[sr-dev] git:master: tls: Added note to docs about OpenSSL requirement for Elliptic Curve Diffie Hellman (ECDH)

Carsten Bock carsten at ng-voice.com
Sat Mar 22 16:50:01 CET 2014


Module: sip-router
Branch: master
Commit: b8aee4b00258044b9999d961765c8ab53406e5b7
URL:    http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=b8aee4b00258044b9999d961765c8ab53406e5b7

Author: Carsten Bock <carsten at ng-voice.com>
Committer: Carsten Bock <carsten at ng-voice.com>
Date:   Sat Mar 22 16:49:20 2014 +0100

tls: Added note to docs about OpenSSL requirement for Elliptic Curve Diffie Hellman (ECDH)

---

 modules/tls/README      |   11 ++++++++++-
 modules/tls/doc/tls.xml |   15 +++++++++++++++
 2 files changed, 25 insertions(+), 1 deletions(-)

diff --git a/modules/tls/README b/modules/tls/README
index cdd3493..fbf1762 100644
--- a/modules/tls/README
+++ b/modules/tls/README
@@ -4,7 +4,13 @@ Andrei Pelinescu-Onciul
 
    iptelorg GmbH
 
-   Copyright © 2007 iptelorg GmbH
+Carsten Bock
+
+   ng-voice GmbH
+
+   Copyright © 2007 iptelorg GmbH
+
+   Copyright © 2014 ng-voice GmbH
      __________________________________________________________________
 
    Table of Contents
@@ -274,6 +280,9 @@ make TLS_EXTRA_LIBS="-lkrb5 -lz" all include_modules=tls
    when trying to load the tls module (check the log), it means some
    needed library was not linked and it must be added to TLS_EXTRA_LIBS
 
+   Elliptic Curve Diffie-Hellman (EDCH)-Ciphers are only supported in
+   OpenSSL 1.0.0e and later.
+
 5. TLS and Low Memory
 
    The openssl library doesn't handle very well low memory situations. If
diff --git a/modules/tls/doc/tls.xml b/modules/tls/doc/tls.xml
index 4f41780..4302cc5 100644
--- a/modules/tls/doc/tls.xml
+++ b/modules/tls/doc/tls.xml
@@ -20,11 +20,23 @@
 			<email>andrei at iptel.org</email>
 		</address>
 		</author>
+		<author>
+		<firstname>Carsten</firstname>
+		<surname>Bock</surname>
+		<affiliation><orgname>ng-voice GmbH</orgname></affiliation>
+		<address>
+			<email>carsten at ng-voice.com</email>
+		</address>
+		</author>
 	</authorgroup>
 	<copyright>
 		<year>2007</year>
 		<holder>iptelorg GmbH</holder>
 	</copyright>
+	<copyright>
+		<year>2014</year>
+		<holder>ng-voice GmbH</holder>
+	</copyright>
 	</bookinfo>
 	<toc></toc>
 
@@ -112,6 +124,9 @@ make TLS_EXTRA_LIBS="-lkrb5 -lz" all include_modules=tls
 		<para>
 			In general, if Kamailio fails to start with a symbol not found error when trying to load the tls module (check the log), it means some needed library was not linked and it must be added to <emphasis>TLS_EXTRA_LIBS</emphasis>
 		</para>
+		<para>
+<ulink url="http://wiki.openssl.org/index.php/Elliptic_Curve_Diffie_Hellman">Elliptic Curve Diffie-Hellman (EDCH)</ulink>-Ciphers are only supported in OpenSSL 1.0.0e and later.
+		</para>
 	</section>
 
 	<section id="tls.low_memory">




More information about the sr-dev mailing list