[SR-Users] TLS versions and ciphers questions.

[Klaus Darilion]

Kamailio uses OpenSSL. Thus, it mainly supports what your OpenSSL 
version supports. This means, Kamailio can use all TLS versions and 
ciphers that your libssl supports.

You can configure Kamailio to use certain ciphers, see:
http://kamailio.org/docs/modules/4.0.x/modules/tls.html#cipher_list

You can configure also SSL or TLS version, but I do not know if you can 
force also subversions like TLS1.1 or TLS1.2 (I think this only allows 
certain extensions, but does not change the protocol itself).

I know that at least SNI (server name indication) is supported in 
Kamailio, which is a TLS extension.

regards
Klaus


On 16.08.2013 13:02, johnc wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi,
>
> Is TLSv1.1 or TLSv1.2 supported by kamailio?
> Can you point me to a list of ciphersuites supported?
> Are RFC3268 ciphersuites supported? See:
> http://www.openssl.org/docs/apps/ciphers.html#AES_ciphersuites_from_RFC3268_e
>
> Thanks.
>
> Regards,
> John
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.12 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iQIcBAEBAgAGBQJSDgajAAoJELy1jPQ1KER7oxsP/3i8HyvuZ3dAPoxKvpYzKhJr
> 33nTd6OiIAAuRx5DQ8PiWZ2Nhwk5/lDbNq1RxZ5an5EE0+c/wVlqV6vAt18TUlbH
> CMirkbGcbrtBYcdylDBg7L+4ZxHnoLotwV/u92x5yFCaV/uEmSGfcUqHHobZuD9u
> P/VKFTTkjnyjQmf2oxkD8ugU/8SiUGvI7zsxT3badbiNEqlqtX9m1Z5f4/j1O0Zn
> EB7XiinkA5U8QdI9HTa9fcDTXrdh9TwzBUdEGCPGmFb2UG0hZLnEJahOxlGlLmVP
> 6324C8Wkvtdeu93O7qn74frHkl/pkNbxt1FMRmKcVZv6FvXdLaPQNWk74A4zJX74
> fGC2kXN9rNrbFs1gjhJRsCUFOyuVj2JeHkj4Bnkacs4I+u6fZqe2s3U+qDZjyuhN
> zOTX1nUmTurRe2K8gYMEIK8USc0Lgl3lHe08430vOIx4dmiWHDRrqYjg11PsPoVm
> 1XG9ha56aFf21ojCEBUGJ28YSTvbGeVWb23UIL0NLFJCQN3iuh1JBU5Culj47JWi
> UOj/n1zXAGikt3TPCYueJGJAZYyyIFhCC48PVrOWjpa5RFxDoF9ncaRTa8tGQKuC
> MEFxiRNw/UieVH/OOwntCGsGTdy//RKjYRty2UG9Ud4hUyYHwJdcln3s3oimTWE6
> Fp332xBIlKDVv5ZxChm7
> =daAm
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
> sr-users at lists.sip-router.org
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>