Kinsey Moore 45a52de0f0 Ensure Asterisk fails TCP/TLS SIP calls when certificate checking fails ...

When placing a call to a TCP/TLS SIP endpoint whose certificate is not
signed by a configured CA certificate, Asterisk would issue a warning
and continue to process the call as if there was not an issue with the
certificate.  Asterisk now properly fails the call if the certificate
fails verification or if the certificate does not exist when
certificate checking is enabled (the default behavior).

(closes issue ASTERISK-20559)
Reported by: kmoore

Review: https://reviewboard.asterisk.org/r/2163/


git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.8@375146 65c4cc65-6c06-0410-ace0-fbb531ad65f3

2012-10-17 18:55:44 +00:00

..

db1-ast

Coverity Report: Fix issues for error type REVERSE_INULL (core modules)

2012-05-31 18:00:59 +00:00

editline

Fix a variety of memory leaks

2012-05-18 13:58:23 +00:00

stdtime

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

abstract_jb.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

acl.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

adsi.c

Fix crash in unloading of res_adsi module

2012-06-26 13:21:13 +00:00

alaw.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

aoc.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

app.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

ast_expr2.c

Rebuild parsers.

2012-03-24 02:34:39 +00:00

ast_expr2.fl

Merged revisions 309251 via svnmerge from

2011-03-07 00:54:42 +00:00

ast_expr2.h

Rebuild parsers.

2012-03-24 02:34:39 +00:00

ast_expr2.y

expression parser: Fix (theoretical) memory leak.

2012-03-24 02:33:36 +00:00

ast_expr2f.c

Rebuild parsers.

2012-03-24 02:34:39 +00:00

asterisk.c

Ensure Shutdown AMI event is still fired during Asterisk shutdown

2012-10-02 20:54:16 +00:00

asterisk.dynamics

Remove the old stub files, preferring the optional_api method.

2010-07-14 20:48:59 +00:00

asterisk.exports.in

Export timersub for platforms which do not have it

2010-09-24 03:42:37 +00:00

astfd.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

astmm.c

Fix MALLOC_DEBUG version of ast_strndup().

2012-09-07 23:05:21 +00:00

astobj2.c

Constify __ao2_ref_debug in astobj2

2012-09-12 15:42:35 +00:00

audiohook.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

autochan.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

autoservice.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

bridging.c

Fix bridging thread leak.

2012-07-06 15:20:11 +00:00

buildinfo.c

…

callerid.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

ccss.c

Fix some potential misuses of ast_str in the code.

2012-10-15 21:00:03 +00:00

cdr.c

Fix incorrect billing duration reported when batch mode is enabled

2012-10-11 15:42:50 +00:00

cel.c

Fix a variety of ref counting issues

2012-10-02 00:31:14 +00:00

channel.c

Fix a variety of ref counting issues

2012-10-02 00:31:14 +00:00

chanvars.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

cli.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

config.c

Handle integer over/under-flow in ast_parse_args

2012-08-16 22:30:12 +00:00

cygload.c

…

data.c

Fix a variety of ref counting issues

2012-10-02 00:31:14 +00:00

datastore.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

db.c

Fix DBDelTree error codes for AMI, CLI and AGI

2012-10-04 15:25:50 +00:00

devicestate.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

dial.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

dns.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

dnsmgr.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

dsp.c

dsp.c User Configurable DTMF_HITS_TO_BEGIN and DTMF_MISSES_TO_END

2012-10-04 20:15:35 +00:00

ecdisa.h

…

enum.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

event.c

Fix a variety of ref counting issues

2012-10-02 00:31:14 +00:00

features.c

Fix a variety of ref counting issues

2012-10-02 00:31:14 +00:00

file.c

Fix misuses of asprintf throughout the code.

2012-08-21 20:35:12 +00:00

fixedjitterbuf.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

fixedjitterbuf.h

…

frame.c

Rewrite a comment that didn't adequately explain the code it was documenting.

2012-07-24 16:53:39 +00:00

framehook.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

fskmodem_float.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

fskmodem_int.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

fskmodem.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

global_datastores.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

hashtab.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

heap.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

http.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

image.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

indications.c

Fix a variety of ref counting issues

2012-10-02 00:31:14 +00:00

io.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

jitterbuf.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

loader.c

loader: Ensure dependent modules are properly initialized.

2012-09-27 16:49:54 +00:00

lock.c

Fixes ast_rwlock_timed[rd|wr]lock for BSD and variants.

2012-08-27 16:40:45 +00:00

logger.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

Makefile

Add OPENSSL_INCLUDE to the CFLAGS for ssl.c and tcptls.c.

2012-09-08 03:54:28 +00:00

manager.c

I've committed too much. Reverting part of r374570.

2012-10-05 20:20:28 +00:00

md5.c

Fix compilation in dev-mode

2012-06-11 14:10:13 +00:00

netsock2.c

Fix NULL pointer segfault in ast_sockaddr_parse()

2012-06-20 02:03:22 +00:00

netsock.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

pbx.c

Fix execution of 'i' extension due to uninitialized variable.

2012-10-09 22:16:34 +00:00

plc.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

poll.c

Merged revisions 285267 via svnmerge from

2010-09-07 19:08:09 +00:00

privacy.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

rtp_engine.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

say.c

Fix saying of date in Dutch.

2012-09-25 23:07:59 +00:00

sched.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

security_events.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

sha1.c

Update SHA1 code to RFC 6234

2011-10-11 00:43:14 +00:00

slinfactory.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

srv.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

ssl.c

Resolve memory leaks in TLS initialization and TLS client connections

2012-09-14 19:07:20 +00:00

strcompat.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

strings.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

stun.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

syslog.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

taskprocessor.c

Fix a variety of ref counting issues

2012-10-02 00:31:14 +00:00

tcptls.c

Ensure Asterisk fails TCP/TLS SIP calls when certificate checking fails

2012-10-17 18:55:44 +00:00

tdd.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

term.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

test.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

threadstorage.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

timing.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

translate.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

udptl.c

Ignore recovered zero-length secondary UDPTL packets

2012-08-20 15:25:43 +00:00

ulaw.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

utils.c

Implement workaround for BETTER_BACKTRACES crash

2012-08-27 13:43:23 +00:00

xml.c

Add support-level indications to many more source files.

2012-06-15 15:56:08 +00:00

xmldoc.c

Fix misuses of asprintf throughout the code.

2012-08-21 20:35:12 +00:00