-
- Downloads
res_rtp_asterisk: Enable Forward Secrecy (PFS) for DTLS.
Since July 2014, TLS based protocols (SIP over TLS, Secure WebSockets, HTTPS) support PFS thanks to ASTERISK-23905. In July 2015, the same feature was added for DTLS. The source code from main/tcptls.c should have been re-used to ease security audits. Therefore, this change rolls back the change from July 2015 and re-uses the code from July 2014. This has the additional benefits to work under CentOS 7 and enabling not just ECDHE but DHE based cipher suites as well. ASTERISK-25659 #close Reported by: StefanEng86, urbaniak, pay123 Tested by: sarumjanuch, traud patches: res_rtp_asterisk.patch submitted by sarumjanuch dtls_centos_step_1.patch submitted by traud dtls_centos_step_2.patch submitted by traud Change-Id: I537cadf4421f092a613146b230f2c0ee1be28d5c
Showing
- CHANGES 18 additions, 0 deletionsCHANGES
- configure 5 additions, 68 deletionsconfigure
- configure.ac 0 additions, 6 deletionsconfigure.ac
- include/asterisk/autoconfig.h.in 0 additions, 3 deletionsinclude/asterisk/autoconfig.h.in
- res/res_rtp_asterisk.c 34 additions, 7 deletionsres/res_rtp_asterisk.c
Loading
Please register or sign in to comment