SIP Router Project


FS#90 - new tls_method that only accepts TLSv1, but allows SSLv2 client hello

Attached to Project: sip-router
Opened by Juha Heinanen (jh) - Monday, 04 October 2010, 16:20 GMT
Last edited by Daniel-Constantin Mierla (miconda) - Tuesday, 23 December 2014, 09:30 GMT
Task Type Improvement
Category Module → tls
Status Closed
Assigned To Andrei Pelinescu-Onciul (andrei)
Operating System All
Severity Medium
Priority Normal
Reported Version Development
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No


some SIP UAs send SSLv2 initial client hello, but negotiation finally results in TLSv1. currently there is no tls_method that would allow SSLv2 initial hello, but that would require TLSv1 as the result of the negotiation. proposal is to add such a new tls_method value, e.g., TLSv1N or something else.

This task depends upon

Closed by  Daniel-Constantin Mierla (miconda)
Tuesday, 23 December 2014, 09:30 GMT
Reason for closing:  Won't implement
Additional comments about closing:  SSv2 support has been deprecated out there. If you still find this useful to implement, re-open on github issues.