Kamailio uses OpenSSL. Thus, it mainly supports what your OpenSSL version supports. This means, Kamailio can use all TLS versions and ciphers that your libssl supports.

You can configure Kamailio to use certain ciphers, see:
http://kamailio.org/docs/modules/4.0.x/modules/tls.html#cipher_list

You can configure also SSL or TLS version, but I do not know if you can force also subversions like TLS1.1 or TLS1.2 (I think this only allows certain extensions, but does not change the protocol itself).

I know that at least SNI (server name indication) is supported in Kamailio, which is a TLS extension.

regards
Klaus


On 16.08.2013 13:02, johnc wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Is TLSv1.1 or TLSv1.2 supported by kamailio?
Can you point me to a list of ciphersuites supported?
Are RFC3268 ciphersuites supported? See:
http://www.openssl.org/docs/apps/ciphers.html#AES_ciphersuites_from_RFC3268_e

Thanks.

Regards,
John
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=daAm
-----END PGP SIGNATURE-----

_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users


_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

Reply via email to