-
- Downloads
STIR/SHAKEN: Fix certificate type and storage.
During OpenSIPit, we found out that the public certificates must be of type X.509. When reading in public keys, we use the corresponding X.509 functions now. We also discovered that we needed a better naming scheme for the certificates since certificates with the same name would cause issues (overwriting certs, etc.). Now when we download a public certificate, we get the serial number from it and use that as the name of the cached certificate. The configuration option public_key_url in stir_shaken.conf has also been renamed to public_cert_url, which better describes what the option is for. https://wiki.asterisk.org/wiki/display/AST/OpenSIPit+2021 Change-Id: Ia00b20835f5f976e3603797f2f2fb19672d8114d
parent
09303e8e
No related branches found
No related tags found
Showing
- configs/samples/stir_shaken.conf.sample 34 additions, 7 deletionsconfigs/samples/stir_shaken.conf.sample
- doc/UPGRADE-staging/stir-shaken-public-key-url.txt 6 additions, 0 deletionsdoc/UPGRADE-staging/stir-shaken-public-key-url.txt
- include/asterisk/res_stir_shaken.h 4 additions, 4 deletionsinclude/asterisk/res_stir_shaken.h
- res/res_pjsip_stir_shaken.c 9 additions, 9 deletionsres/res_pjsip_stir_shaken.c
- res/res_stir_shaken.c 120 additions, 99 deletionsres/res_stir_shaken.c
- res/res_stir_shaken/certificate.c 12 additions, 12 deletionsres/res_stir_shaken/certificate.c
- res/res_stir_shaken/certificate.h 1 addition, 1 deletionres/res_stir_shaken/certificate.h
- res/res_stir_shaken/curl.c 89 additions, 14 deletionsres/res_stir_shaken/curl.c
- res/res_stir_shaken/curl.h 6 additions, 4 deletionsres/res_stir_shaken/curl.h
- res/res_stir_shaken/stir_shaken.c 73 additions, 3 deletionsres/res_stir_shaken/stir_shaken.c
- res/res_stir_shaken/stir_shaken.h 12 additions, 0 deletionsres/res_stir_shaken/stir_shaken.h
- res/res_stir_shaken/store.c 10 additions, 10 deletionsres/res_stir_shaken/store.c
Loading
Please register or sign in to comment