]> git.ipfire.org Git - thirdparty/asterisk.git/commit
STIR/SHAKEN: Fix certificate type and storage.
authorBen Ford <bford@digium.com>
Wed, 21 Apr 2021 16:12:55 +0000 (11:12 -0500)
committerGeorge Joseph <gjoseph@digium.com>
Tue, 11 May 2021 14:29:57 +0000 (09:29 -0500)
commit259ecfa289dda9d75d1a2e384fe26ffda86f9e67
treef071d23579c3977054e452fbb201d6d4c9c7fb5e
parent09303e8e227ece6da4253f55acf397c4f9bf2842
STIR/SHAKEN: Fix certificate type and storage.

During OpenSIPit, we found out that the public certificates must be of
type X.509. When reading in public keys, we use the corresponding X.509
functions now.

We also discovered that we needed a better naming scheme for the
certificates since certificates with the same name would cause issues
(overwriting certs, etc.). Now when we download a public certificate, we
get the serial number from it and use that as the name of the cached
certificate.

The configuration option public_key_url in stir_shaken.conf has also
been renamed to public_cert_url, which better describes what the option
is for.

https://wiki.asterisk.org/wiki/display/AST/OpenSIPit+2021

Change-Id: Ia00b20835f5f976e3603797f2f2fb19672d8114d
12 files changed:
configs/samples/stir_shaken.conf.sample
doc/UPGRADE-staging/stir-shaken-public-key-url.txt [new file with mode: 0644]
include/asterisk/res_stir_shaken.h
res/res_pjsip_stir_shaken.c
res/res_stir_shaken.c
res/res_stir_shaken/certificate.c
res/res_stir_shaken/certificate.h
res/res_stir_shaken/curl.c
res/res_stir_shaken/curl.h
res/res_stir_shaken/stir_shaken.c
res/res_stir_shaken/stir_shaken.h
res/res_stir_shaken/store.c