]> git.ipfire.org Git - thirdparty/asterisk.git/commit
Add SHA-256 and SHA-512-256 as authentication digest algorithms
authorGeorge Joseph <gjoseph@sangoma.com>
Thu, 17 Oct 2024 14:02:08 +0000 (08:02 -0600)
committerasterisk-org-access-app[bot] <120671045+asterisk-org-access-app[bot]@users.noreply.github.com>
Fri, 10 Jan 2025 16:21:24 +0000 (16:21 +0000)
commit71a2e8c5998a1520ddc1ea2756c61c611a0d419e
treeffb9c7657eaa8fb9a08fef548d356d600bfec538
parent22b261575fdcafe31f62eff470ce9a9748a53beb
Add SHA-256 and SHA-512-256 as authentication digest algorithms

* Refactored pjproject code to support the new algorithms and
added a patch file to third-party/pjproject/patches

* Added new parameters to the pjsip auth object:
  * password_digest = <algorithm>:<digest>
  * supported_algorithms_uac = List of algorithms to support
    when acting as a UAC.
  * supported_algorithms_uas = List of algorithms to support
    when acting as a UAS.
  See the auth object in pjsip.conf.sample for detailed info.

* Updated both res_pjsip_authenticator_digest.c (for UAS) and
res_pjsip_outbound_authentocator_digest.c (UAC) to suport the
new algorithms.

The new algorithms are only available with the bundled version
of pjproject, or an external version > 2.14.1.  OpenSSL version
1.1.1 or greater is required to support SHA-512-256.

Resolves: #948

UserNote: The SHA-256 and SHA-512-256 algorithms are now available
for authentication as both a UAS and a UAC.
15 files changed:
configs/samples/pjsip.conf.sample
configure
configure.ac
contrib/ast-db-manage/config/versions/abdc9ede147d_add_fields_to_ps_auths_to_support_new_.py [new file with mode: 0644]
include/asterisk/autoconfig.h.in
include/asterisk/res_pjsip.h
res/res_pjproject.c
res/res_pjsip/config_auth.c
res/res_pjsip/config_global.c
res/res_pjsip/pjsip_config.xml
res/res_pjsip/pjsip_distributor.c
res/res_pjsip_authenticator_digest.c
res/res_pjsip_outbound_authenticator_digest.c
third-party/pjproject/configure.m4
third-party/pjproject/patches/config_site.h