<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On 05 Feb 2016, at 12:49, Federico Cabiddu <<a href="mailto:federico.cabiddu@gmail.com" class="">federico.cabiddu@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">Hi Olle,<br class=""><div class="gmail_extra"><br class=""><div class="gmail_quote">On Thu, Feb 4, 2016 at 3:30 PM, Olle E. Johansson <span dir="ltr" class=""><<a href="mailto:oej@edvina.net" target="_blank" class="">oej@edvina.net</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=""><br class="">
> On 04 Feb 2016, at 12:23, Camille Oudot <<a href="mailto:camille.oudot@orange.com" class="">camille.oudot@orange.com</a>> wrote:<br class="">
><br class="">
> Hi Olle,<br class="">
><br class=""><br class="">
</span>It was Daniel’s recommendation to load the TLS module first since he<br class="">
had fixed some generic OpenSSL magic there.<br class="">
<span class=""><br class=""></span></blockquote><div class=""> </div><div class="">Will add the recommendation to the doc.</div><div class=""> <br class=""></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">
><br class="">
>> - http_set_ssl_cert should have “tls” instead of “ssl”. SSL is bad.<br class="">
><br class="">
> We spoke about this one, "ssl" reflects the names int the curl API. If<br class="">
> we totally disable SSL though, it makes sense to use "tls”.<br class="">
</span>Exactly.</blockquote><div class=""><br class=""></div><div class="">So does this mean that we are going to enforce the usage of TLS? Today it's not the case anywhere in Kamailio and, sincerely, having a parameter with "tls" in its name and then allowing the user to use ssl is misleading. I would prefer:</div><div class="">1) not having any mention to ssl/tls in the name (like "http_set_cert")</div><div class="">2) raise a warning when the user tries to use a deprecated protocol version</div><div class=""><br class=""></div></div></div></div></div></blockquote>I do think we’ve disabled SSL in Kamailio, if not it’s just for backwards</div><div>compatibility with really old phones. TLS won’t be disabled soon. If we </div><div>are selecting terminology between “SSL” and “TLS” - “TLS” is the one </div><div>we should use.</div><div><br class=""></div><div>And yes, if someone configures SSL I think it’s a good idea to issue a warning.<br class=""><blockquote type="cite" class=""><div class=""><div dir="ltr" class=""><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=""><br class="">
><br class="">
>> - I still think we need to discuss the way you have to run functions<br class="">
>> to set parameters for a coming function call.<br class="">
>> (...)<br class="">
>> What if that function doesn’t happen, will all these values be reset<br class="">
>> for the next message processed in that process?<br class="">
><br class="">
> Good point, that is not addressed yet: we have to figure a way to reset<br class="">
> all the values previously set when a new message is processed.<br class="">
> Currently, they are reset when the HTTP query is sent.<br class="">
<br class="">
</span>And I think you need to rethink the way you handle this. We are quite<br class="">
open for new ideas, but adding a totally new scheme for setting parameters for<br class="">
function calls is not something we need - it will just be confusing for<br class="">
people who learn Kamailio. Please try to use an existing framework.<br class="">
<br class=""></blockquote><div class=""> </div><div class="">We will rethink this part.</div></div></div></div></div></blockquote>THanks! If you want to discuss various ways to handle this we can have an</div><div>IRC chat some time.</div><div><br class=""><blockquote type="cite" class=""><div class=""><div dir="ltr" class=""><div class="gmail_extra"><div class="gmail_quote"><div class=""> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Sorry for being really, really, really stubborn of this, but I’ve spent<br class="">
over 10 years doing Kamailio trainings… :-)<br class="">
<span class="HOEnZb"><font color="#888888" class=""><br class="">
/O</font></span></blockquote><div class=""> </div><div class="">No problem while the discussion is constructive, as it is in this case :)</div></div></div></div></div></blockquote>:-)</div><div><br class=""></div><div>/O</div><br class=""></body></html>