sipcapture / heplify-server

HEP Capture Server for HOMER
https://sipcapture.org
GNU Affero General Public License v3.0
184 stars 85 forks source link

TLSMinVersion configuration, with default TLS1.2 #441

Closed trdenton closed 3 years ago

trdenton commented 3 years ago

Result of internal security audit - this change adds a TLSMinVersion configuration option, and sets the default to TLS1.2

CLAassistant commented 3 years ago

CLA assistant check
All committers have signed the CLA.

systemcrash commented 3 years ago

Recommended to mandate TLSv1.2 in light of RFC8996

5. Do Not Use TLS 1.1

TLS 1.1 MUST NOT be used.