Re: [Linphone-developers] Where did the TLS support go from 3.6.1 to 3.7.0?

[KheOps]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, Mar 25, 2014 at 02:02:37PM +0100, Ghislain MARY wrote:
> Hi,
> 
> Linphone 3.7.0 no longer uses openssl. It uses polarssl instead:
> https://polarssl.org/
> It is possible that your distro ArchLinux do not package polarssl yet. But
> if you compile Linphone yourself, you should be able to make TLS work by
> compiling polarssl yourself.

Thanks a lot for the information. It is true that PolarSSL is not
(yet?) in the packages officially supported by ArchLinux.

Is there anything particular to know in order to link Linphone against
PolarSSL? Or should I just have it installed and it will be detected
automagically? I instinctively expected some options in the 'configure'
script to specify the path etc. (just like with any other external lib).

> Cheers,
> Ghislain

Best,
KheOps

> 
> On 25/03/2014 13:52, KheOps wrote:
> >-----BEGIN PGP SIGNED MESSAGE-----
> >Hash: SHA1
> >
> >Hello,
> >
> >I'm new to this list and subscribed because I'm having troubles in
> >trying to use TLS after switching from 3.6.1 to 3.7.0.
> >
> >I'm using linphone with the SIP service ostel.co and was able to
> >connect to it on port 5061 with TLS on 3.6.1 without problem.
> >
> >After switching to 3.7.0:
> >- - in the configuration dialog for my SIP account, the choice for
> >   Transport includes UDP and TCP but not TLS
> >- - I tried to write by hand "transport=tls" for the address of the SIP
> >   proxy
> >- - linphone does not even try to connect with this setting ; with the TCP
> >   transport (unencrypted), it connects fine to port 5060.
> >
> >I first thought this could be a problem specific to my distro
> >(ArchLinux) where the package maintainer had forgotten TLS support when
> >compiling the new version, so I downloaded the source to try to compile
> >it myself.
> >
> >I then noticed that the "configure" script did not have any option
> >related to TLS or SSL anymore, whereas it had the --enable-ssl option
> >and OpenSSL linker and compiler flags variables in the 3.6.1 version of
> >the source.
> >
> >Additionally, on ArchLinux, /usr/lib/liblinphone.so.5.0.0 (linphone
> >package 3.6.1) is linked against libssl, which is not the case for
> >/usr/lib/liblinphone.so.6.0.0 (linphone package 3.7.0).
> >
> >I would highly appreciate some help on this, has not having the TLS
> >support is an important privacy issue for me.
> >
> >Thank you,
> >KheOps
> >-----BEGIN PGP SIGNATURE-----
> >Version: GnuPG v2.0.22 (GNU/Linux)
> >
> >iQEcBAEBAgAGBQJTMXwaAAoJEK9g/8GX/m3dZKAH/iQsvODACHgU092DvJSjBirs
> >Sb0YKZ7AkEcRw7rLthsZGhAEXZ1G2tFjrPwpsqy1TlxsgXx2wAuhowyrkRs9URi2
> >F+krt+EtzR2xeMgNwlqqPbDWx/TQhZQ6Q/p2+eF27K5jBQvBUoWa919jTXRnW8rJ
> >4Dc/zJwAoDW1oA2wIqfaujB871HyjxMAnF6ivvDghn4Cc6AC455NX03r8y8DNm9g
> >JP/w3iqHgU7c+htqQl8fhbd2Py7fjdkXi2eKANVX9hdrIWuY/pGrmjYtIcnfutjI
> >ZYnr3rOh34mGPXSA/nXQIVAFkPmqSSRdbrP1AimCVuE2gBibMa2kS2S2ucnTZxc=
> >=XBtL
> >-----END PGP SIGNATURE-----
> >
> >_______________________________________________
> >Linphone-developers mailing list
> >address@hidden
> >https://lists.nongnu.org/mailman/listinfo/linphone-developers
> 
> 
> _______________________________________________
> Linphone-developers mailing list
> address@hidden
> https://lists.nongnu.org/mailman/listinfo/linphone-developers
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJTMvTEAAoJEK9g/8GX/m3dPSsH/0rID6YoZ1dVRhJvUNPLnzVS
HSBVsuJHTN+/UlF4UEsoFbr7I7MOBUxLtiLD+MMeGeS7SNa1cSRbnbc8VqjIIRfU
xtueaSGNce3ccQIRtJNcrRI2k+OGpDFBTKeDcYGGC+T1AHiRzkhpIuEYeZmGSwyG
blnlS+sPHU93waGSyd0A62eXyVzHl2ekBTcaywFYe27EkZKSikSQql6BjXKwWEJG
yOeMw0P/Q5S6wrrjsWBnZKidPxq7vbizUWfe30NoNXeohf0aqbbVa8jHNBAhJvVx
Q4/J/Ewxz1pS1EHdIdAqaX7VU9ipu+p3SMI7EFDldsoSHH5wpA779k4JmgvfMtg=
=hfjN
-----END PGP SIGNATURE-----