Skip to content

Commit

Permalink
tls: add TLSv1.2+ to example configuration
Browse files Browse the repository at this point in the history
  • Loading branch information
henningw committed Oct 15, 2019
1 parent 5e00109 commit aedd2c6
Showing 1 changed file with 7 additions and 7 deletions.
14 changes: 7 additions & 7 deletions src/modules/tls/tls.cfg
Expand Up @@ -8,12 +8,12 @@
# connections that do not match any other server
# domain in this configuration file.
#
# We do not enable anything else than TLSv1.2
# We do not enable anything else than TLSv1.2+
# over the public internet. Clients do not have
# to present client certificates by default.
#
[server:default]
method = TLSv1.2
method = TLSv1.2+
verify_certificate = no
require_certificate = no
private_key = /usr/local/etc/kamailio/kamailio-selfsigned.key
Expand All @@ -29,21 +29,21 @@ certificate = /usr/local/etc/kamailio/kamailio-selfsigned.pem
# We require that servers present valid certificate.
#
[client:default]
#method = TLSv1.2
#method = TLSv1.2+
verify_certificate = yes
require_certificate = yes

# ---
# This is an example server domain for TLS connections
# received from the loopback interface. We allow
# the use of TLSv1.2 protocols here, we do
# the use of TLSv1.2+ protocols here, we do
# not require that clients present client certificates
# but if they present it it must be valid. We also use
# a special certificate and CA list for loopback
# interface.
#
#[server:5.6.7.8:5061]
#method = TLSv1.2
#method = TLSv1.2+
#verify_certificate = yes
#require_certificate = no
#private_key = /usr/local/etc/kamailio/tls/local_key.pem
Expand Down Expand Up @@ -76,7 +76,7 @@ require_certificate = yes
# - it requires to have 'server_name' to match on SNI (domain and subdomains)
#
#[server:any]
#method = TLSv1.2
#method = TLSv1.2+
#verify_certificate = yes
#require_certificate = no
#private_key = /usr/local/etc/kamailio/tls/mysipserver_org_key.pem
Expand All @@ -93,7 +93,7 @@ require_certificate = yes
# - it requires to have 'server_name' to match on SNI (only subdomains)
#
#[server:any]
#method = TLSv1.2
#method = TLSv1.2+
#verify_certificate = yes
#require_certificate = no
#private_key = /usr/local/etc/kamailio/tls/mysipserver_net_key.pem
Expand Down

0 comments on commit aedd2c6

Please sign in to comment.