Kamailio uses OpenSSL. Thus, it mainly supports what your OpenSSL version supports. This means, Kamailio can use all TLS versions and ciphers that your libssl supports.

You can configure Kamailio to use certain ciphers, see: http://kamailio.org/docs/modules/4.0.x/modules/tls.html#cipher_list

You can configure also SSL or TLS version, but I do not know if you can force also subversions like TLS1.1 or TLS1.2 (I think this only allows certain extensions, but does not change the protocol itself).

I know that at least SNI (server name indication) is supported in Kamailio, which is a TLS extension.

regards Klaus

On 16.08.2013 13:02, johnc wrote:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

Hi,

Is TLSv1.1 or TLSv1.2 supported by kamailio? Can you point me to a list of ciphersuites supported? Are RFC3268 ciphersuites supported? See: http://www.openssl.org/docs/apps/ciphers.html#AES_ciphersuites_from_RFC3268_...

Thanks.

Regards, John -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJSDgajAAoJELy1jPQ1KER7oxsP/3i8HyvuZ3dAPoxKvpYzKhJr 33nTd6OiIAAuRx5DQ8PiWZ2Nhwk5/lDbNq1RxZ5an5EE0+c/wVlqV6vAt18TUlbH CMirkbGcbrtBYcdylDBg7L+4ZxHnoLotwV/u92x5yFCaV/uEmSGfcUqHHobZuD9u P/VKFTTkjnyjQmf2oxkD8ugU/8SiUGvI7zsxT3badbiNEqlqtX9m1Z5f4/j1O0Zn EB7XiinkA5U8QdI9HTa9fcDTXrdh9TwzBUdEGCPGmFb2UG0hZLnEJahOxlGlLmVP 6324C8Wkvtdeu93O7qn74frHkl/pkNbxt1FMRmKcVZv6FvXdLaPQNWk74A4zJX74 fGC2kXN9rNrbFs1gjhJRsCUFOyuVj2JeHkj4Bnkacs4I+u6fZqe2s3U+qDZjyuhN zOTX1nUmTurRe2K8gYMEIK8USc0Lgl3lHe08430vOIx4dmiWHDRrqYjg11PsPoVm 1XG9ha56aFf21ojCEBUGJ28YSTvbGeVWb23UIL0NLFJCQN3iuh1JBU5Culj47JWi UOj/n1zXAGikt3TPCYueJGJAZYyyIFhCC48PVrOWjpa5RFxDoF9ncaRTa8tGQKuC MEFxiRNw/UieVH/OOwntCGsGTdy//RKjYRty2UG9Ud4hUyYHwJdcln3s3oimTWE6 Fp332xBIlKDVv5ZxChm7 =daAm -----END PGP SIGNATURE-----

---

SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users