Bug#873798: chan_pjsip does not support TLSv1.1+

Bernhard Schmidt berni at debian.org
Wed Apr 4 08:03:56 BST 2018


Control: fixed -1 1:13.17.2~dfsg-2

On Thu, Aug 31, 2017 at 11:02:27AM +0200, Bernhard Schmidt wrote:

Hi,

> Source: asterisk
> Version: 1:13.14.1~dfsg-2
> Severity: important
> Tags: upstream
> 
> chan_pjsip does not support TLSv1.1 and above.
> 
> See upstream bug

I'm not sure when it was fixed (the upstream bug is untouched) and
whether the problem was in asterisk, in pjproject or in the combination
of those, but Asterisk 1:13.17.2~dfsg-2 together with pjproject 2.7.2 on
sid works with TLSv1.2

New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit

If someone finds the necessary commits in either Asterisk or pjproject
I'm willing to send this to the SRM for inclusion in Stretch.

Bernhard



More information about the Pkg-voip-maintainers mailing list