mirror of
https://github.com/asterisk/asterisk.git
synced 2025-09-21 20:56:39 +00:00
670797e5da
Currently, when using res_srtp, once the SRTP policy has been added to the current session the policy is locked into place. Any attempt to replace an existing policy, which would be needed if the remote endpoint negotiated a new cryptographic key, is instead rejected in res_srtp. This happens in particular in transfer scenarios, where the endpoint that Asterisk is communicating with changes but uses the same RTP session. This patch modifies res_srtp to allow remote and local policies to be reloaded in the underlying SRTP library. From the perspective of users of the SRTP API, the only change is that the adding of remote and local policies are now added in a single method call, whereas they previously were added separately. This was changed to account for the differences in handling remote and local policies in libsrtp. Review: https://reviewboard.asterisk.org/r/1741/ (closes issue ASTERISK-19253) Reported by: Thomas Arimont Tested by: Thomas Arimont Patches: srtp_renew_keys_2012_02_22.diff uploaded by Matt Jordan (license 6283) (with some small modifications for this check-in) ........ Merged revisions 356604 from http://svn.asterisk.org/svn/asterisk/branches/1.8 ........ Merged revisions 356605 from http://svn.asterisk.org/svn/asterisk/branches/10 git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@356606 65c4cc65-6c06-0410-ace0-fbb531ad65f3
69 lines
2.6 KiB
C
69 lines
2.6 KiB
C
/*
|
|
* Asterisk -- An open source telephony toolkit.
|
|
*
|
|
* Copyright (C) 2010 FIXME
|
|
*
|
|
* See http://www.asterisk.org for more information about
|
|
* the Asterisk project. Please do not directly contact
|
|
* any of the maintainers of this project for assistance;
|
|
* the project provides a web site, mailing lists and IRC
|
|
* channels for your use.
|
|
*
|
|
* This program is free software, distributed under the terms of
|
|
* the GNU General Public License Version 2. See the LICENSE file
|
|
* at the top of the source tree.
|
|
*/
|
|
|
|
/*! \file
|
|
* \brief SRTP resource
|
|
*/
|
|
|
|
#ifndef _ASTERISK_RES_SRTP_H
|
|
#define _ASTERISK_RES_SRTP_H
|
|
|
|
struct ast_srtp;
|
|
struct ast_srtp_policy;
|
|
struct ast_rtp_instance;
|
|
|
|
struct ast_srtp_cb {
|
|
int (*no_ctx)(struct ast_rtp_instance *rtp, unsigned long ssrc, void *data);
|
|
};
|
|
|
|
struct ast_srtp_res {
|
|
/*! Create a new SRTP session for an RTP instance with a default policy */
|
|
int (*create)(struct ast_srtp **srtp, struct ast_rtp_instance *rtp, struct ast_srtp_policy *policy);
|
|
/* Replace an existing SRTP session with a new session, along with a new default policy */
|
|
int (*replace)(struct ast_srtp **srtp, struct ast_rtp_instance *rtp, struct ast_srtp_policy *policy);
|
|
/*! Destroy an SRTP session, along with all associated policies */
|
|
void (*destroy)(struct ast_srtp *srtp);
|
|
/* Add a new stream to an existing SRTP session. Note that the policy cannot be for a wildcard SSRC */
|
|
int (*add_stream)(struct ast_srtp *srtp, struct ast_srtp_policy *policy);
|
|
/* Change the source on an existing SRTP session. */
|
|
int (*change_source)(struct ast_srtp *srtp, unsigned int from_ssrc, unsigned int to_ssrc);
|
|
/* Set a callback function */
|
|
void (*set_cb)(struct ast_srtp *srtp, const struct ast_srtp_cb *cb, void *data);
|
|
/* Unprotect SRTP data */
|
|
int (*unprotect)(struct ast_srtp *srtp, void *buf, int *size, int rtcp);
|
|
/* Protect RTP data */
|
|
int (*protect)(struct ast_srtp *srtp, void **buf, int *size, int rtcp);
|
|
/* Obtain a random cryptographic key */
|
|
int (*get_random)(unsigned char *key, size_t len);
|
|
};
|
|
|
|
/* Crypto suites */
|
|
enum ast_srtp_suite {
|
|
AST_AES_CM_128_HMAC_SHA1_80 = 1,
|
|
AST_AES_CM_128_HMAC_SHA1_32 = 2,
|
|
AST_F8_128_HMAC_SHA1_80 = 3
|
|
};
|
|
|
|
struct ast_srtp_policy_res {
|
|
struct ast_srtp_policy *(*alloc)(void);
|
|
void (*destroy)(struct ast_srtp_policy *policy);
|
|
int (*set_suite)(struct ast_srtp_policy *policy, enum ast_srtp_suite suite);
|
|
int (*set_master_key)(struct ast_srtp_policy *policy, const unsigned char *key, size_t key_len, const unsigned char *salt, size_t salt_len);
|
|
void (*set_ssrc)(struct ast_srtp_policy *policy, unsigned long ssrc, int inbound);
|
|
};
|
|
|
|
#endif /* _ASTERISK_RES_SRTP_H */
|