[Home]

Summary:ASTERISK-24199: 'ALL' is specified in pjsip.conf.sample for TLS cipher but it is not valid
Reporter:Joshua C. Colp (jcolp)Labels:
Date Opened:2014-08-11 07:18:16Date Closed:2014-10-02 16:48:16
Priority:MinorRegression?No
Status:Closed/CompleteComponents:Resources/res_pjsip
Versions:12.4.0 Frequency of
Occurrence
Related
Issues:
Environment:Attachments:
Description:The pjsip.conf.sample file has an example IPv4 TLS transport with 'ALL' as the TLS cipher. This is not actually a valid cipher to be specified.

Two options for fixing this exist:
1. Remove 'ALL' from the sample config
2. Add 'ALL' as a supported special cipher using pj_ssl_cipher_get_availables
Comments:By: Matt Jordan (mjordan) 2014-08-11 08:23:28.642-0500

I think I'm fine with either option. Probably #2 if it isn't too much trouble, as we already have documented that "ALL" is valid.

By: Richard Mudgett (rmudgett) 2014-09-23 18:01:21.483-0500

ALL does not give any control over the priority of the ciphers used.  Also the option could be repeated to add more ciphers to the list of preferred ciphers to use.