[asterisk-dev] ./configure --with-pjproject-bundled: GitHub changed/s to TLS 1.2-only!

Alexander Traud pabstraud at compuserve.com
Sun Jun 3 09:15:35 CDT 2018

Currently, Asterisk downloads the tarball of the PJProject not from the original source at Teluu but GitHub. GitHub forces the user to use HTTPs instead of HTTP. This is already an issue as described in ASTERISK-27665 because many tools authenticate the given certificate. Since February, GitHub even requires TLS v1.2: <https://githubengineering.com/crypto-removal-notice/>.

By blind chance, the server used in third-party/pjproject/Makefile.rules was not affected by this change in February. Anyway, that could change any day without a word of caution. Still, that server forces HTTPs, too.

Isn't it possible to move that tarball to a Digium server? This would avoid the TLS v1.2-only issue and solve ASTERISK-27665 the cleanest way.

More information about the asterisk-dev mailing list