]> git.ipfire.org Git - thirdparty/freeswitch.git/commit
projects / thirdparty / freeswitch.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 63eec0e) | patch
FS-10167: Added support for SSL/TLS, specifically enforcing TLS 1.2 currently but...
authorShane Bryldt <astaelan@gmail.com>
Thu, 7 Sep 2017 12:44:16 +0000 (06:44 -0600)
committerShane Bryldt <astaelan@gmail.com>
Thu, 7 Sep 2017 12:44:16 +0000 (06:44 -0600)
commitee8db10a5fc55e51efa04481e563e74e8b9ee1f5
tree1e4da325a68d41c75a8e498dad04a8986e15bf20tree
parent63eec0ee3a57b639fe552b3099bbe6bffd401898commit | diff
FS-10167: Added support for SSL/TLS, specifically enforcing TLS 1.2 currently but could be more configurable later.  Added support for obtaining SANS from X509 certificates within the default wss transport, SANS will be used for preapproved automatically registered identities, currently only being cached on server side for downstream connections providing the remote client upstream certificate SANS, but can also be used by a master to obtain initial master identities from it's own downstream certificate in the future (planned, but not yet implemented) as it is the exception with no upstream and MUST have downstream available. Also added the openssl executable to the projects being built in the libblade solution to provide a windows executable for certificate production when required.
49 files changed:
libs/libblade/libblade.sln diff | blob | blame | history
libs/libblade/src/blade_transport_wss.c diff | blob | blame | history
libs/libblade/switchblade/switchblade.cfg diff | blob | blame | history
libs/libblade/test/ca/certs/ca.cert.pem [new file with mode: 0644] blob
libs/libblade/test/ca/index.txt [new file with mode: 0644] blob
libs/libblade/test/ca/index.txt.attr [new file with mode: 0644] blob
libs/libblade/test/ca/index.txt.old [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/certs/ca-chain.cert.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/certs/client@freeswitch-upstream.cert.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/certs/controller@freeswitch-downstream.cert.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/certs/controller@freeswitch-upstream.cert.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/certs/intermediate.cert.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/certs/master@freeswitch-downstream.cert.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/cnf/client@freeswitch-upstream.cnf [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/cnf/controller@freeswitch-upstream.cnf [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/cnf/master@freeswitch-downstream.cnf [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/crlnumber [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/csr/client@freeswitch-upstream.csr.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/csr/controller@freeswitch-downstream.csr.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/csr/controller@freeswitch-upstream.csr.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/csr/intermediate.csr.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/csr/master@freeswitch-downstream.csr.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/index.txt [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/index.txt.attr [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/index.txt.attr.old [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/index.txt.old [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/newcerts/1000.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/newcerts/1001.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/newcerts/1002.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/newcerts/1003.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/openssl.cnf [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/private/client@freeswitch-upstream.key.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/private/controller@freeswitch-downstream.key.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/private/controller@freeswitch-upstream.key.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/private/intermediate.key.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/private/master@freeswitch-downstream.key.pem [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/serial [new file with mode: 0644] blob
libs/libblade/test/ca/intermediate/serial.old [new file with mode: 0644] blob
libs/libblade/test/ca/newcerts/1000.pem [new file with mode: 0644] blob
libs/libblade/test/ca/openssl.cnf [new file with mode: 0644] blob
libs/libblade/test/ca/private/ca.key.pem [new file with mode: 0644] blob
libs/libblade/test/ca/serial [new file with mode: 0644] blob
libs/libblade/test/ca/serial.old [new file with mode: 0644] blob
libs/libblade/test/testcli.cfg diff | blob | blame | history
libs/libblade/test/testcon.cfg diff | blob | blame | history
libs/libks/src/include/ks_ssl.h diff | blob | blame | history
libs/libks/src/include/kws.h diff | blob | blame | history
libs/libks/src/ks_ssl.c diff | blob | blame | history
libs/libks/src/kws.c diff | blob | blame | history
Mirror of https://github.com/signalwire/freeswitch.git