[sr-dev] [tracker] Task opened: To disable sslv3 in kamailio and allow all other TLS method.

[sip-router]

THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.

A new Flyspray task has been opened.  Details are below. 

User who did this - Varghese Paul (varghesepaul87) 

Attached to Project - sip-router
Summary - To disable sslv3 in kamailio and allow all other TLS method. 
Task Type - Feature Request
Category - Modules kamailio
Status - Unconfirmed
Assigned To - 
Operating System - All
Severity - Low
Priority - Normal
Reported Version - Development
Due in Version - Undecided
Due Date - Undecided
Details - Hi all,

We are trying to remove the SSL3 support from our kamailio due to poodle attack. 

kamailio -v
version: kamailio 4.2.1 (x86_64/linux)

modparam("tls", "tls_method", "SSLv23")

Currently we are using the above method and we can see that it will support following ssl methods sslv3,tlsv1,tlsv1.1 and tlsv1.2. 

Is it possible in kamailio to disable only sslv3 and allow all other tls version (tlsv1,tlsv1.1 and tlsv1.2) ?. If not which is the common suggested version in kamailio to avoid ssl negotiation ?
 

More information can be found at the following URL:
http://sip-router.org/tracker/index.php?do=details&task_id=502

You are receiving this message because you have requested it from the Flyspray bugtracking system.  If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.