Travis Cross [Thu, 6 Feb 2014 15:27:06 +0000 (15:27 +0000)]
Add support for EECDH to Sofia-SIP
This adds support for the ephemeral elliptic curve Diffie-Hellman key
exchange, which provides for forward secrecy in the event that
long-term keys are compromised.
For the moment, we've hard-coded the curve as prime256v1.
Travis Cross [Thu, 6 Feb 2014 00:20:45 +0000 (00:20 +0000)]
Support setting enabled TLS versions in mod_sofia
Previously if tls-version was set to tlsv1 we supported only TLSv1,
but if it was set to sslv23 we supported all versions of TLS. This
was a weird incorrectly documented behavior that we hope no one was
relying on.
Now we can pass a comma-separated list of TLS/SSL versions that we
would like to support in tls-version.
Travis Cross [Thu, 6 Feb 2014 00:18:05 +0000 (00:18 +0000)]
Allow setting enabled TLS versions in Sofia-SIP
Previously if the TPTAG_TLS_VERSION was set to a non-zero value we
supported only TLSv1 (but not TLSv1.1 or TLSv1.2), and if was set to
zero we supported all versions of TLS and SSL (including the
ridiculous SSLv2).
Now we take an integer field where various bits can be set indicating
which versions of TLS we would like to support.
FS-5544 after going over this with a fine tooth comb, all I could find was some issues behind asymetrical nat. If there is a real problem here, post the flipping logs I asked for days ago.......
Travis Cross [Sat, 1 Feb 2014 15:39:28 +0000 (15:39 +0000)]
Improve configure handling of ODBC
This commit changes behavior such that if --disable-core-odbc-support
is provided we'll build without ODBC even if the libraries are there.
Previously we would always quietly build with ODBC support if it was
on the system.
Contrary to what was said in commit 72a804983, my 2012 commit ffc8e81b7 did not affect the behavior of --disable-core-odbc-support.
We never recognized the flag as being different from not providing the
option at all.
What the commit did do was to cause us to fail loudly if
--enable-core-odbc-support was provided but the system libraries were
not there. This behavior is preserved.
(That commit also caused us to potentially run certain checks twice,
which this commit resolves.)
You can also now provide --enable-core-odbc-support=optional which has
the same effect as the default behavior.
FS-6173 --resolve
Thanks-to: James Le Cuirot <chewi@aura-online.co.uk>
Moises Silva [Wed, 29 Jan 2014 00:07:34 +0000 (19:07 -0500)]
Fix ESL infinite loop on handle_recv() when errno is already set
system calls do not clear errno, just set it in case of failure, so we
gotta make sure the recv() syscall really failed by checking the return value
James Le Cuirot [Fri, 10 Jan 2014 14:37:41 +0000 (14:37 +0000)]
Fix --disable-core-odbc-support
In commit ffc8e81b763c4e11e02309b99e2a4b4aa666e845, tc ensured that
configure would abort if libodbc was not found. However this resulted
in the library check being done twice, as well as rendering
--disable-core-odbc-support ineffective. If libodbc was found, it
would enable core ODBC support regardless. This fix ensures the check
is only done once or not at all if core ODBC support is explicitly
disabled.
James Le Cuirot [Fri, 10 Jan 2014 13:34:09 +0000 (13:34 +0000)]
mod_rayo: Translate XMPP messages to SIP messages
Call-bound XMPP messages are translated to SIP messages via
SWITCH_EVENT_SEND_MESSAGE in a similar manner to that described in
draft-ietf-stox-im-06. Messages with a type of "normal" are directed
to the caller. Other types receive a feature-not-implemented response
but it is envisaged that the "groupchat" type could be used to direct
the message to all joined parties.
add more rtp statistics with several new vars for cdr processing in_jitter_min_variance in_jitter_max_variance in_jitter_loss_rate in_jitter_burst_rate in_mean_interval in_flaw_total in_quality_percentage in_mos
Michael Jerris [Wed, 29 Jan 2014 21:59:46 +0000 (16:59 -0500)]
revert previous change that does not correct the issue. opened a bug with apple on this issue https://bugreport.apple.com/problem/viewproblem #15938497