Yealink Forums
Disable SSL / TLS - Printable Version

+- Yealink Forums (http://forum.yealink.com/forum)
+-- Forum: IP Phone Series (/forumdisplay.php?fid=4)
+--- Forum: T4x Series (/forumdisplay.php?fid=31)
+--- Thread: Disable SSL / TLS (/showthread.php?tid=42142)



Disable SSL / TLS - jakes - 10-04-2018 02:22 PM

Hello all.
We have T48S, CP860 & CP960's. Is there a way to disable SSL 2.0 & 3.0 on these phones? Can it be done through provisioning?

Any insight would be helpful. See attached network security scan results to one of our phones.

Thank you.


RE: Disable SSL / TLS - Mamoulian - 04-14-2020 07:18 AM

I had a similiar situation. In my case it help that I added this line to the CFG-Config

sip.tls_cipher_list = AES:!ADH:!LOW:!EXPORT:!NULL
security.tls_cipher_list = AES:!ADH:!LOW:!EXPORT:!NULL
static.security.default_ssl_method = 5


Parameter static.security.default_ssl_method <y0000000000xx>.cfg
Description It configures the TLS version the IP phone uses to authenticate with the server.
Permitted
Values
0-TLS 1.0 only
3-SSL V23 (automatic negotiation with the server. The phone starts with TLS1.2 for negotiation.)
4-TLS 1.1 only
5-TLS 1.2 only
Default 3