@furmur can you build from https://github.com/kamailio/kamailio/tree/spchan/GH3765

You might be able to get away with just building tls.so and install that into lib64/kamailio/modules

This solves a slightly different problem: outbound TLS and dispatcher but should solve the cipher issue as the same time (A).

If I connect a few clients:

$ kamctl rpc tls.list | grep cipher  | grep SHA384
      "cipher": "ECDHE-RSA-AES256-GCM-SHA384    TLSv1.2 Kx=ECDH     Au=RSA   Enc=AESGCM(256)            Mac=AEAD",
      "cipher": "TLS_AES_256_GCM_SHA384         TLSv1.3 Kx=any      Au=any   Enc=AESGCM(256)            Mac=AEAD",
      "cipher": "ECDHE-RSA-AES256-GCM-SHA384    TLSv1.2 Kx=ECDH     Au=RSA   Enc=AESGCM(256)            Mac=AEAD",
      "cipher": "TLS_AES_256_GCM_SHA384         TLSv1.3 Kx=any      Au=any   Enc=AESGCM(256)            Mac=AEAD",

the cipher suites are already loaded - you might be seeing a side effect of (A).

With this fix I do see outbound TLS connections to ms teams.


Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you are subscribed to this thread.Message ID: <kamailio/kamailio/issues/3765/1962767025@github.com>