[sr-dev] TLS core parameters

Andrei Pelinescu-Onciul andrei at iptel.org
Mon Jul 6 20:18:59 CEST 2009


On Jul 06, 2009 at 19:28, Klaus Darilion <klaus.mailinglists at pernau.at> wrote:
> Hi!
> 
> there are various TLS parameters in core:
> 
> tls_ca_list
> tls_certificate
> tls_handshake_timeout
> tlslog
> tls_method
> tls_port_no
> tls_private_key
> tls_require_certificate
> tls_send_timeout
> tls_verify
> 
> 
> Are they still needed? IIRC TLS is now configured by a separate config 
> file, thus it would make sense to remove them.

They are needed only if you compile TLS in the core (CORE_TLS is
defined). They are not needed if you use tls as a module.

I would not like to remove them yet (they should be marked as obsolete
experimental stuff or even removed from the docs, but not from the
code).

Andrei



More information about the sr-dev mailing list