Module: sip-router Branch: master Commit: b8aee4b00258044b9999d961765c8ab53406e5b7 URL: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=b8aee4b0...
Author: Carsten Bock carsten@ng-voice.com Committer: Carsten Bock carsten@ng-voice.com Date: Sat Mar 22 16:49:20 2014 +0100
tls: Added note to docs about OpenSSL requirement for Elliptic Curve Diffie Hellman (ECDH)
---
modules/tls/README | 11 ++++++++++- modules/tls/doc/tls.xml | 15 +++++++++++++++ 2 files changed, 25 insertions(+), 1 deletions(-)
diff --git a/modules/tls/README b/modules/tls/README index cdd3493..fbf1762 100644 --- a/modules/tls/README +++ b/modules/tls/README @@ -4,7 +4,13 @@ Andrei Pelinescu-Onciul
iptelorg GmbH
- Copyright � 2007 iptelorg GmbH +Carsten Bock + + ng-voice GmbH + + Copyright © 2007 iptelorg GmbH + + Copyright © 2014 ng-voice GmbH __________________________________________________________________
Table of Contents @@ -274,6 +280,9 @@ make TLS_EXTRA_LIBS="-lkrb5 -lz" all include_modules=tls when trying to load the tls module (check the log), it means some needed library was not linked and it must be added to TLS_EXTRA_LIBS
+ Elliptic Curve Diffie-Hellman (EDCH)-Ciphers are only supported in + OpenSSL 1.0.0e and later. + 5. TLS and Low Memory
The openssl library doesn't handle very well low memory situations. If diff --git a/modules/tls/doc/tls.xml b/modules/tls/doc/tls.xml index 4f41780..4302cc5 100644 --- a/modules/tls/doc/tls.xml +++ b/modules/tls/doc/tls.xml @@ -20,11 +20,23 @@ <email>andrei@iptel.org</email> </address> </author> + <author> + <firstname>Carsten</firstname> + <surname>Bock</surname> + <affiliation><orgname>ng-voice GmbH</orgname></affiliation> + <address> + <email>carsten@ng-voice.com</email> + </address> + </author> </authorgroup> <copyright> <year>2007</year> <holder>iptelorg GmbH</holder> </copyright> + <copyright> + <year>2014</year> + <holder>ng-voice GmbH</holder> + </copyright> </bookinfo> <toc></toc>
@@ -112,6 +124,9 @@ make TLS_EXTRA_LIBS="-lkrb5 -lz" all include_modules=tls <para> In general, if Kamailio fails to start with a symbol not found error when trying to load the tls module (check the log), it means some needed library was not linked and it must be added to <emphasis>TLS_EXTRA_LIBS</emphasis> </para> + <para> +<ulink url="http://wiki.openssl.org/index.php/Elliptic_Curve_Diffie_Hellman">Elliptic Curve Diffie-Hellman (EDCH)</ulink>-Ciphers are only supported in OpenSSL 1.0.0e and later. + </para> </section>
<section id="tls.low_memory">