Environment Variables for TLS
Using of Environment Variables allows an administrator to tune TLS handling behavior. These variables can be specified by adding properties in Brekeke SIP server Admintool > [Configuration] > [Advanced] page.
Thread Priority
The thread priority for the TLS listener. (1-10, default=5)
net.sip.tls.listener.thread.priority
The thread priority for a TLS connection. (1-10, default=5)
net.sip.tls.connection.thread.priority
TLS Socket
The receiving buffer size as SO_RCVBUF.
net.sip.tls.recv.bufsize
The sending buffer size as SO_SNDBUF.
net.sip.tls.send.bufsize
The flag as SO_REUSEADDR.
net.sip.tls.reuse
The timeout value in milliseconds as SO_TIMEOUT for the TLS listener. 0 means infinite. (default=0)
net.sip.tls.sotimeout.server
The timeout value in milliseconds as SO_TIMEOUT for TLS connections. 0 means infinite.
net.sip.tls.sotimeout.client
The timeout value in milliseconds as connect-timeout. 0 means infinite. (default=800)
net.sip.tls.connect.timeout
The allowable maximum number of TLS connections. 0 means unlimited. (default=0)
net.sip.tls.max.connection
The queue size for incoming TLS connections. (default=50)
net.sip.tls.size.queue
The flag as TCP_NODELAY.
net.sip.tls.nodelay
The flag as SO_KEEPALIVE.
net.sip.tls.keepalive.use
The TOS field. (0x0-0xff)
net.sip.tls.tos
The flag whether new TLS sessions may be established by the sockets which are created from the TLS lister. If true, new TLS session may be created. If false, an existing TLS session must be resumed. (default=true)
net.sip.tls.sessioncreation
Bind Interface IP address
net.sip.tls.bind.interface
If “need” is set, SIP Server requests client certificate.
net.sip.tls.clientauth
SIP Session over TLS
The flag for reaching a SIP UA even if the address/port of Contact-URI is different from the remote IP address/port. (default=true)
net.sip.tls.connection.put.followable
The flag for closing a TLS connection if a related REGISTER record expires. (default=true)
net.sip.tls.timer.use
The length in milliseconds for waiting an incoming packet after closing of a SIP session. (default=5000)
net.sip.tls.wait.closing
Specify TLS versions
net.sip.tls.protocol.N <- For TLS connection net.sip.wss.protocol.N <- For WSS connection
*N is sequence number from 1 that represents priority during hand shake. 1 is higher priority.
Example: Enable only TLSv1.3 and 1.2 on TLS connection
net.sip.tls.protocol.1 = TLSv1.3 net.sip.tls.protocol.2 = TLSv1.2
Example: Enable only TLSv1.3 and 1.2 on on WSS connection
net.sip.wss.protocol.1 = TLSv1.3net.sip.wss.protocol.2 = TLSv1.2