From b5979e2cb4365ff3d0d672bca3718b693d17fc87 Mon Sep 17 00:00:00 2001
From: Asterisk Development Team <asteriskteam@digium.com>
Date: Wed, 20 Dec 2023 16:19:20 +0000
Subject: [PATCH] Update for certified-18.9-cert7

---
 .version                                     |  2 +-
 CHANGES.md                                   |  2 +-
 ChangeLogs/ChangeLog-certified-18.9-cert7.md | 68 ++++++++++++++++++++
 3 files changed, 70 insertions(+), 2 deletions(-)
 create mode 100644 ChangeLogs/ChangeLog-certified-18.9-cert7.md

diff --git a/.version b/.version
index 2f34afc1b7..e05bd8de7a 100644
--- a/.version
+++ b/.version
@@ -1 +1 @@
-certified-18.9-cert6
+certified-18.9-cert7
diff --git a/CHANGES.md b/CHANGES.md
index 3abf7e157b..9f3dcc0ce0 120000
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -1 +1 @@
-ChangeLogs/ChangeLog-certified-18.9-cert6.md
\ No newline at end of file
+ChangeLogs/ChangeLog-certified-18.9-cert7.md
\ No newline at end of file
diff --git a/ChangeLogs/ChangeLog-certified-18.9-cert7.md b/ChangeLogs/ChangeLog-certified-18.9-cert7.md
new file mode 100644
index 0000000000..fb17960f75
--- /dev/null
+++ b/ChangeLogs/ChangeLog-certified-18.9-cert7.md
@@ -0,0 +1,68 @@
+
+Change Log for Release asterisk-certified-18.9-cert7
+========================================
+
+Links:
+----------------------------------------
+
+ - [Full ChangeLog](https://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-certified-18.9-cert7.md)  
+ - [GitHub Diff](https://github.com/asterisk/asterisk/compare/certified-18.9-cert6...certified-18.9-cert7)  
+ - [Tarball](https://downloads.asterisk.org/pub/telephony/asterisk/asterisk-certified-18.9-cert7.tar.gz)  
+ - [Downloads](https://downloads.asterisk.org/pub/telephony/asterisk)  
+
+Summary:
+----------------------------------------
+
+- res_rtp_asterisk: Fix regression issues with DTLS client check
+
+User Notes:
+----------------------------------------
+
+
+Upgrade Notes:
+----------------------------------------
+
+
+Closed Issues:
+----------------------------------------
+
+  - #500: [bug regression]: res_rtp_asterisk doesn't build if pjproject isn't used
+  - #503: [bug]: The res_rtp_asterisk DTLS check against ICE candidates fails when it shouldn't
+  - #505: [bug]: res_pjproject: ast_sockaddr_cmp() always fails on sockaddrs created by ast_sockaddr_from_pj_sockaddr()
+
+Commits By Author:
+----------------------------------------
+
+- ### George Joseph (1):
+  - res_rtp_asterisk: Fix regression issues with DTLS client check
+
+
+Detail:
+----------------------------------------
+
+- ### res_rtp_asterisk: Fix regression issues with DTLS client check
+  Author: George Joseph  
+  Date:   2023-12-15  
+
+  * Since ICE candidates are used for the check and pjproject is
+    required to use ICE, res_rtp_asterisk was failing to compile
+    when pjproject wasn't available.  The check is now wrapped
+    with an #ifdef HAVE_PJPROJECT.
+
+  * The rtp->ice_active_remote_candidates container was being
+    used to check the address on incoming packets but that
+    container doesn't contain peer reflexive candidates discovered
+    during negotiation. This was causing the check to fail
+    where it shouldn't.  We now check against pjproject's
+    real_ice->rcand array which will contain those candidates.
+
+  * Also fixed a bug in ast_sockaddr_from_pj_sockaddr() where
+    we weren't zeroing out sin->sin_zero before returning.  This
+    was causing ast_sockaddr_cmp() to always return false when
+    one of the inputs was converted from a pj_sockaddr, even
+    if both inputs had the same address and port.
+
+  Resolves: #500
+  Resolves: #503
+  Resolves: #505
+
-- 
GitLab