]> git.ipfire.org Git - thirdparty/asterisk.git/commit
sip.conf: tlsclientmethod is using sslv23 as default. 37/3637/2
authorAlexander Traud <pabstraud@compuserve.com>
Thu, 18 Aug 2016 14:21:25 +0000 (16:21 +0200)
committerAlexander Traud <pabstraud@compuserve.com>
Fri, 19 Aug 2016 07:54:27 +0000 (02:54 -0500)
commitd192cd125ce1daaf12f6f6d595b64d46f74eadbb
tree815d5c362a9a3bdb2bbcf4a735be935b2d07277c
parent4437db8d8947a5cf4e491df13c77d6f8b66597fc
sip.conf: tlsclientmethod is using sslv23 as default.

When 'tlsclientmethod' is not specified in sip.conf, chan_sip uses the OpenSSL
SSLv23_method. This was documented incorrectly in the file sip.conf.sample.

SSLv23_method got its name in the 90s. Today, with OpenSSL 1.0.2, this method
enables (just) the secure TLSv1.0 and TLSv1.2. Or stated differently, that
function should have been called 'secure_method' or 'automatic_method' back in
the 90s.

Consequently please, specify 'tlsclientmethod=tlsv1' in your sip.conf only if
you face a server which has problems like not falling back to TLSv1.0
automatically.

ASTERISK-24425

Change-Id: I502ce6146b4504cadfd3973af8d6ec3994f54fa3
configs/samples/sip.conf.sample