resip::SecurityTypes Namespace Reference

Enumerations
enum	SSLVendor { OpenSSL }
enum	SSLType { NoSSL = 0 , DynamicTLS = 1 , SSLv23 = 1 , TLSv1 = 2 }
	Note: Before adding to the SSLType enum, please see the comments about mTlsCtx in resip/stack/ssl/Security.hxx. More...
enum	TlsClientVerificationMode { None , Optional , Mandatory }

Enumeration Type Documentation

SSLType

enum resip::SecurityTypes::SSLType

Note: Before adding to the SSLType enum, please see the comments about mTlsCtx in resip/stack/ssl/Security.hxx.

Security allows two modes of operation: dynamic version negotiation (also called SSLv23) and pinned to TLSv1 (1.0 only). It tracks a SSL_CTX for each of these 2 modes. This allows TLS transports in resip to use different TLS versions, however it is also difficult to expand this mechanism to support more versions of TLS without breaking ABI compatibility.

Instead resip offers a single configuration for controlling OpenSSL options that can be used to disable TLS versions. This is the preferred mechanism for controlling TLS versions. See Security::OpenSSLCTXSetOptions and Security::OpenSSLCTXClearOptions.

Caveat: using Security::OpenSSLCTXSetOptions is application wide and cannot be applied to a single TLS transport. We currently do NOT support different TLS versions for different transports, other than the base existing TLSv1 option.

Enumerator
NoSSL
DynamicTLS
SSLv23
TLSv1

Definition at line 32 of file SecurityTypes.hxx.

SSLVendor

enum resip::SecurityTypes::SSLVendor

Enumerator
OpenSSL

Definition at line 9 of file SecurityTypes.hxx.

TlsClientVerificationMode

enum resip::SecurityTypes::TlsClientVerificationMode

Enumerator
None
Optional
Mandatory

Definition at line 40 of file SecurityTypes.hxx.