[Asterisk-code-review] AST-2015-004 http: Provide greater control of TLS and set mo... (asterisk[master])

Joshua Colp asteriskteam at digium.com
Wed Feb 3 14:11:29 CST 2016


Joshua Colp has uploaded a new patch set (#2).

Change subject: AST-2015-004 http: Provide greater control of TLS and set modern defaults.
......................................................................

AST-2015-004 http: Provide greater control of TLS and set modern defaults.

This change exposes the configuration of various aspects of the TLS
support and sets the default to the modern standards.

The TLS cipher is now set to the best values according to the
Mozilla OpSec team, different TLS versions can now be disabled, and
the cipher order can be forced to be that of the server instead of
the client.

ASTERISK-24972 #close

Change-Id: I0a10f2883f7559af5e48dee0901251dbf30d45b8
---
M configs/samples/http.conf.sample
M include/asterisk/tcptls.h
M main/http.c
M main/tcptls.c
4 files changed, 60 insertions(+), 9 deletions(-)


  git pull ssh://gerrit.asterisk.org:29418/asterisk refs/changes/65/2165/2
-- 
To view, visit https://gerrit.asterisk.org/2165
To unsubscribe, visit https://gerrit.asterisk.org/settings

Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I0a10f2883f7559af5e48dee0901251dbf30d45b8
Gerrit-PatchSet: 2
Gerrit-Project: asterisk
Gerrit-Branch: master
Gerrit-Owner: Joshua Colp <jcolp at digium.com>



More information about the asterisk-code-review mailing list