Hello,

you have to use latest version in branch 4.2 (e.g., 4.2.5 was released yesterday). The supported methods for TLS got a security patch update, as it was too restrictive at 4.2.0. Any config that its working with 4.2.0 is working the same for any newer 4.2.x.

Cheers,
Daniel

On 20/05/15 04:07, jay binks wrote:
I just found something odd in the Debian package for kamailio-als-modules and I'm looking for someone to verify it for me.

I verified that I'm using Kamailio 4.2

# Kamailio -v
version: kamailio 4.2.0 (x86_64/linux) 36e695

the docs http://kamailio.org/docs/modules/4.2.x/modules/tls.html#tls.p.tls_method
show that I should be able to use "TLSv1+" however Kamailio crashes on startup with 

[tls_mod.c:287]: mod_init(): Invalid tls_method parameter value

I have verified that TLSv1.1 and TLSv1.2 both work, but I can not use TLSv1.1+ or TLSv1+
I also tried TLSv1.0+ ( I found it somewhere on the web ) but this doesn't work either.

I used strings against tls.so to see what was available, and this is what I found.

strings ~/tls.so  | grep TLSv1
TLSv1_client_method
TLSv1_server_method
TLSv1_method
TLSv1_1_client_method
TLSv1_1_server_method
TLSv1_1_method
TLSv1_2_client_method
TLSv1_2_server_method
TLSv1_2_method
TLSv1
TLS method used (TLSv1, SSLv3, SSLv2, SSLv23)
TLSv1.1
TLSv1.2

Any idea why this is differs from the docs, or what I'm doing wrong ?


--
Sincerely

Jay


_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
Kamailio World Conference, May 27-29, 2015
Berlin, Germany - http://www.kamailioworld.com