kenmirrors
/
freeswitch
mirror of https://github.com/signalwire/freeswitch.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
freeswitch/libs/sofia-sip/libsofia-sip-ua
History
Michael Jerris 38dabb3635 Thu Jan 15 09:50:45 CST 2009 Jarod Neuner <janeuner@networkharbor.com> 
* TLS Subject Checking in tport
  
  sofia-sip/tport.h:
  * tport_delivered_from_subjects() returns type (su_strlst_t const *)
  * Export tport_subject_search()
  
  sofia-sip/tport_tag.h + tport_tag.c:
  * Remove TPTAG_TLS_VERIFY_PEER()
    - Depreciated.  Use TPTAG_TLS_VERIFY_POLICY instead.
    - Binary Compatibility is preserved.
  * Add TPTAG_TLS_VERIFY_POLICY()
    - tport can verify incoming and/or outgoing connections, using:
      1) Certificate Signatures only - or - 
      2) Certificate Signatures and Certificate Subjects
  * Add TPTAG_TLS_VERIFY_DEPTH()
    - Restrict certificate chain verification to a set length.
  * Add TPTAG_TLS_VERIFY_DATE()
    - Disable notBefore/notAfter checking (application: embedded devices)
  * Add TPTAG_TLS_VERIFY_SUBJECTS()
    - Incoming connections must present client certificates with subjects
      that match an item in this list.
    - Intended Use: Proxy Authentication
  * Replaced TPTAG_TRUSTED() with TPTAG_X509_SUBJECT()
    - Commented out for future use.
    - Intended Use: SIP User Identities in Server Certificates.
  * Add appropriate doxygen documentation.
  
  tport.c
  * Add tport_subject_search()
    - Subject can be a hostname, IP Address, or a URI.
    - Valid subject examples include:
        example.com
        alice@example.com
        sip:alice@example.com
        sips:alice@example.com
  * tport_by_addrinfo() matches tpn_canon against the subject list
      of reusable TLS connections.
  
  tport_tls.h:
  * Add tls_init_secondary()
  * Remove tls_init_slave() & tls_init_client()
  
  tport_tls.c:
  * tls_verify_cb() supports TPTAG_TLS_VERIFY_DATE()
  * tls_post_connection_check() verifies certificate subjects.
  * tls_init_secondary()
    - Replaces tls_init_slave(), tls_init_client(), and tls_clone().
  
  tport_type_tls.c:
  * Removed erroneous reference to tport_tls_deliver()
  * Fix a memory leak caused by duplicate calls to tls_clone().
  * Populate the (tport_t *)->tp_subjects field with peer certificate data for
    new secondary connections.



git-svn-id: http://svn.freeswitch.org/svn/freeswitch/trunk@11830 d0543943-73ff-0310-b7d9-9358b9ac24b2
 		2009-02-11 17:03:59 +00:00
..
bnf Tue Jan 13 15:03:25 CST 2009 Pekka Pessi <first.last@nokia.com> 2009-02-11 16:55:27 +00:00
docs Thu Jan 15 09:33:08 CST 2009 Pekka Pessi <first.last@nokia.com> 2009-02-11 17:02:55 +00:00
features merge whitespace fixes from sofia-sip tree 2008-12-16 18:05:22 +00:00
http Thu Jan 8 12:14:14 CST 2009 Pekka Pessi <first.last@nokia.com> 2009-02-11 16:46:25 +00:00
ipt merge whitespace fixes from sofia-sip tree 2008-12-16 18:05:22 +00:00
iptsec Fri Jan 9 14:51:02 CST 2009 Pekka Pessi <first.last@nokia.com> 2009-02-11 16:53:49 +00:00
msg Thu Jan 15 06:48:04 CST 2009 Pekka Pessi <first.last@nokia.com> 2009-02-11 17:02:00 +00:00
nea Thu Jan 8 15:03:28 CST 2009 Pekka Pessi <first.last@nokia.com> 2009-02-11 16:51:14 +00:00
nta Wed Jan 14 06:35:56 CST 2009 Pekka Pessi <first.last@nokia.com> 2009-02-11 17:01:43 +00:00
nth Thu Jan 8 14:29:39 CST 2009 Pekka Pessi <first.last@nokia.com> 2009-02-11 16:48:40 +00:00
nua Tue Jan 13 16:23:40 CST 2009 Pekka Pessi <first.last@nokia.com> 2009-02-11 17:01:12 +00:00
sdp Thu Jan 8 13:00:38 CST 2009 Pekka Pessi <first.last@nokia.com> 2009-02-11 16:47:14 +00:00
sip Thu Jan 15 09:38:34 CST 2009 Bernhard Suttner <bernhard DOT suttner AT comdasys DOT com> 2009-02-11 17:03:30 +00:00
soa Thu Jan 8 13:57:46 CST 2009 Pekka Pessi <first.last@nokia.com> 2009-02-11 16:48:09 +00:00
sresolv Thu Jan 8 15:12:28 CST 2009 Pekka Pessi <first.last@nokia.com> 2009-02-11 16:51:44 +00:00
stun merge whitespace fixes from sofia-sip tree 2008-12-16 18:05:22 +00:00
su Tue Jan 13 16:23:09 CST 2009 Pekka Pessi <first.last@nokia.com> 2009-02-11 17:00:42 +00:00
tport Thu Jan 15 09:50:45 CST 2009 Jarod Neuner <janeuner@networkharbor.com> 2009-02-11 17:03:59 +00:00
url merge whitespace fixes from sofia-sip tree 2008-12-16 18:05:22 +00:00
ChangeLog merge whitespace fixes from sofia-sip tree 2008-12-16 18:05:22 +00:00
Makefile.am Tue Jan 13 10:10:10 CST 2009 Pekka Pessi <first.last@nokia.com> 2009-02-11 16:56:03 +00:00
sofia.am update to latest darcs sofia 2007-01-02 15:11:55 +00:00