documented incorrectly in the file sip.conf.sample.

SSLv23_method got its name in the 90s. Today, with OpenSSL 1.0.2, this method
enables (just) the secure TLSv1.0 and TLSv1.2. Or stated differently, that
function should have been called 'secure_method' or 'automatic_method' back in
the 90s.

Consequently please, specify 'tlsclientmethod=tlsv1' in your sip.conf only if
you face a server which has problems like not falling back to TLSv1.0
automatically.

ASTERISK-24425

Change-Id: I502ce6146b4504cadfd3973af8d6ec3994f54fa3
configs/samples/sip.conf.sample