Module: sip-router
Branch: 4.1
Commit: 73ea61efec6b97fac7e2117dcde969b2cd549291
URL:
http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=73ea61e…
Author: Carsten Bock <carsten(a)ng-voice.com>
Committer: Carsten Bock <carsten(a)ng-voice.com>
Date: Sat Mar 22 16:49:20 2014 +0100
tls: Added note to docs about OpenSSL requirement for Elliptic Curve Diffie Hellman
(ECDH)
---
modules/tls/README | 11 ++++++++++-
modules/tls/doc/tls.xml | 15 +++++++++++++++
2 files changed, 25 insertions(+), 1 deletions(-)
diff --git a/modules/tls/README b/modules/tls/README
index cdd3493..fbf1762 100644
--- a/modules/tls/README
+++ b/modules/tls/README
@@ -4,7 +4,13 @@ Andrei Pelinescu-Onciul
iptelorg GmbH
- Copyright � 2007 iptelorg GmbH
+Carsten Bock
+
+ ng-voice GmbH
+
+ Copyright © 2007 iptelorg GmbH
+
+ Copyright © 2014 ng-voice GmbH
__________________________________________________________________
Table of Contents
@@ -274,6 +280,9 @@ make TLS_EXTRA_LIBS="-lkrb5 -lz" all include_modules=tls
when trying to load the tls module (check the log), it means some
needed library was not linked and it must be added to TLS_EXTRA_LIBS
+ Elliptic Curve Diffie-Hellman (EDCH)-Ciphers are only supported in
+ OpenSSL 1.0.0e and later.
+
5. TLS and Low Memory
The openssl library doesn't handle very well low memory situations. If
diff --git a/modules/tls/doc/tls.xml b/modules/tls/doc/tls.xml
index 4f41780..4302cc5 100644
--- a/modules/tls/doc/tls.xml
+++ b/modules/tls/doc/tls.xml
@@ -20,11 +20,23 @@
<email>andrei(a)iptel.org</email>
</address>
</author>
+ <author>
+ <firstname>Carsten</firstname>
+ <surname>Bock</surname>
+ <affiliation><orgname>ng-voice GmbH</orgname></affiliation>
+ <address>
+ <email>carsten(a)ng-voice.com</email>
+ </address>
+ </author>
</authorgroup>
<copyright>
<year>2007</year>
<holder>iptelorg GmbH</holder>
</copyright>
+ <copyright>
+ <year>2014</year>
+ <holder>ng-voice GmbH</holder>
+ </copyright>
</bookinfo>
<toc></toc>
@@ -112,6 +124,9 @@ make TLS_EXTRA_LIBS="-lkrb5 -lz" all include_modules=tls
<para>
In general, if Kamailio fails to start with a symbol not found error when trying to
load the tls module (check the log), it means some needed library was not linked and it
must be added to <emphasis>TLS_EXTRA_LIBS</emphasis>
</para>
+ <para>
+<ulink
url="http://wiki.openssl.org/index.php/Elliptic_Curve_Diffie_Hellman&q…
Curve Diffie-Hellman (EDCH)</ulink>-Ciphers are only supported in OpenSSL 1.0.0e and
later.
+ </para>
</section>
<section id="tls.low_memory">