Re: [Linphone-developers] Where did the TLS support go from 3.6.1 to 3.7.0?

[Ghislain MARY]

Hi,

Linphone 3.7.0 no longer uses openssl. It uses polarssl instead: 
https://polarssl.org/
It is possible that your distro ArchLinux do not package polarssl yet. 
But if you compile Linphone yourself, you should be able to make TLS 
work by compiling polarssl yourself.

Cheers,
Ghislain

On 25/03/2014 13:52, KheOps wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hello,
>
> I'm new to this list and subscribed because I'm having troubles in
> trying to use TLS after switching from 3.6.1 to 3.7.0.
>
> I'm using linphone with the SIP service ostel.co and was able to
> connect to it on port 5061 with TLS on 3.6.1 without problem.
>
> After switching to 3.7.0:
> - - in the configuration dialog for my SIP account, the choice for
>    Transport includes UDP and TCP but not TLS
> - - I tried to write by hand "transport=tls" for the address of the SIP
>    proxy
> - - linphone does not even try to connect with this setting ; with the TCP
>    transport (unencrypted), it connects fine to port 5060.
>
> I first thought this could be a problem specific to my distro
> (ArchLinux) where the package maintainer had forgotten TLS support when
> compiling the new version, so I downloaded the source to try to compile
> it myself.
>
> I then noticed that the "configure" script did not have any option
> related to TLS or SSL anymore, whereas it had the --enable-ssl option
> and OpenSSL linker and compiler flags variables in the 3.6.1 version of
> the source.
>
> Additionally, on ArchLinux, /usr/lib/liblinphone.so.5.0.0 (linphone
> package 3.6.1) is linked against libssl, which is not the case for
> /usr/lib/liblinphone.so.6.0.0 (linphone package 3.7.0).
>
> I would highly appreciate some help on this, has not having the TLS
> support is an important privacy issue for me.
>
> Thank you,
> KheOps
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.22 (GNU/Linux)
>
> iQEcBAEBAgAGBQJTMXwaAAoJEK9g/8GX/m3dZKAH/iQsvODACHgU092DvJSjBirs
> Sb0YKZ7AkEcRw7rLthsZGhAEXZ1G2tFjrPwpsqy1TlxsgXx2wAuhowyrkRs9URi2
> F+krt+EtzR2xeMgNwlqqPbDWx/TQhZQ6Q/p2+eF27K5jBQvBUoWa919jTXRnW8rJ
> 4Dc/zJwAoDW1oA2wIqfaujB871HyjxMAnF6ivvDghn4Cc6AC455NX03r8y8DNm9g
> JP/w3iqHgU7c+htqQl8fhbd2Py7fjdkXi2eKANVX9hdrIWuY/pGrmjYtIcnfutjI
> ZYnr3rOh34mGPXSA/nXQIVAFkPmqSSRdbrP1AimCVuE2gBibMa2kS2S2ucnTZxc=
> =XBtL
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Linphone-developers mailing list
> address@hidden
> https://lists.nongnu.org/mailman/listinfo/linphone-developers