Module: kamailio Branch: 6.0 Commit: 0e820635bbbf9d887e1d481f2dc0243603eb9624 URL: https://github.com/kamailio/kamailio/commit/0e820635bbbf9d887e1d481f2dc02436...
Author: Nicolas Chapleau nicchap@outlook.com Committer: Daniel-Constantin Mierla miconda@gmail.com Date: 2025-06-25T08:08:53+02:00
tls: use SSL_CTX_set_ciphersuites() when using openSSL 1.1.1
(cherry picked from commit 6faf0470d0fab1594249e43d91000f324c5e25a7)
---
Modified: src/modules/tls/tls_domain.c
---
Diff: https://github.com/kamailio/kamailio/commit/0e820635bbbf9d887e1d481f2dc02436... Patch: https://github.com/kamailio/kamailio/commit/0e820635bbbf9d887e1d481f2dc02436...
---
diff --git a/src/modules/tls/tls_domain.c b/src/modules/tls/tls_domain.c index 6527b16a9fa..c7f35df63ee 100644 --- a/src/modules/tls/tls_domain.c +++ b/src/modules/tls/tls_domain.c @@ -737,11 +737,27 @@ static int set_cipher_list(tls_domain_t *d) return 0; procs_no = get_max_procs(); for(i = 0; i < procs_no; i++) { +#if OPENSSL_VERSION_NUMBER < 0x030000000L if(SSL_CTX_set_cipher_list(d->ctx[i], cipher_list) == 0) { ERR("%s: Failure to set SSL context cipher list "%s"\n", tls_domain_str(d), cipher_list); return -1; } +#else + if(d->method == TLS_USE_TLSv1_3 || d->method == TLS_USE_TLSv1_3_PLUS) { + if(SSL_CTX_set_ciphersuites(d->ctx[i], cipher_list) == 0) { + ERR("%s: Failure to set SSL context cipher suites "%s"\n", + tls_domain_str(d), cipher_list); + return -1; + } else { + if(SSL_CTX_set_cipher_list(d->ctx[i], cipher_list) == 0) { + ERR("%s: Failure to set SSL context cipher list "%s"\n", + tls_domain_str(d), cipher_list); + return -1; + } + } + } +#endif #if !defined(OPENSSL_NO_ECDH) && OPENSSL_VERSION_NUMBER < 0x10100000L setup_ecdh(d->ctx[i]); #endif