summaryrefslogtreecommitdiff
path: root/configs
diff options
context:
space:
mode:
authorzuul <zuul@gerrit.asterisk.org>2016-08-19 15:47:40 -0500
committerGerrit Code Review <gerrit2@gerrit.digium.api>2016-08-19 15:47:40 -0500
commitd4a4a2381812ac955d8e93b556d7bbafa1d6001a (patch)
tree1e272eb423ec83590f36be4d91b4cb2106f5a33b /configs
parent16cb686fac456524fdfc94e1c5520b0263b94b0c (diff)
parentb1fe070d0bc26088cddffa5befd64fad7130f0ee (diff)
Merge "sip.conf: tlsclientmethod is using sslv23 as default." into 13
Diffstat (limited to 'configs')
-rw-r--r--configs/samples/sip.conf.sample11
1 files changed, 10 insertions, 1 deletions
diff --git a/configs/samples/sip.conf.sample b/configs/samples/sip.conf.sample
index 5c3238e2a..27012614e 100644
--- a/configs/samples/sip.conf.sample
+++ b/configs/samples/sip.conf.sample
@@ -592,7 +592,16 @@ srvlookup=yes ; Enable DNS SRV lookups on outbound calls
;
;tlsclientmethod=tlsv1 ; values include tlsv1, sslv3, sslv2.
; Specify protocol for outbound client connections.
- ; If left unspecified, the default is sslv2.
+ ; If left unspecified, the default is the general-
+ ; purpose version-flexible SSL/TLS method (sslv23).
+ ; With that, the actual protocol version used will
+ ; be negotiated to the highest version mutually
+ ; supported by Asterisk and the remote server, i.e.
+ ; TLSv1.2. The supported protocols are listed at
+ ; http://www.openssl.org/docs/ssl/SSL_CTX_new.html
+ ; SSLv2 and SSLv3 are disabled within Asterisk.
+ ; Your distribution might have changed that list
+ ; further.
;
;--------------------------- SIP timers ----------------------------------------------------
; These timers are used primarily in INVITE transactions.