]> git.ipfire.org Git - thirdparty/asterisk.git/commit
Add SHA-256 and SHA-512-256 as authentication digest algorithms
authorGeorge Joseph <gjoseph@sangoma.com>
Thu, 17 Oct 2024 14:02:08 +0000 (08:02 -0600)
committerGeorge Joseph <gjoseph@sangoma.com>
Fri, 10 Jan 2025 16:21:21 +0000 (16:21 +0000)
commit7dc9d85f2bf12f5e39530fc26786f4405d82c86b
tree925c3d193775f9d22def3dccf22273c66a3f3289
parent1cb741df4aaa3588281f1c19524822b89bce61ae
Add SHA-256 and SHA-512-256 as authentication digest algorithms

* Refactored pjproject code to support the new algorithms and
added a patch file to third-party/pjproject/patches

* Added new parameters to the pjsip auth object:
  * password_digest = <algorithm>:<digest>
  * supported_algorithms_uac = List of algorithms to support
    when acting as a UAC.
  * supported_algorithms_uas = List of algorithms to support
    when acting as a UAS.
  See the auth object in pjsip.conf.sample for detailed info.

* Updated both res_pjsip_authenticator_digest.c (for UAS) and
res_pjsip_outbound_authentocator_digest.c (UAC) to suport the
new algorithms.

The new algorithms are only available with the bundled version
of pjproject, or an external version > 2.14.1.  OpenSSL version
1.1.1 or greater is required to support SHA-512-256.

Resolves: #948

UserNote: The SHA-256 and SHA-512-256 algorithms are now available
for authentication as both a UAS and a UAC.
15 files changed:
configs/samples/pjsip.conf.sample
configure
configure.ac
contrib/ast-db-manage/config/versions/abdc9ede147d_add_fields_to_ps_auths_to_support_new_.py [new file with mode: 0644]
include/asterisk/autoconfig.h.in
include/asterisk/res_pjsip.h
res/res_pjproject.c
res/res_pjsip/config_auth.c
res/res_pjsip/config_global.c
res/res_pjsip/pjsip_config.xml
res/res_pjsip/pjsip_distributor.c
res/res_pjsip_authenticator_digest.c
res/res_pjsip_outbound_authenticator_digest.c
third-party/pjproject/configure.m4
third-party/pjproject/patches/config_site.h