<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hello,</p>
<p>Thank you both for your responses to my query about TLS cipher
suites supported by Kamailio 4.3.4. When I used a self-signed
certificate generated from an RSA key, the server selected the
RSA-AES256-GCM-SHA384 cipher suite for the connection. When I used
a self-signed certificate generated from an EC key, the server
selected the ECDH-ECDSA-AES256-GCM-SHA384 cipher suite for the
connection. This was confirmed using the OpenSSL <i>s_client</i>
command and with Wireshark. In short, I am still unable to
establish an ECDHE ephemeral key exchange even though the OpenSSL
version 1.0.2g on Lubuntu 16.4.3 supports it. So I must not have
the correct configuration of the TLS module for Kamailio 4.3.4 or
else need to generate some other kind of key/certificate. I'm
using the Kamailio and TLS config files that came with the package
downloads, minimally modified to enable TLS and specify the file
location of the key and certificate. I googled "ephemeral key
exchange" and came across a posting on Stack Exchange talking
about commands such as <i>SSL_CTX_set_temp_ecdh_callback</i> that
enable ephemeral key exchange. This command is not listed as a
configuration setting in the TLS module man-page so I assume it is
a coding command used within the module. In any case, I'd
appreciate any further suggestions.</p>
<p>Thanks,</p>
<p>Steve <br>
</p>
<div id="DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2"><br />
<table style="border-top: 1px solid #D3D4DE;">
<tr>
<td style="width: 55px; padding-top: 13px;"><a href="https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient&utm_term=icon" target="_blank"><img src="https://ipmcdn.avast.com/images/icons/icon-envelope-tick-round-orange-animated-no-repeat-v1.gif" alt="" width="46" height="29" style="width: 46px; height: 29px;" /></a></td>
<td style="width: 470px; padding-top: 12px; color: #41424e; font-size: 13px; font-family: Arial, Helvetica, sans-serif; line-height: 18px;">Virus-free. <a href="https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient&utm_term=link" target="_blank" style="color: #4453ea;">www.avast.com</a>
</td>
</tr>
</table><a href="#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2" width="1" height="1"> </a></div></body>
</html>