From d7c68893ccfad3f587cb869a93f7e068308fad6c Mon Sep 17 00:00:00 2001
From: Alexander Traud <pabstraud@compuserve.com>
Date: Fri, 16 Oct 2020 15:32:48 +0200
Subject: [PATCH] [configuration] Copy TLS ciphers from vars.xml even in
 Vanilla External

Previously, the configuration file vars.xml set the TLS Cipher Suites only for internal SIP profiles. External SIP profiles used the 'DEFAULT' set of the underlying OpenSSL. Now, external SIP profiles copy to the general setting of vars.xml as well. Of course, you can overwrite this anytime, for example, to use different sets for internal and external.
---
 conf/vanilla/sip_profiles/external.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/conf/vanilla/sip_profiles/external.xml b/conf/vanilla/sip_profiles/external.xml
index e2d161d598..d9e312d78f 100644
--- a/conf/vanilla/sip_profiles/external.xml
+++ b/conf/vanilla/sip_profiles/external.xml
@@ -92,5 +92,7 @@
     <param name="tls-verify-in-subjects" value=""/>
     <!-- TLS version ("sslv23" (default), "tlsv1"). NOTE: Phones may not work with TLSv1 -->
     <param name="tls-version" value="$${sip_tls_version}"/>
+    <!-- TLS ciphers default: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH -->
+    <param name="tls-ciphers" value="$${sip_tls_ciphers}"/>
   </settings>
 </profile>