On Saturday, April 14, 2018 10:47:43 AM CDT Do Quang Trung wrote:

I use kamailio 5.1.1 with openssl-1.0.2n. I built openssl with gost engine supported and the result when i list cipher list as follow: .................... GOST2001-GOST89-GOST89:GOST94-GOST89-GOST89:ECDH-RSA-AES256-GCM-SHA384:ECDH- ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH -RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256 -SHA::GOST94-GOST89-GOST89:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM- SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:E CDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA: ................ i must use exactly GOST2001-GOST89-GOST89 in kamailio to protect sip protocol.

Please help me to resolve my problem.

Best regards, Trung.

See http://kamailio.org/docs/modules/5.1.x/modules/tls#tls.p.cipher_list