[asterisk-users] SSL/TLS weakness impact on Asterisk authentication

2014-06-10 Thread Michelle Dupuis
After reading about the 2 major SSL (and TLS?) weaknesses discovered this year, I was wondering how it affects asterisk. Does the SIP authentication use TLS - or something that was recently broken? Is there a risk of exposing passwords? Thanks! --

Re: [asterisk-users] SSL/TLS weakness impact on Asterisk authentication

2014-06-10 Thread Matthew Jordan
On Tue, Jun 10, 2014 at 4:44 PM, Michelle Dupuis mdup...@ocg.ca wrote: After reading about the 2 major SSL (and TLS?) weaknesses discovered this year, I was wondering how it affects asterisk. Asterisk uses OpenSSL for TLS. So, the answer is, it depends on the version of OpenSSL that was

Re: [asterisk-users] SSL/TLS weakness impact on Asterisk authentication

2014-06-10 Thread Patrick Laimbock
On 10-06-14 23:44, Michelle Dupuis wrote: After reading about the 2 major SSL (and TLS?) weaknesses discovered this year, I was wondering how it affects asterisk. Does the SIP authentication use TLS - or something that was recently broken? Is there a risk of exposing passwords? Asterisk'