[Home]

Summary:ASTERISK-13678: Getting SSL cipher error with Asterisk-1.6.1-rc1 version
Reporter:TheOldSaint (theoldsaint)Labels:
Date Opened:2009-03-02 03:22:35.000-0600Date Closed:2011-06-07 14:08:07
Priority:MinorRegression?No
Status:Closed/CompleteComponents:Channels/chan_sip/TCP-TLS
Versions:Frequency of
Occurrence
Related
Issues:
Environment:Attachments:
Description:Hi,

I tried to set “tlscipher” property in the sip.conf file with the below mentioned ciphers separately and got the below exceptions.

TLS_RSA_WITH_3DES_EDE_CBC_SHA ==> SSL cipher error <TLS_RSA_WITH_3DES_EDE_CBC_SHA>
TLS_RSA_WITH_AE_128_CBC_SHA ==> SSL cipher error <TLS_RSA_WITH_AE_128_CBC_SHA>

Does Asterisk don’t support these two ciphers? Could anyone please help me in resolving this issue.
Comments:By: Joshua C. Colp (jcolp) 2009-03-02 08:43:57.000-0600

This seems to be a configuration issue. You need to be using the OpenSSL equivalent. These can be found at http://www.openssl.org/docs/apps/ciphers.html#CIPHER_STRINGS

TLS_RSA_WITH_3DES_EDE_CBC_SHA should be configured as DES-CBC-SHA
TLS_RSA_WITH_AE_128_CBC_SHA should be configured as AES128-SHA

Please give this a go and report back.

By: TheOldSaint (theoldsaint) 2009-03-05 00:22:35.000-0600

Yep its working.

I am sorry...My apologies for posting over here rather than in Asterisk support forum.

Thanks

By: Joshua C. Colp (jcolp) 2009-03-05 07:19:24.000-0600

Closed per reporter, configuration issue.