[gnutls-devel] [PATCH] Don't match further SRTP profiles after one match has been found

Nikos Mavrogiannopoulos nmav at gnutls.org
Fri Dec 21 00:20:32 CET 2012


On Thu, Dec 20, 2012 at 11:54 AM, Martin Storsjö <martin at martin.st> wrote:
>> This makes SRTP profile matching more straightforward and intuitive,
>> when the first matching SRTP profile will be the one selected, not
>> the last one as before.
> FWIW, OpenSSL seems to do it the other way around - the server picks the one
> with the highest priority according to its own list, regardless of the order
> sent by the client.

In TLS typically the client sets the priorities. However in gnutls
there is a server_precedence options to allow the server to select.
You may have both ways by checking the variable
session->internals.priorities.server_precedence.

regards,
Nikos



More information about the Gnutls-devel mailing list