Address GH #2716. Also see https://bugs.python.org/issue29697.

Pre-Submission Checklist

[X ] Commit message has the format required by CONTRIBUTING guide
Commits are split per component (core, individual modules, libs, utils, ...)
[X ] Each component has a single commit (if not, squash them into one commit)
No commits to README files for modules (changes must be done to docbook files
in doc/ subfolder, the README file is autogenerated)

Type Of Change

Small bug fix (non-breaking change which fixes an issue)
New feature (non-breaking change which adds new functionality)
Breaking change (fix or feature that would change existing functionality)

Checklist:

PR should be backported to stable branches
[X ] Tested changes locally
Related to issue #2716

Description

For OpenSSL 1.1.x initialization of EC SSL contexts has changed — we should be using the < 1.0.2 technique on OpenSSL 1.1+. This addresses a corner case where TLS server with P-256 cert would not handshake with a TLS client presenting a P-521 cert.

You can view, comment on, or merge this pull request online at:

https://github.com/kamailio/kamailio/pull/2717

Commit Summary

[tls] Don't use OpenSSL<1.0.2 fallback on 1.1+

File Changes

M src/modules/tls/tls_domain.c (12)

Patch Links:

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or unsubscribe.