Hi there,
I am currently using the tls_wolfssl module with kamailio and was wondering why the ability to set a cipher list was disabled.
From my own testing, uncommenting line 975 in tls_domain.c/ksr_tls_fix_domain adds the functionality and we haven't seen any issues with this so far.
Was there an issue with this when the module was first created? Should I be avoiding using this functionality? Thanks very much.
@quinnmancsym : this was skipped in the MVP for the module: I will take a look at restoring this functionality.
Hey,
I think it's a mistake the commented line with set_cipher_list() in ksr_tls_fix_domain(). I looked at the neighboring tls module for openssl and it does load there.
Should I send a patch?
Because, without this cipher_list option, kamailio is a bit dangerous because it offers ciphers I don't want - like RC4, NULL, etc.
Thanks Michal
This issue is stale because it has been open 6 weeks with no activity. Remove stale label or comment or this will be closed in 2 weeks.
@space88man Did you managed to have a look already? Thanks for the update.
This issue is stale because it has been open 6 weeks with no activity. Remove stale label or comment or this will be closed in 2 weeks.
Closed #3920 as not planned.
-
github-actions[bot] -
Henning Westerholt
-
Michal Hajek -
quinnmancsym
-
space88man