Default to TLSv1 through TLSv1.2 if unspecified

diff --git a/src/mod/endpoints/mod_sofia/sofia.c b/src/mod/endpoints/mod_sofia/sofia.c
index 7d02d77196fb57d87e04da4f277d23414d565f94..b55c972707f1b9c24d8574d028ff5c78ffdfd1bd 100644 (file)
--- a/src/mod/endpoints/mod_sofia/sofia.c
+++ b/src/mod/endpoints/mod_sofia/sofia.c
@@ -3764,7 +3764,9 @@ switch_status_t config_sofia(sofia_config_t reload, char *profile_name)
                                        profile->sip_force_expires = 0;
                                        profile->sip_expires_max_deviation = 0;
                                        profile->sip_subscription_max_deviation = 0;
-                                       profile->tls_version = 0;
+                                       profile->tls_version = SOFIA_TLS_VERSION_TLSv1;
+                                       profile->tls_version |= SOFIA_TLS_VERSION_TLSv1_1;
+                                       profile->tls_version |= SOFIA_TLS_VERSION_TLSv1_2;
                                        profile->tls_timeout = 300;
                                        profile->mflags = MFLAG_REFER | MFLAG_REGISTER;
                                        profile->server_rport_level = 1;
@@ -4701,6 +4703,7 @@ switch_status_t config_sofia(sofia_config_t reload, char *profile_name)
                                                profile->tls_verify_in_subjects_str = switch_core_strdup(profile->pool, val);
                                        } else if (!strcasecmp(var, "tls-version") && !zstr(val)) {
                                                char *ps = val, *pe;
+                                               profile->tls_version = 0;
                                                while (1) {
                                                        int n;
                                                        pe = strchr(ps,',');