Hello,
for sure you can test if a specific tls version is supported, like:
openssl s_client -tls1_3 ...
In Kamailio one can restrict what tls versions to enable/allow via modparam or tls.cfg, but the support of tls versions is coming from libssl, so it is a matter of what libssl version is used and the distro (as I noticed some distros package libssl with older protocols disabled).
Cheers, Daniel
On 12.08.20 04:01, Alex Balashov wrote:
Hi,
Are you looking for a way that does not require access to the Kamailio config?
If so, does `openssl s_client $HOST:5061` not show this, e.g. with verbosity?
On 8/11/20 9:44 PM, David Cunningham wrote:
Hello,
Does anyone know of a method to check what TLS versions are available from Kamailio for clients to use? For example, is TLS 1.0 available, TLS 1.1, etc.
Thanks in advance,
-- David Cunningham, Voisonics Limited http://voisonics.com/ USA: +1 213 221 1092 New Zealand: +64 (0)28 2558 3782
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
-- Alex Balashov | Principal | Evariste Systems LLC
Tel: +1-706-510-6800 / +1-800-250-5920 (toll-free) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users