[SR-Users] How to check TLS versions available

[Daniel-Constantin Mierla]

Hello,

for sure you can test if a specific tls version is supported, like:

openssl s_client -tls1_3 ...

In Kamailio one can restrict what tls versions to enable/allow via
modparam or tls.cfg, but the support of tls versions is coming from
libssl, so it is a matter of what libssl version is used and the distro
(as I noticed some distros package libssl with older protocols disabled).

Cheers,
Daniel

On 12.08.20 04:01, Alex Balashov wrote:
> Hi,
>
> Are you looking for a way that does not require access to the Kamailio
> config?
>
> If so, does `openssl s_client $HOST:5061` not show this, e.g. with
> verbosity?
>
>
> On 8/11/20 9:44 PM, David Cunningham wrote:
>> Hello,
>>
>> Does anyone know of a method to check what TLS versions are available
>> from Kamailio for clients to use? For example, is TLS 1.0 available,
>> TLS 1.1, etc.
>>
>> Thanks in advance,
>>
>> -- 
>> David Cunningham, Voisonics Limited
>> http://voisonics.com/
>> USA: +1 213 221 1092
>> New Zealand: +64 (0)28 2558 3782
>>
>> _______________________________________________
>> Kamailio (SER) - Users Mailing List
>> sr-users at lists.kamailio.org
>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>
>
> -- 
> Alex Balashov | Principal | Evariste Systems LLC
>
> Tel: +1-706-510-6800 / +1-800-250-5920 (toll-free)
> Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users at lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla -- www.asipto.com
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Funding: https://www.paypal.me/dcmierla