How to disable sip SSL / TLS Renegotiation in Expressway

shaocan huang · ‎09-23-2020

Hi We have facing a CVE-2011-1473 in our expressway.I have raise a case and TAC have told me BU will not fix this CVE as it will impact the interoperability of expressway.But we need to fix this CVE or we will have to shutdown our expressway.Anyone have any idea how to disable sip tls renegotiation in Expressway?For example,can you do that in root mode?Thanks.

lior look · ‎09-23-2020

Do you want to disable sip tls listener at all?

shaocan huang · ‎09-23-2020

No. We are using MRA for jabber. So we can not disable sip tls.

Emmanuel Akum · ‎01-19-2022

Hi Shaocan,

Did you guys get this resolved?

shaocan huang · ‎01-20-2022

No.But we can use F5 to disable this feature .Our expressway placed behind a F5 LTM

b.winter · ‎01-20-2022

As there is no config option in the Expressway itself and that TAC already told you, that it would impact the functionality, I guess there is no way to disable it.