|Summary:||ASTERISK-13678: Getting SSL cipher error with Asterisk-1.6.1-rc1 version|
|Date Opened:||2009-03-02 03:22:35.000-0600||Date Closed:||2011-06-07 14:08:07|
I tried to set “tlscipher” property in the sip.conf file with the below mentioned ciphers separately and got the below exceptions.
TLS_RSA_WITH_3DES_EDE_CBC_SHA ==> SSL cipher error <TLS_RSA_WITH_3DES_EDE_CBC_SHA>
TLS_RSA_WITH_AE_128_CBC_SHA ==> SSL cipher error <TLS_RSA_WITH_AE_128_CBC_SHA>
Does Asterisk don’t support these two ciphers? Could anyone please help me in resolving this issue.
|Comments:||By: Joshua C. Colp (jcolp) 2009-03-02 08:43:57.000-0600|
This seems to be a configuration issue. You need to be using the OpenSSL equivalent. These can be found at http://www.openssl.org/docs/apps/ciphers.html#CIPHER_STRINGS
TLS_RSA_WITH_3DES_EDE_CBC_SHA should be configured as DES-CBC-SHA
TLS_RSA_WITH_AE_128_CBC_SHA should be configured as AES128-SHA
Please give this a go and report back.
By: TheOldSaint (theoldsaint) 2009-03-05 00:22:35.000-0600
Yep its working.
I am sorry...My apologies for posting over here rather than in Asterisk support forum.
By: Joshua C. Colp (jcolp) 2009-03-05 07:19:24.000-0600
Closed per reporter, configuration issue.