[PATCH] Enable mandatory use of TLS 1.1/1.2

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Michele,

Unfortunately, older OpenSSL version may not have those functions,
which will result in linking errors:
Undefined symbols for architecture x86_64:
  "_TLSv1_1_method", referenced from:
...

Regards,
Ming

On Thu, May 14, 2015 at 11:19 PM, Michele Cicciotti
<michele.cicciotti at privatewave.com> wrote:
> I noticed that when I specified just PJ_SSL_SOCK_PROTO_TLS1_1 or
> PJ_SSL_SOCK_PROTO_TLS1_2 as the protocol of a SSL socket, I got an OpenSSL
> failure (function ssl23_get_server_hello, reason
> SSL_R_UNSUPPORTED_PROTOCOL). I'm not sure why SSLv23_method with
> SSL_CTX_set_options doesn't work in this case, but I could make it work by
> using TLSv1_1_method and TLSv1_2_method when only TLS 1.1 or 1.2 is
> specified (see the attached patch)
>
> _______________________________________________
> Visit our blog: http://blog.pjsip.org
>
> pjsip mailing list
> pjsip at lists.pjsip.org
> http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
>



[Index of Archives]     [Asterisk Users]     [Asterisk App Development]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [Linux API]
  Powered by Linux