-->

TLSv1_2 (TLS1.2) support in PJSIP library

2019-07-07 03:43发布

问题:

I am using latest PJSIP library in my Android/iOS applications. I want use TLSv1.2 connection in my project. Which TLS version does PJSIP support? From source code it seems to be supporting TLSv1.0. Is there a way to add TLSv1_2 support to PJSIP library?

回答1:

I want use TLSv1.2 connection in my project. Which TLS version does PJSIP support?

From Configuring PJSIP with TLS:

The TLS support in PJSIP requires OpenSSL development kit (headers and libs) to be installed.

So PJSIP could offer anything that OpenSSL offers. OpenSSL 1.0.1 offers TLS 1.2. OpenSSL 1.0.0 and below does not (see the CHANGE LOG, and note TLS 1.2 support was added between 1.0.0 and 1.0.1). Since you are working on Android, you likely have OpenSSL 0.9.8. That means TLS 1.2 is probably not available to you using Android's version of OpenSSL.

If you want the ChaCha/Poly cipher suites, then you need OpenSSL 1.0.2. see ChaCha20/Poly1305 in OpenSSL? on the OpenSSL mailing list.

Your mileage may vary when you start inter-operating with other SIP components or if you are using a SIP proxy.