[sr-dev] [tracker] Task opened: new tls_method that only accepts TLSv1, but allows SSLv2 client hello

sip-router admin at sip-router.org
Mon Oct 4 18:20:18 CEST 2010


THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.

A new Flyspray task has been opened.  Details are below. 

User who did this - Juha Heinanen (jh) 

Attached to Project - sip-router
Summary - new tls_method that only accepts TLSv1, but allows SSLv2 client hello
Task Type - Improvement
Category - tls
Status - Assigned
Assigned To - Andrei Pelinescu-Onciul
Operating System - All
Severity - Medium
Priority - Normal
Reported Version - Development
Due in Version - Undecided
Due Date - Undecided
Details - some SIP UAs send SSLv2 initial client hello, but negotiation finally results in TLSv1.  currently there is no tls_method that would allow SSLv2 initial hello, but that would require TLSv1 as the result of the negotiation.  proposal is to add such a new tls_method value, e.g., TLSv1N or something else.

More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=90

You are receiving this message because you have requested it from the Flyspray bugtracking system.  If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.



More information about the sr-dev mailing list