]> git.ipfire.org Git - thirdparty/asterisk.git/commit
sip.conf: tlsclientmethod is using sslv23 as default. 38/3638/2
authorAlexander Traud <pabstraud@compuserve.com>
Thu, 18 Aug 2016 14:25:53 +0000 (16:25 +0200)
committerAlexander Traud <pabstraud@compuserve.com>
Fri, 19 Aug 2016 07:52:21 +0000 (09:52 +0200)
commit0296b90b29cc8870edfb0ff518509c809e7d5b49
treeda669f06b61903200e265005358f548976ea9ba4
parent3e0eafa710f792a47426f21eeb46a8296224ce49
sip.conf: tlsclientmethod is using sslv23 as default.

When 'tlsclientmethod' is not specified in sip.conf, chan_sip uses the OpenSSL
SSLv23_method. This was documented incorrectly in the file sip.conf.sample.

SSLv23_method got its name in the 90s. Today, with OpenSSL 1.0.2, this method
enables (just) the secure TLSv1.0 and TLSv1.2. Or stated differently, that
function should have been called 'secure_method' or 'automatic_method' back in
the 90s.

Consequently please, specify 'tlsclientmethod=tlsv1' in your sip.conf only if
you face a server which has problems like not falling back to TLSv1.0
automatically.

ASTERISK-24425

Change-Id: I502ce6146b4504cadfd3973af8d6ec3994f54fa3
configs/sip.conf.sample