[gnutls-devel] [PATCH] Don't match further SRTP profiles after one match has been found

Martin Storsjö martin at martin.st
Fri Dec 21 10:58:37 CET 2012


On Fri, 21 Dec 2012, Nikos Mavrogiannopoulos wrote:

> On Thu, Dec 20, 2012 at 11:54 AM, Martin Storsjö <martin at martin.st> wrote:
>>> This makes SRTP profile matching more straightforward and intuitive,
>>> when the first matching SRTP profile will be the one selected, not
>>> the last one as before.
>> FWIW, OpenSSL seems to do it the other way around - the server picks the one
>> with the highest priority according to its own list, regardless of the order
>> sent by the client.
>
> In TLS typically the client sets the priorities. However in gnutls
> there is a server_precedence options to allow the server to select.
> You may have both ways by checking the variable
> session->internals.priorities.server_precedence.

Right - I don't think it will be necessary to make this configurable here 
though.

// Martin


More information about the Gnutls-devel mailing list