提交 d4a13742 authored 作者: Travis Cross's avatar Travis Cross

Default to TLSv1 through TLSv1.2 if unspecified

上级 8c2c464b
...@@ -3764,7 +3764,9 @@ switch_status_t config_sofia(sofia_config_t reload, char *profile_name) ...@@ -3764,7 +3764,9 @@ switch_status_t config_sofia(sofia_config_t reload, char *profile_name)
profile->sip_force_expires = 0; profile->sip_force_expires = 0;
profile->sip_expires_max_deviation = 0; profile->sip_expires_max_deviation = 0;
profile->sip_subscription_max_deviation = 0; profile->sip_subscription_max_deviation = 0;
profile->tls_version = 0; profile->tls_version = SOFIA_TLS_VERSION_TLSv1;
profile->tls_version |= SOFIA_TLS_VERSION_TLSv1_1;
profile->tls_version |= SOFIA_TLS_VERSION_TLSv1_2;
profile->tls_timeout = 300; profile->tls_timeout = 300;
profile->mflags = MFLAG_REFER | MFLAG_REGISTER; profile->mflags = MFLAG_REFER | MFLAG_REGISTER;
profile->server_rport_level = 1; profile->server_rport_level = 1;
...@@ -4701,6 +4703,7 @@ switch_status_t config_sofia(sofia_config_t reload, char *profile_name) ...@@ -4701,6 +4703,7 @@ switch_status_t config_sofia(sofia_config_t reload, char *profile_name)
profile->tls_verify_in_subjects_str = switch_core_strdup(profile->pool, val); profile->tls_verify_in_subjects_str = switch_core_strdup(profile->pool, val);
} else if (!strcasecmp(var, "tls-version") && !zstr(val)) { } else if (!strcasecmp(var, "tls-version") && !zstr(val)) {
char *ps = val, *pe; char *ps = val, *pe;
profile->tls_version = 0;
while (1) { while (1) {
int n; int n;
pe = strchr(ps,','); pe = strchr(ps,',');
......
Markdown 格式
0%
您添加了 0 到此讨论。请谨慎行事。
请先完成此评论的编辑!
注册 或者 后发表评论