]> git.ipfire.org Git - thirdparty/asterisk.git/commit
AST-2022-002 - res_stir_shaken/curl: Add ACL checks for Identity header.
authorBen Ford <bford@digium.com>
Mon, 28 Feb 2022 17:19:54 +0000 (11:19 -0600)
committerJoshua Colp <jcolp@sangoma.com>
Thu, 14 Apr 2022 21:59:07 +0000 (16:59 -0500)
commit11accf8064d8ea86ddba50b1065b1d7ade0cbd0c
treef9e2c5d7c9e3e4592507855a1de1de7f610f4ca9
parent39cd09c246ab66f6e6e56f7543230247071ea72b
AST-2022-002 - res_stir_shaken/curl: Add ACL checks for Identity header.

Adds a new configuration option, stir_shaken_profile, in pjsip.conf that
can be specified on a per endpoint basis. This option will reference a
stir_shaken_profile that can be configured in stir_shaken.conf. The type
of this option must be 'profile'. The stir_shaken option can be
specified on this object with the same values as before (attest, verify,
on), but it cannot be off since having the profile itself implies wanting
STIR/SHAKEN support. You can also specify an ACL from acl.conf (along
with permit and deny lines in the object itself) that will be used to
limit what interfaces Asterisk will attempt to retrieve information from
when reading the Identity header.

ASTERISK-29476

Change-Id: I87fa61f78a9ea0cd42530691a30da3c781842406
13 files changed:
configs/samples/pjsip.conf.sample
configs/samples/stir_shaken.conf.sample
include/asterisk/res_pjsip.h
include/asterisk/res_stir_shaken.h
res/res_pjsip/pjsip_config.xml
res/res_pjsip/pjsip_configuration.c
res/res_pjsip_stir_shaken.c
res/res_stir_shaken.c
res/res_stir_shaken/curl.c
res/res_stir_shaken/curl.h
res/res_stir_shaken/profile.c [new file with mode: 0644]
res/res_stir_shaken/profile.h [new file with mode: 0644]
res/res_stir_shaken/profile_private.h [new file with mode: 0644]